Description
sqlmap is an open source SQL injection tool that security testers and cyberattackers use to detect and exploit SQL injection vulnerabilities in web applications. It automates database fingerprinting, data extraction, and command execution on the underlying database server. Because it is free and effective, it appears constantly in intrusion toolkits, and defenders should alert on its distinctive request patterns in web logs.
Stats
- First seen
- January 2022
- Last seen
- October 2026
Also known as
SQLMapSqlmap
MITRE ATT&CK techniques
1 techniques across 1 tactics.
TA0001 Initial Access
- T1190Exploit Public-Facing Application
Associated groups
Associated campaigns
Alert name variants
| Alert Name |
|---|
| Application.Sqlmap.A |
| Application.Sqlmap.B |
| Application.Sqlmap.C |
| Application.Sqlmap.F |
| Application.Sqlmap.G |
| Application.Sqlmap.H |
| Application.Sqlmap.I |
| Application.Sqlmap.N |
| Application.Sqlmap.P |
| Application.Sqlmap.Q |