sqlmap (DB mode)
Enumerate & dump databases via SQL injection.
KaliParrothigh
pkg: sqlmap
Beyond detection, sqlmap enumerates DBMS structure and dumps tables, and can read files or get a shell.
Syntax
sqlmap -u {url} --dbs --tables --dump
Example
sqlmap -u "https://x/item?id=1" -D shop -T users --dump
Dumps the users table from the shop database once SQLi is confirmed.
Advantages
- End-to-end DB extraction
- Supports many DBMS
Disadvantages
- Very intrusive
- Authorization essential
Tags
#sqli#database
Official docs: sqlmap ↗
Related commands
Frequently asked questions
What is sqlmap (DB mode) used for?
Beyond detection, sqlmap enumerates DBMS structure and dumps tables, and can read files or get a shell.
What is an example sqlmap (DB mode) command?
A common example is: sqlmap -u "https://x/item?id=1" -D shop -T users --dump — Dumps the users table from the shop database once SQLi is confirmed.
Is sqlmap (DB mode) part of Kali Linux?
Yes. sqlmap (DB mode) ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sqlmap.
What category of security tool is sqlmap (DB mode)?
sqlmap (DB mode) is a Database Assessment tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.