Question

Terminal output from sqlmap utility
Which of the following are uses for the sqlmap utility? (Select two.)

answer

To determine SQL server parameters, including version, usernames, operating systems, etc.


To detect vulnerable web apps


To rework SQL structures in existing databases for greater security


To define structures for a properly secure SQL implementation


To map SQL structures for MySQL databases

Answer 1

Answers:
- To determine SQL server parameters, including version, usernames, operating systems, etc.
- To detect vulnerable web apps

Explanation: sqlmap is an automated SQL injection discovery and exploitation tool that fingerprints DBMS, enumerates users/databases/tables/columns and other server info, and detects/exploits vulnerable web applications. It is not a tool for designing or hardening database schemas.