Tool

Command Builder

Interactively check flags, fill in values, and assemble a ready-to-run command for popular security tools.

Network

Web

Password

Recon

Transfer

Remote Access

SMB / Windows

SMTP

SNMP

Database

Audit

sqlmap

Automatic SQL injection and database takeover tool

sql-injectiondatabasewebautomation

sqlmap

Required

Target URL*

Options

-uTarget URL— Target URL (overrides required input)

--dbsEnumerate databases— List all databases

--tablesEnumerate tables— List tables in a database

--dumpDump data— Dump database table entries

--formsTest forms— Parse and test forms on target URL

--random-agentRandom user-agent— Use a random HTTP User-Agent

--batchBatch mode— Never ask for user input, use defaults

--levelLevel (1-5)— Level of tests to perform

--riskRisk (1-3)— Risk of tests to perform

--dbmsDBMS— Force backend DBMS type

-DDatabase— Database to enumerate

-TTable— Table to enumerate

-pParameter— Testable parameter(s)

--cookieCookie— HTTP Cookie header value

--proxyProxy— Use a proxy (e.g. Burp Suite)

--os-shellOS shell— Prompt for interactive OS shell