What is sqlmap?
SQLMap is a tool to exploit the SQL injection vulnerability. This tool automates the attack in order to exploit the page.
sqlmap installation
To begin with I would like to leave the official page here: http: // sqlmap.org /
Sqlmap is a tool that works in python in its versions: 2.6, 2.7 and 3.x on all platforms, so there is no problem to use it, personally I have used it in windows, linux and in termux and it works excellent in all of them.
The first thing we have to do is have git installed to be able to clone its official repository to our device, the site in git is the following:
https://github.com/sqlmapproject/sqlmap.git
to clone it we use the following:
git clone — depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
Once we have cloned the repository, we go to the sqlmap-dev
folder and execute the sqlmap.py
file:
python sqlmap.py
Basic use of sqlmap
To see the help options for this tool, just use the following:
sqlmap.py -h
What will return the basic options to make a correct use of this tool, something that must be understood well is the correct order of execution to add the options: