Re:Sqlmap – Automatic SQL injection and database takeover tool
by funkyy on Tuesday December 01, 2015 @11:06PM
(#10660870)
This looks like a great time and money saver. Thanks for this to all contributors. I will test drive it soon on my app that requires high security level.
[ Parent
| on HN ]
Re:Sqlmap – Automatic SQL injection and database takeover tool
by amjo324 on Wednesday December 02, 2015 @01:17AM
(#10661324)
In my opinion, this is not really SQLMaps intended use case. It's essentially an exploitation tool for penetration testers and doesn't provide a proper mechanism to just scan your app looking for SQL injection points. There are better tools for that (google 'Burp Suite') and if your app requires a high security level you should be engaging a full time infosec professional to manually assess it.