Injection attacks with sqlmap

sqlmap is an open source tool built in Python that allows detection and exploitation of SQL injection attacks. It has full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, HSQLDB, and Informix databases. In this recipe, we will see how to use sqlmap to test and exploit SQL injection.

How to do it...

Let's perform the following steps:

1. We first take a look at the help option of sqlmap for a better understanding of its features. It can be done by using the following command:

sqlmap -h  

The following screenshot shows the output of the preceding command:

2. To scan a URL, we use the following command:

sqlmap -u &quot...