sqlmap-scan

SQLMap Scan — SQL Injection Detection

Test for SQL injection vulnerabilities using SQLMap against an authorized target.

Decision Loop: In-the-Loop (STRICT — target + mode approval required)

Safety — CRITICAL Legal Warning

Before ANY execution, display this warning:

⚠️ คำเตือนทางกฎหมาย (Legal Warning)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
SQL injection testing without explicit written authorization is ILLEGAL
in most jurisdictions. SQLMap actively sends malicious payloads to the target.

ยืนยัน (Confirm):
1. คุณได้รับอนุญาตให้ทดสอบเป้าหมายนี้แล้ว (You have authorization to test this target)
2. เป้าหมาย: <target-url>
3. โหมด: <mode>

ดำเนินการต่อ? (Proceed?) [y/N]

Do NOT proceed without explicit user confirmation.

Arguments

Parse the user's input for:

• <target-url> — URL with parameters (e.g., http://target.com/page?id=1) (REQUIRED)
• --mode — Test mode (default: detect)
• --risk — Risk level 1-3 (default: 1)
• --level — Test level 1-5 (default: 1)

Scan Modes

Mode	Flags	Description
detect	--batch --smart	Detect injectable parameters only
enumerate	--batch --dbs	Enumerate databases after detection
dump	--batch --dump -D <db> -T <table>	Dump table data (REQUIRES extra confirmation)

Execution

After user confirmation, run:

# Build command based on mode
case "<mode>" in
  detect)
    sqlmap -u "<target-url>" --batch --smart --risk <risk> --level <level> \
      --output-dir=/tmp/sqlmap-output --forms 2>&1 | tee /tmp/sqlmap-console.txt
    ;;
  enumerate)
    sqlmap -u "<target-url>" --batch --dbs --risk <risk> --level <level> \
      --output-dir=/tmp/sqlmap-output 2>&1 | tee /tmp/sqlmap-console.txt
    ;;
  dump)
    # REQUIRES ADDITIONAL CONFIRMATION for data extraction
    sqlmap -u "<target-url>" --batch --dump -D <db> -T <table> \
      --output-dir=/tmp/sqlmap-output 2>&1 | tee /tmp/sqlmap-console.txt
    ;;
esac

Output Format