sqlmap
Some data may be outdated — see provenance labels.
Automatic SQL injection and database takeover tool observed · 2026-09-29
Health v2 · maintenance only
72/100
- Activity 97
- Release rhythm 24
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 364
- age_days: 5229
- days_rel: 292
- days_push: 22
- n_releases_24m: 2
Adoption not part of the score
38549 stars · 6377 forks observed · 2026-09-29
What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-28, confidence 0.99
sqlmap is an open‑source command‑line tool that automates detection and exploitation of SQL injection flaws. It can fingerprint databases, enumerate schemas, exfiltrate data, and even execute commands on the underlying operating system.
Use cases
- detect SQL injection vulnerabilities in web applications
- automatically enumerate database schemas via injection
- exfiltrate sensitive data from vulnerable databases
- execute OS commands on a compromised database server
- perform bulk testing of multiple URLs for SQLi flaws
When to choose
- You need a mature, widely‑used tool for automated SQL injection testing.
- You want a single command‑line interface that supports many DBMSs and injection techniques.
- You require features like fingerprinting, data extraction, and OS command execution.
When to avoid
- You lack proper authorization to test target systems.
- You need a graphical interface or integration into a CI pipeline without custom scripting.
- You are looking for a lightweight library to embed in custom code rather than a standalone tool.
Facets
cli-tool · maturity active
security penetration-testing vulnerability-scanning security web-development windows cross-platform python sql-injection database-takeover pentest automated-testing linux macos
3 sources
- readme: https://github.com/sqlmapproject/sqlmap · fetched 2026-09-29 · c2d335f36389
- homepage: http://sqlmap.org · fetched 2026-09-14 · 746ff4f6f97e
- registry_pypi: https://pypi.org/pypi/sqlmap/json · fetched 2026-09-14 · aae5b6ddb33b
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| sqlmapproject/sqlmap | main | 72 |
| sqlmapproject/udfhack | plugin | 32 |
For agents
markdown · JSON · MCP: product_card(name="sqlmapproject/sqlmap")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem