Automatic SQL injection and database takeover tool http://sqlmap.org
Find a file
2012-11-29 12:02:59 +01:00
doc minor update 2012-10-29 10:10:33 +01:00
extra Preparation for an Issue #254 2012-11-28 10:58:18 +01:00
lib Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator' 2012-11-29 11:43:49 +01:00
plugins Bug fix (--users was returning only 1 value because of this bug; probably introduced by mistake months ago) 2012-11-29 12:02:59 +01:00
procs Bug fix for --os-shell on MySQL (it was not working for a long time because of this) 2012-10-29 15:45:30 +01:00
shell
tamper Refactoring code in tamper/bluecoat.py 2012-11-05 13:09:53 +01:00
thirdparty Important refactoring for web-based functionality 2012-10-29 15:09:05 +01:00
txt Minor cleanup of standard wordlist (html entities, etc.) 2012-09-12 16:06:32 +02:00
udf
xml Minor bug fix (RLIKE boolean case was using wrong comparison payload) 2012-11-27 12:03:38 +01:00
.gitignore
_sqlmap.py Minor update 2012-10-30 01:23:01 +01:00
README.md
sqlmap.conf Preparation for an Issue #254 2012-11-28 10:58:18 +01:00
sqlmap.py

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Links