{"id":1459,"date":"2023-10-03T00:00:00","date_gmt":"2023-10-02T22:00:00","guid":{"rendered":"https:\/\/demo.sidekick.be\/itenium\/hacking-tool-sqlmap\/"},"modified":"2025-11-28T13:31:43","modified_gmt":"2025-11-28T12:31:43","slug":"hacking-tool-sqlmap","status":"publish","type":"post","link":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/","title":{"rendered":"Hacking Tool: sqlmap"},"content":{"rendered":"<p>It has some\u2026 interesting features:<\/p>\n<ul>\n<li>Enumerate users, roles, databases, \u2026 and dump all rows<\/li>\n<li>Password hash recognition and attempt cracking with a dictionary attack<\/li>\n<li>Download and upload any file<\/li>\n<li>Search for tables, columns, execute arbitrary SQL, \u2026<\/li>\n<li>Database process\u2019 user privilege escalation<\/li>\n<li>Setup an interactive command prompt<\/li>\n<\/ul>\n<h1 id=\"how\">How<\/h1>\n<pre><code class=\"language-sh\">sqlmap -u 'url' --dump\n<\/code><\/pre>\n<p>Flags used:<\/p>\n<ul>\n<li><code>-u 'url'<\/code>: Target URL (e.g. \u201chttp:\/\/site.com\/vuln.php?id=1\u201d)<\/li>\n<li><code>--dump<\/code>: Dump DBMS database table entries<\/li>\n<\/ul>\n<p>Other interesting flags:<\/p>\n<ul>\n<li><code>-f<\/code>: Perform an extensive DBMS version fingerprint<\/li>\n<li><code>--wizard<\/code>: Simple wizard interface for beginner users<\/li>\n<li><code>-v VERBOSE<\/code>: Verbosity level: 0-6 (default 1)<\/li>\n<li><code>--sql-query=QUERY<\/code>: SQL statement to be executed<\/li>\n<li><code>--sql-shell<\/code>: Prompt for an interactive SQL shell<\/li>\n<li><code>--search<\/code>: Search column(s), table(s) and\/or database name(s)<\/li>\n<li><code>--technique=TECH<\/code>: SQL injection techniques to use (default \u201cBEUSTQ\u201d)\n<ul>\n<li><code>B<\/code>: boolean-based blind (Add <code>OR<\/code> SQL. ex: <code>OR 1=1<\/code> to get all rows)<\/li>\n<li><code>E<\/code>: error-based (force an error with interesting error message, ex: <code>cur_db() as numeric<\/code>)<\/li>\n<li><code>U<\/code>: UNION query-based (Start with <code>UNION<\/code> and add an extra query)<\/li>\n<li><code>S<\/code>: stacked queries (Use <code>;<\/code> and add a whole new query. End with <code>--<\/code> so the rest of the query is commented out)<\/li>\n<li><code>T<\/code>: time-based blind (if error messages are not displayed, use time to get a true\/false answer <code>IF(version()=5.3, sleep(5), 'false')<\/code>)<\/li>\n<li><code>Q<\/code>: inline queries (Inject subqueries)<\/li>\n<\/ul>\n<\/li>\n<li><code>--udf-inject<\/code>: Inject custom user-defined functions<\/li>\n<li>Operation System\n<ul>\n<li><code>--reg-read<\/code>: Read a Windows registry key value (also <code>--reg-add<\/code> &amp; <code>--reg-del<\/code>)<\/li>\n<li><code>--os-cmd=OSCMD<\/code>: Execute an operating system command<\/li>\n<li><code>--os-shell<\/code>: Prompt for an interactive operating system shell<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h2 id=\"docker\">Docker<\/h2>\n<pre><code class=\"language-sh\">docker run --rm paoloo\/sqlmap --help\n\nmkdir sqlmap-data\ndocker run --rm -it -v .\/sqlmap-data:\/root\/.sqlmap\/ paoloo\/sqlmap --url \"url\" --dump\n<\/code><\/pre>\n<h1 id=\"when\">When<\/h1>\n<p>During itenium\u2019s Security Bootcamp <code>sqlmap<\/code> can be used to retrieve a flag hidden in a database by attacking a vulnerable web page.<\/p>\n<h1>Also in this series<\/h1>\n<ul>\n<li>Part 1: <a href=\"\/security\/hacking-tool-nmap\/\">Hacking Tool: nmap<\/a><\/li>\n<li>Part 2: <a href=\"\/security\/hacking-tool-hydra\/\">Hacking Tool: hydra<\/a><\/li>\n<li>This Part: Hacking Tool: sqlmap<\/li>\n<li>Part 4: <a href=\"\/security\/introducing-the-security-bootcamp\/\">The Security Bootcamp<\/a><\/li>\n<li>Part 5: <a href=\"\/security\/security-bootcamp-prep\/\">Security Bootcamp Prep<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p><a href=\"https:\/\/sqlmap.org\/\">sqlmap<\/a> is a CLI tool for automated discovery of SQL injection vulnerabilities in web applications.<\/p>\n<h1 class=\"hide-from-excerpt\" id=\"what\">What<\/h1>\n<p><a href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\" class=\"github\"><img decoding=\"async\" src=\"https:\/\/img.shields.io\/github\/stars\/sqlmapproject\/sqlmap.svg?style=social&amp;label=Star\" \/><\/a><a href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\">sqlmapproject\/sqlmap<\/a>: Automatic SQL injection and database takeover tool<\/p>\n","protected":false},"author":1,"featured_media":2015,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[30],"tags":[31,6],"class_list":["post-1459","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-hacking","tag-tutorial"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Hacking Tool: sqlmap - Itenium<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacking Tool: sqlmap - Itenium\" \/>\n<meta property=\"og:description\" content=\"sqlmap is a CLI tool for automated discovery of SQL injection vulnerabilities in web applications.Whatsqlmapproject\/sqlmap: Automatic SQL injection and database takeover tool\" \/>\n<meta property=\"og:url\" content=\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/\" \/>\n<meta property=\"og:site_name\" content=\"Itenium\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-02T22:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-28T12:31:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png\" \/>\n\t<meta property=\"og:image:width\" content=\"360\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Usdevelop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Usdevelop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/\",\"name\":\"Hacking Tool: sqlmap - Itenium\",\"isPartOf\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png\",\"datePublished\":\"2023-10-02T22:00:00+00:00\",\"dateModified\":\"2025-11-28T12:31:43+00:00\",\"author\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\"},\"breadcrumb\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png\",\"contentUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png\",\"width\":360,\"height\":300,\"caption\":\"a seringe being injected into a server rack\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/demo.sidekick.be\/itenium\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacking Tool: sqlmap\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/\",\"name\":\"Itenium\",\"description\":\"We build software. We build careers.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\",\"name\":\"Usdevelop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"caption\":\"Usdevelop\"},\"sameAs\":[\"https:\/\/demo.sidekick.be\/itenium\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacking Tool: sqlmap - Itenium","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Hacking Tool: sqlmap - Itenium","og_description":"sqlmap is a CLI tool for automated discovery of SQL injection vulnerabilities in web applications.Whatsqlmapproject\/sqlmap: Automatic SQL injection and database takeover tool","og_url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/","og_site_name":"Itenium","article_published_time":"2023-10-02T22:00:00+00:00","article_modified_time":"2025-11-28T12:31:43+00:00","og_image":[{"width":360,"height":300,"url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png","type":"image\/png"}],"author":"Usdevelop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Usdevelop","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/","url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/","name":"Hacking Tool: sqlmap - Itenium","isPartOf":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#website"},"primaryImageOfPage":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage"},"image":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage"},"thumbnailUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png","datePublished":"2023-10-02T22:00:00+00:00","dateModified":"2025-11-28T12:31:43+00:00","author":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022"},"breadcrumb":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#primaryimage","url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png","contentUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-sqlmap.png","width":360,"height":300,"caption":"a seringe being injected into a server rack"},{"@type":"BreadcrumbList","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-sqlmap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/demo.sidekick.be\/itenium\/"},{"@type":"ListItem","position":2,"name":"Hacking Tool: sqlmap"}]},{"@type":"WebSite","@id":"https:\/\/demo.sidekick.be\/itenium\/#website","url":"https:\/\/demo.sidekick.be\/itenium\/","name":"Itenium","description":"We build software. We build careers.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022","name":"Usdevelop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","caption":"Usdevelop"},"sameAs":["https:\/\/demo.sidekick.be\/itenium"]}]}},"_links":{"self":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1459","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/comments?post=1459"}],"version-history":[{"count":2,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1459\/revisions"}],"predecessor-version":[{"id":2172,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1459\/revisions\/2172"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media\/2015"}],"wp:attachment":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media?parent=1459"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/categories?post=1459"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/tags?post=1459"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}