sqlmap

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over database servers. According to its README, it includes a powerful detection engine and many niche features aimed at penetration testers, along with a broad range of switches covering database fingerprinting, data fetching from the database, accessing the underlying file system, and executing commands on the operating system via out-of-band connections. Installation is straightforward: users can download the latest tarball or zipball, or clone the Git repository (for example, `git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev`). The tool is stated to work out of the box with Python 2.7 and 3.x on any platform. Usage begins with `python sqlmap.py -h` for basic options and switches, and `python sqlmap.py -hh` for the full list. The README points to a sample run, a user's manual on the wiki covering capabilities, supported features, all options and switches with examples, plus links to the homepage, downloads, commit RSS feed, issue tracker, FAQ, X account, demo videos, a playground, research page and screenshots. The project is licensed under GPLv2 and its README is available in many translations, including Arabic, Bengali, Bulgarian, Chinese, Croatian, Dutch, French, Georgian, German, Greek, Hindi, Indonesian, Italian, Japanese, Korean, Kurdish (Central), Persian, Polish, Portuguese, Russian, Serbian, Slovak, Spanish, Turkish, Ukrainian and Vietnamese.