Web & API
sqlmap
Automated SQL injection detection and confirmation against in-scope parameters.
What it is
sqlmap is for authorized confirmation of injection after a manual or scanner lead. Keep risk and level low, use a dedicated test database user when the client can provide one, and stop at detection or a single in-band proof — no file-read, no OS takeover, no --os-shell unless the RoE is explicit.
Reach for it when
A parameter on an in-scope web or API target has a credible injection lead and the RoE allows automated confirmation.
Watch-outs
Default options can dump tables and hammer the DB. Never run against production ePHI/PAN stores. No stacked queries, no privilege escalation, no persistence. Coordinate with the DBA; have a kill path.
Typical invocation
sqlmap -u 'https://app.example/item?id=1' --batch --level=1 --risk=1 --technique=BEUST
Authorized assessments only. Stay inside the rules of engagement.
Pin to a kit
Open an engagement first.
Related
- Burp Suite
Intercepting proxy and scanner for authorized web and API testing, mapping, and manual review.
- nuclei
Template-based vulnerability scanner for known issues on in-scope web, API, and network services.
- ffuf
Fast web fuzzer for content discovery and parameter enumeration on in-scope applications.