Automated sql injections using SQLMAP

_Y000_
11 min readJan 12, 2021

What is sqlmap?

SQLMap is a tool to exploit the SQL injection vulnerability. This tool automates the attack in order to exploit the page.

sqlmap installation

To begin with I would like to leave the official page here: http: // sqlmap.org /

Sqlmap is a tool that works in python in its versions: 2.6, 2.7 and 3.x on all platforms, so there is no problem to use it, personally I have used it in windows, linux and in termux and it works excellent in all of them.

The first thing we have to do is have git installed to be able to clone its official repository to our device, the site in git is the following:

https://github.com/sqlmapproject/sqlmap.git

to clone it we use the following:

git clone — depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev

Once we have cloned the repository, we go to the sqlmap-dev folder and execute the sqlmap.py file:

python sqlmap.py

Basic use of sqlmap

To see the help options for this tool, just use the following:

sqlmap.py -h

What will return the basic options to make a correct use of this tool, something that must be understood well is the correct order of execution to add the options:

--

--

_Y000_
_Y000_

Written by _Y000_

Hola, Bienvenido a mi perfil de Medium! Soy Y000! 😊 ¿Quién soy? 🤔 Bueno… soy yo jaja soy solo un apasionado por la seguridad informatica.

No responses yet