18 January 2008 | 12,951 views

sqlmap 0.5 – Automated SQL Injection Tool

Want to Learn Penetration Testing

sqlmap is an automatic SQL injection tool entirely developed in Python. It is capable to perform an extensive database management system back-end fingerprint, retrieve remote DBMS databases, usernames, tables, columns, enumerate entire DBMS, read system files and much more taking advantage of web application programming security flaws that lead to SQL injection vulnerabilities.

Features

  • Full support for MySQL, Oracle, PostgreSQL and Microsoft SQL Server database management system back-end.
  • Can also identify Microsoft Access, DB2, Informix and Sybase;
  • Extensive database management system back-end fingerprint based upon:
  • - Inband DBMS error messages
  • – DBMS banner parsing
  • – DBMS functions output comparison
  • – DBMS specific features such as MySQL comment injection
  • – Passive SQL injection fuzzing
  • It fully supports two SQL injection techniques:
  • – Blind SQL injection, also known as Inference SQL injection
  • – Inband SQL injection, also known as UNION query SQL injection


You can find the documentation here:

sqlmap README (HTML and PDF)

You can download sqlmap 0.5 here:

sqlmap-0.5 (tar/zip)

Or read more here.

Post to Twitter Post to Facebook Post to Google Buzz Post to Delicious Post to Digg Post to Reddit Post to StumbleUpon


Tags: , , , , , , ,


# Posted in: Database Hacking, Hacking Tools | * 5 Comments


Recent in Database Hacking:
- The Mole – Automatic SQL Injection SQLi Exploitation Tool
- sqlsus 0.7.1 Released – MySQL Injection & Takeover Tool
- w3af v1.1 Released For Download – Web Application Attack & Audit Framework

Related Posts:
- sqlmap 0.7 Released – Automatic SQL Injection Tool
- sqlmap 0.6.1 released – Automatic SQL Injection Tool
- sqlmap 0.9 Released – Automatic Blind SQL Injection Tool

Most Read in Database Hacking:
- Pangolin – Automatic SQL Injection Tool - 54,588 views
- bsqlbf 1.1 – Blind SQL Injection Tool - 51,221 views
- Absinthe Blind SQL Injection Tool/Software - 35,475 views

Advertise on Darknet


5 Responses to “sqlmap 0.5 – Automated SQL Injection Tool”

  1. goodpeople 20 January 2008 at 1:44 pm Permalink

    The zip link appears to be broken..

  2. Darknet 20 January 2008 at 7:38 pm Permalink

    I just tested the zip download, works fine here?

  3. goodpeople 20 January 2008 at 9:22 pm Permalink

    @darknet,

    might be the swiss mirror. The tar-ball is ok. Hope to have some time to play with it tomorrow.

  4. Sir Henry 21 January 2008 at 4:11 pm Permalink

    I was able to get the tar ball and have run some prelim tests. Seeing as my SQLinjection chops are a bit rusty, I will still need to play around with it and get back to you with my thoughts. What I do like, however, is that the README is A) in pdf and html and B) very thorough.

  5. eM3rC 7 February 2008 at 5:43 am Permalink

    Ive heard this program mentioned on a couple of forums. Very cool idea. Thanks for the post Darknet!