• Frequently Asked Questions
  • What is sqlmap?
  • How do I execute sqlmap?
  • Can I integrate sqlmap with a security tool I am developing?
  • Can I embed sqlmap into a proprietary software?
  • How can I report bugs or request new features?
  • Can I contribute occasionally to the development?
  • Can I actively contribute in the long-term development?
  • How can I support the development and show my appreciation?
  • How can I follow closely the development?
  • Can you hack a site for me?
  • Tool xyz works against the target, while sqlmap doesn't!
  • Which tamper script to use to bypass a (WAF/IPS) protection?
  • My site was attacked with sqlmap. Stop developing it you dumb f.cks!?
  • When sqlmap will switch to Python 3?
  • How can I shorten the payloads injected by sqlmap?
  • What does WARNING unknown charset '...' mean?
  • How to use sqlmap with mod_rewrite enabled?
  • Why is sqlmap not able to get password hashes in some cases?
  • What does switch --text-only do?
  • I am getting [CRITICAL] connection timed while I am able to browse the site normally?
  • Is it possible to use INSERT/UPDATE SQL commands via --sql-query, --sql-shell and --sql-file?
  • sqlmap is not able to detect/exploit injection while other commercial tools are?
  • How can I dump only certain entries of a table based on my condition?
  • Where can I find old versions of sqlmap?