Sqlmap
Automatic SQL injection and database takeover tool
Ranked #6 in Best penetration testing tools.
Sqlmap is an open-source automation tool for detecting and exploiting SQL injection flaws. It empowers serious penetration testers to take over databases behind vulnerable applications.
At a glance
| Best for | Penetration testers |
From Sqlmap's own website.
Company facts
| Social profiles | X |
| Brand colour | #0e1118 |
What stands out
The product supports over forty database backends including cloud data warehouses.
“Support for 40+ database backends — both traditional relational engines (MySQL, Oracle,”Sqlmap, own website
Sqlmap can read the file system and execute commands on the operating system.
“Read and write the underlying file system, execute commands on the operating system where the backend permits,”Sqlmap, own website
Worth knowing
The GPLv2 copyleft obligations extend to products that embed it.
“Copyleft obligations extend to products that embed it”Sqlmap, own website
How it ranks
Sqlmap is ranked 6th of 10 in Best penetration testing tools (Lister Score 82.0).
#6 in Best penetration testing tools · Lister Score 82.0
Supports over forty database backends including cloud data warehouses.
How the score is made up: fit to this ranking's criteria 40; evidence on its own site 20; how complete its published information is 18; buying information on its own site 4.
“A powerful detection engine paired with a deep arsenal for the serious penetration tester — from fingerprinting the backend to measuring real risk by exploiting what it finds.”Sqlmap, own website
| Rank | Best penetration testing tools | Score |
|---|---|---|
| 1 | Pentest-Tools.com | 98.0 |
| 2 | Picus Security | 86.0 |
| 3 | HackerOne | 84.0 |
| 4 | Kali Linux | 82.0 |
| 5 | Lockwell | 82.0 |
| 6 | Sqlmap | 82.0 |
| 7 | Metasploit | 80.0 |
| 8 | PortSwigger | 80.0 |
| 9 | Horizon3.ai | 78.0 |
| 10 | Nmap | 78.0 |
Frequently asked questions
How does Sqlmap rank on Lister?
Sqlmap is ranked 6th of 10 in Best penetration testing tools (Lister Score 82.0).