130  sqlmap(1) - Kailash Tool Reference

130.1 sqlmap

sqlmap - Automatic SQL injection and database takeover tool.

Layer CLASSIC
Category c-04-database-assessment
Safety class safe
Licence GPL-2.0-or-later
Upstream github.com/sqlmapproject/sqlmap

130.1.1 NAME

sqlmap - Automatic SQL injection and database takeover tool.

130.1.2 SYNOPSIS

Not derived automatically - see upstream documentation. This page does not hand-copy flags (generation contract, ADR-0001).

130.1.3 DESCRIPTION (upstream)

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switches including database fingerprinting, over data fetching from the database, accessing the underlying file system, and executing commands on the operating system via out-of-band connections. Screenshots You can visit the collection of screenshots demonstrating some of the features on the wiki. Installation You can download the latest tarball by click

130.1.4 CONFIGURATION (detected)

Config-surface markers detected in the upstream README (3 matches, e.g. tests.yml, tests.yml). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.

130.1.5 SEE ALSO

ref: pin - verified 2026-10-14