What I like about this tool is, only we have to apply the URL with the correct parameters. The SQL Map tool does the rest. SQL map finds every possible way to inject SQL to the URL. The manual is also beneficial. There are so many options available on the SQL Map tool, which is very helpful to find SQL Injections in many ways. Review collected by and hosted on G2.com.

What I most dislike is the complexity of the tool. Without the manual, it is so much harder to apply SQL Injection to URLs. Another thing is, sometimes the result is giving false positives. We often need to verify the results shown from the SQL injection tool. Review collected by and hosted on G2.com.