SecGen/modules/utilities/unix/attack_tools/sqlmap/README.md

sqlmap

Table of Contents

1. Overview
2. Usage - Configuration options and additional functionality
3. Limitations - OS compatibility, etc.
4. Development - Guide for contributing to the module

Overview

Install the sqlmap SQL injection tool from its Github repo into the system path, ready for use.

Usage

This is a simple module. In its most basic form, to accept defaults simply do:

include sqlmap

For extra control, you can set these parameters.

• installdir is the path to clone the git repo on local filesystem
• source is the URL of the git repo that contains the sqlmap project
• path is the bin path where the script will be symlinked
• revision is the version of code to clone. Defaults to HEAD but you can specify a tag or commit. See vsrepo docs for full info

This example shows the default value of the parameters.

class { 'sqlmap':
  installdir => '/usr/share/sqlmap',
  source     => 'https://github.com/sqlmapproject/sqlmap.git',
  path       => '/usr/local/bin',
  revision   => 'HEAD',
}

Limitations

Should work on pretty much any Linux/Unix system that supports git. Obviously it will need an internet connection to clone the repo (but you can fork the sqlmap project in a local repo and set $source to point at that)

Development

Pull requests welcome to add features or fix bugs.