SQLmap is an open-source penetration testing tool that automates the process of identifying and exploiting SQL injection vulnerabilities and taking over database servers.
Some of Sqlmap's key features:
⏺Finding SQL injection vulnerabilities in URL parameters, input forms, HTTP request headers, and cookies;
⏺Detecting database types (MySQL, PostgreSQL, MSSQL, Oracle, etc.) and DBMS versions;
⏺Extracting data from a vulnerable database: list of tables, column contents, user accounts;
⏺Escalating privileges to access database system commands;
⏺Bypassing security systems, such as WAFs, using special request masking techniques;
⏺Automated brute-force testing to find vulnerabilities in a web application.