๐ง Advanced SQLMap Toolkit (Wrapper Script)
This project is an automated SQL injection testing and database enumeration toolkit built on top of sqlmap. It streamlines vulnerability scanning, database discovery, and structured data extraction into a single interactive Bash script.
๐ Features
โก Automated SQL injection detection using sqlmap
๐๏ธ Database enumeration (lists all available DBs)
๐ Table discovery and filtering (focus on user-related tables)
๐ Column analysis (detects password/hash-related fields)
๐ฅ Automated data dumping for sensitive columns
๐งพ Saves extracted results into organized files
๐จ Colored terminal UI for better readability
๐ Auto-creates output directory for scan results
๐งช Uses advanced sqlmap options (tamper, risk, level, retries)
โ๏ธ Workflow
User inputs target URL via nano
Script checks for SQL injection vulnerability
If vulnerable:
Extracts databases
Lists tables
Identifies user-related tables
Finds username/password columns
Dumps data automatically
Saves results in:
sqlmap_results/
extracted_hashes.txt
๐ Output Structure
sqlmap_results/ โ full sqlmap logs and scan data
extracted_hashes.txt โ extracted credentials/hashes
๐ ๏ธ Requirements
bash
sqlmap
Linux environment (Kali recommended)
This tool is intended only for educational and authorized security testing purposes. Unauthorized use against systems you do not own is illegal.
git clone https://github.com/whoami136/SQLMap-Wrapper.git
cd SQLMap-Wrapper
bash sqlmap.sh- Kali Linux / Linux
- SQLMap
Install:
sudo apt update
sudo apt install sqlmap -y