TiloBox
Back to directory
sqlmap project preview
Developer ToolsAlternative to InvictiAlternative to Burp SuiteAlternative to Acunetix

sqlmap

Automatic SQL injection and database takeover penetration testing tool.

View on GitHub Visit website
LicenseGPL-2.0
GitHub stars33.0k
Last commit1 weeks ago
Tags6 topics
Security AuditPentestingSql InjectionVulnerability ScannerPythonSecurity
Overview

Why consider sqlmap?

sqlmap is an open-source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over database servers across MySQL, Oracle, PostgreSQL, and MSSQL.

Guided learning

Learn sqlmap by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

1 min read 2 sections
In this guide2 sections

Overview of sqlmap

sqlmap comes with a powerful detection engine and broad fingerprinting options for database penetration testing.

Quickstart

bash
1git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
2python3 sqlmap.py -u "http://example.com/item.php?id=1" --dbs

sqlmap is licensed under the GNU General Public License v2.0 (GPL-2.0).

Related tools

More options with a similar category or technology profile.

diskus logo

diskus

Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.

peco logo

peco

Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.

Dapr CLI logo

Dapr CLI

Command-line tool for managing Dapr distributed application runtime environments and sidecars.

Freeze logo

Freeze

Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.

sqlmap FAQs

sqlmap is listed as a Developer Tools tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

sqlmap is listed under the GPL-2.0 license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

sqlmap is listed as an alternative to Invicti. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.