SQLiPy Sqlmap Integration
Summary: SQLiPy is a Burp Suite extension, version 0.8.6 by Josh Berry of CodeWatch, that integrates SQLMap through its API to run SQL injection scans on requests from within Burp. It connects to a running SQLMap API server, requires Jython 2.7-2.7.2, and is noted to fail on Jython 2.7.3 due to a bug.
What's compelling: PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so a tool that drives SQLMap scans against live requests is something your team owns the risk of, not the vendor.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026