It's been two months since this profile received a new review

sql map Reviews & Product Details

Top-Rated Alternatives

View All Alternatives

sql map Reviews (14)

G2 reviews are authentic and verified.

Here's how.

Verified User in Accounting

Mid-Market (51-1000 emp.)

5/21/2022

"SQL Map Review"

4/5

What do you like best about sql map?

It is an open source penetration testing tool Review collected by and hosted on G2.com.

What do you dislike about sql map?

The UI can be imprvised a bit as SQL Map has the black background which should be made white so as to appaer less colour sensitive to eyes. Review collected by and hosted on G2.com.

Ashen S.

Analyst

Enterprise (> 1000 emp.)

6/13/2021

"Great SQL injection finding tool"

5/5

What do you like best about sql map?

What I like about this tool is, only we have to apply the URL with the correct parameters. The SQL Map tool does the rest. SQL map finds every possible way to inject SQL to the URL. The manual is also beneficial. There are so many options available on the SQL Map tool, which is very helpful to find SQL Injections in many ways. Review collected by and hosted on G2.com.

What do you dislike about sql map?

What I most dislike is the complexity of the tool. Without the manual, it is so much harder to apply SQL Injection to URLs. Another thing is, sometimes the result is giving false positives. We often need to verify the results shown from the SQL injection tool. Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

If the complexity is low, that would be a great advantage to SQL Injection users. Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

The main benefit that I'm having is the time base advantage. When I am manually trying SQL injection on a web application, It is a very time-consuming process. But if I am using SQL Injection, I have to apply the tool to the correct URL and verify the output from the SQL injection. Review collected by and hosted on G2.com.

Linda J.

Writer

Small-Business (50 or fewer emp.)

6/8/2019

"A non-user friendly open source software"

3.5/5

What do you like best about sql map?

sql map is an open source software that allows you to figure out what code you may have that is potentially dangerous or prone to vulnerabilities. It is important in figuring out what problems you can find and fix and or what you can provoke with the software. Review collected by and hosted on G2.com.

What do you dislike about sql map?

It is not very user friendly nor does it allow kind of development that would make it easier to read and realize what is available, meaning there are errors in the code that some users who are not as advanced would not realize they would need to fix. Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

Consider your skill set in coding and if you can adequately describe not only what you're looking at but also what it is that you are missing, and that is where you would find the vulnerability. Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

For advanced users, this is easy to use and helps poke holes in the code you have for some vulnerabilities. However, for others who do not have that coding background, or rather, reading code background, this becomes difficult to decipher. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

7/24/2019

"Database Dumping made easier"

3.5/5

What do you like best about sql map?

SQL map is a popular software where users are able to automate SQL queries and inject the database. The user friendliness and the features of SQL map makes penetration testing more easier. Bypass methods and shell uploading via sql map makes penetration testing much more easier. Review collected by and hosted on G2.com.

What do you dislike about sql map?

Nothing much to dislike about sqlmap since this is a stable tool. The tool lags sometimes due to network errors and the application gets stuck. Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

I recommend SQLMap for newbies who like to get started with penetration testing. Web Application testing and application penetration testers are advised to use SQLMap to make your process easier. Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

Day to today penetration testing of web applications and databases are solved using SQL map in my case. A very useful tool for security researches to save time. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

6/6/2019

"A tool used to detect and exploit database vulnerabilities"

4/5

What do you like best about sql map?

Automatic recognition of password hash formats and support for cracking them using a dictionary-based attack. Support to dump database tables entirely, a range of entries or specific columns as per user's choice. The user can also choose to dump only a range of characters from each column's entry. Review collected by and hosted on G2.com.

What do you dislike about sql map?

Regarding the risk. There are 3 risk values. The default value is 1 which is innocuous for the majority of SQL injection points. Risk value 2 adds to the default level the tests for heavy query time-based SQL injections and value 3 adds also OR-based SQL injection tests. Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

One can use it for populating database, connecting to the remote database, and find vulneabilties via SQL injections. Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

Support to directly connect to the database without passing via a SQL injection, by providing DBMS credentials, IP address, port and database name. Support to establish an out-of-band stateful TCP connection between the attacker machine and the database server underlying operating system Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Enterprise (> 1000 emp.)

5/29/2019

"Injections For Databases ;) "

5/5

What do you like best about sql map?

The user friendliness and the easy switches of SQLmap helps users to do injections and upload shells to the back end of an application.

Bypass techniques in sqlmap are very helpful for beginners whos desire is for pen testing. Review collected by and hosted on G2.com.

What do you dislike about sql map?

So far i like everything about SQLMap. May be the interface and new switches can be developed to use for more DBMS's Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

I recommend newbies to use this tool in Penetration Testing. For Easy and Fast Learning Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

Automated SQL injection. Rather than matching expressions and injecting get/post requests manually it is easy to inject pay loads by SQLMap. Mostly in Web App penetration Testing we pentesters use automated tools such as SQLMap to dump databases and upload shells to gain access to database management Systems. Review collected by and hosted on G2.com.

yoganathan a.

Lecture

Mid-Market (51-1000 emp.)

5/8/2019

Business partner of the seller or seller's competitor, not included in G2 scores.

"good tool for database injections"

4.5/5

What do you like best about sql map?

it has most of the possible database injection methods so it makes easy to detect sql injection vulnerability by automated this on the victim url. Review collected by and hosted on G2.com.

What do you dislike about sql map?

it is talking too much time to process to find the vulnerability. also it little bit outdated Review collected by and hosted on G2.com.

Recommendations to others considering sql map:

it is a good tool for finding database injection vulnerabilities Review collected by and hosted on G2.com.

What problems is sql map solving and how is that benefiting you?

easy to find database injection vulnerability to fix also it save my time from multiple testing scenarios. it automated all the test case so i can do other works while it run on the target. Review collected by and hosted on G2.com.

Dilan M.

Information Security Analyst

Enterprise (> 1000 emp.)

5/10/2019

"Dump the database with sqlmap"

4.5/5

What do you like best about sql map?

This tool can easily use everyone, I have use this to do my office works, this very useful to identify the sql injection vulnerabilites . this is support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server and etc. Review collected by and hosted on G2.com.

What do you dislike about sql map?

There is nothing to tell anything bad, but if there is a graphical interface could be easy to use beginners. to use this tool need some technical knowledge also. Review collected by and hosted on G2.com.

Vasanth P.

application security engineer

Enterprise (> 1000 emp.)

5/22/2019

Business partner of the seller or seller's competitor, not included in G2 scores.

"automatted sql injection scanner "

5/5

What do you like best about sql map?

it has all type sql injection attack vectors so it makes penetration tester's life too easy also it reduces testing time as well. Review collected by and hosted on G2.com.

What do you dislike about sql map?

some times we need to increase the level of scanning complexity to exploit the attack but it take long time. Review collected by and hosted on G2.com.

Shani K.

MEAN Stack Dev

Mid-Market (51-1000 emp.)

2/27/2019

"sdfBest Database Penetration Testing device"

2.5/5

What do you like best about sql map?

SQL map work with all SQL, MSSQL and Oracle databases, this device is extraordinary device for take database dumps and access databases through special accelerations utilizing SQL infusion directions utilizing the SQLmap directions. Review collected by and hosted on G2.com.

What do you dislike about sql map?

SQLmap is a full direction line device and doesn't have appropriate Graphical UI instrument if there graphical UI device it will be part more simple for use than the order line interface. Review collected by and hosted on G2.com.