# Install sqlmap with Homebrew, apk, apt, MacPorts, Nix, pacman, zypper Penetration testing for SQL injection and database servers. Version 1.10.7 via Homebrew; verified 2026-07-01. Also installable with debian: sudo apt install sqlmap. ## Install ```sh sudo av install brew:sqlmap ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install sqlmap ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install sqlmap ``` Evidence: MacPorts ports tree: security/sqlmap/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add sqlmap ``` Evidence: Alpine Linux edge package indexes: sqlmap from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install sqlmap ``` Evidence: Debian stable package indexes: sqlmap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#sqlmap ``` Evidence: nixpkgs package indexes: sqlmap from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S sqlmap ``` Evidence: Arch Linux sync databases: sqlmap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install sqlmap ``` Evidence: openSUSE Tumbleweed package metadata: sqlmap from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Package facts - **Package key:** brew:sqlmap - **Package manager:** Homebrew - **Version:** 1.10.7 - **Source summary:** Penetration testing for SQL injection and database servers - **Homepage:** - **Repository:** - **Last updated:** 2026-07-01T10:28:17Z - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - sqlmap (alias) - sqlmap.py (alias) - sqlmapapi (alias) - sqlmapapi.py (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 1.10.7 ## Project history and usage sqlmap is an open-source command-line penetration-testing tool for automating SQL injection detection, exploitation, and database-server takeover workflows. ### Project history The project history maintained in the official wiki traces sqlmap to a SourceForge registration on July 25, 2006, with an initial MySQL-focused skeleton, PostgreSQL support and version 0.1 later that year, and Bernardo Damele taking over the project in September 2006. The same official history records a long sequence of security-research-driven releases, including database takeover work presented publicly in 2009, version 0.9 in 2011 with a rewritten detection engine, relocation from SourceForge/Subversion to GitHub on June 26, 2012, stable version 1.0 on February 27, 2016, Python 3 support completed in 2019, and annual stable releases through 1.10 on January 1, 2026. ### Adoption history The official sqlmap history records acceptance into Debian on May 8, 2009 and Ubuntu on June 2, 2009. The supplied Homebrew-derived input also lists packaging across Homebrew, Debian, Ubuntu, Alpine, Arch, MacPorts, Nix, and openSUSE-style zypper ecosystems. The sqlmap homepage presents it as a mature project with decades of active development and a large contributor base, while the GitHub repository remains the public source and issue-tracking center. ### How it is used In package-manager and CLI culture, sqlmap is typically installed as a ready-to-run security tool and driven through many command-line switches. The official wiki's usage page documents verbosity, request logging, detection, enumeration, takeover, and bug-reporting workflows. ### Why package nerds care Package maintainers care about sqlmap because it is a high-profile security CLI with fast-moving detection logic, many optional capabilities, and a long history of distro packaging. Its presence in common package managers makes authorized web-application testing reproducible without vendoring a checkout. ### Timeline - 2006: Project registered on SourceForge; version 0.1 released. - 2009: Accepted into Debian and Ubuntu repositories. - 2012: Development relocated to GitHub and a new homepage was deployed. - 2016: Stable version 1.0 released. - 2019: Python 3 support completed. - 2026: Stable version 1.10 released. ### Related projects - The official history and README connect sqlmap workflows to SQL injection testing, database fingerprinting, Metasploit integration, and supported database systems rather than to one single language ecosystem. ### Sources - - - - source_facts.package-manager ## Security Notes broad file, network, media, or database tool signal. escape, surveillance, or offensive capability signal. - **Geiger risk:** red / medium - broad file, network, media, or database tool signal - escape, surveillance, or offensive capability signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: sqlmap.conf ## Other Package-Manager Records - Debian apt - sqlmap - 1.9.6-1: normalized package name match | Debian stable package indexes: sqlmap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | automatic SQL injection tool | https://sqlmap.org/ - Nix - sqlmap: normalized package name match | nixpkgs package indexes: sqlmap from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - sqlmap - 1.8.4-1: normalized package name match | Ubuntu 24.04 LTS package indexes: sqlmap from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | automatic SQL injection tool | https://sqlmap.org/ - apk - sqlmap - 1.10.6-r0: normalized package name match | Alpine Linux edge package indexes: sqlmap from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Automatic SQL injection and database takeover tool | https://sqlmap.org/ - apk - sqlmap-pyc - 1.10.6-r0: normalized package name match | Alpine Linux edge package indexes: sqlmap-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Precompiled Python bytecode for sqlmap | https://sqlmap.org/ - pacman - sqlmap - 1.10.7-1: normalized package name match | Arch Linux sync databases: sqlmap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Automatic SQL injection and database takeover tool | https://sqlmap.org - zypper - sqlmap - 1.10.7-1.1: normalized package name match | openSUSE Tumbleweed package metadata: sqlmap from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Automatic SQL injection and database takeover tool | https://sqlmap.org/ - MacPorts - sqlmap: normalized package name match | MacPorts ports tree: security/sqlmap/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/sqlmap.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sqlmap.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph