sqlmap
Automates detection and exploitation of SQL injection.
Automates detection and exploitation of SQL injection. It fingerprints the injection type, enumerates databases, tables and columns, dumps data and, if privileges allow, writes files or opens an OS shell. It works best fed an intercepted request with high --level/--risk.
Family Web exploitation
Flags --batch --dump -D -T --level --risk
Concepts Blind SQL Injection (Boolean-based), Union-based SQL Injection, SQL Injection to File Write (INTO OUTFILE)
Cheatsheet SQL injection
Installation
sudo apt install -y sqlmapUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.