SQLMap
SQLMap is an automated tool for detecting and exploiting SQL injection vulnerabilities in web applications. It simplifies the process of identifying these vulnerabilities. This tool is built into some Linux distributions, but you can easily install it if it's not.
As this is a command-line tool, you must open your Linux OS terminal to use it. The --help command with SQLMap will list all the available flags you can use. If you don't want to manually add the flags to each command, use the --wizard flag with SQLMap. When you use this flag, the tool will guide you through each step and ask questions to complete the scan, making this a perfect option for beginners.
Helpful Commands
// Wizard setup
sqlmap --wizard
// Testing URL (GET Request)
sqlmap -u http://example.com/search/user=5| Flag | Description |
|---|---|
| --dbs | shows all databases |
| -D <db> | selects a database |
| --tables | shows tables of a database |
| -T <table> | selects a table |
| --dump | get the rows of a table |
| -r <file.txt> | save input to a text file |
| --level <i> | the higher the level, the more in-depth the scan, use this if there is no output |