A modern, real-time web interface for sqlmap — built for pentesters, bug bounty hunters & security researchers.
SQLMap GUI brings a clean, fast, and fully interactive graphical interface to sqlmap, the world’s most popular SQL injection tool.
It replaces long CLI commands with a structured, intuitive web UI:
- Real-time terminal logs (SSE)
- Rich Basic / Advanced / Enumeration panels
- Multi-scan support
- Session saving & loading
- Stop/Stop-All functionality
- Zero-prompt batch mode for automation
- WebSockets-style live updates (via SSE)
- Organized tabs (Basic / Advanced / Enumeration / Output / Sessions)
- Live status indicators
- Animated terminals
- Real-time scan tracking
- Instant stdout/stderr output
- Timestamped terminal lines
- Auto-reconnect
- Parallel scanning
- Toggle common enumeration flags
- Table/Column/DB selection
- Dump & Dump-All
- Techniques (BEUSTQ)
- Risk/Level sliders
- Tamper scripts
- Forced DBMS
- Proxy & Tor
- Timeouts, delays, threads
- Save, load & delete configurations
- Python 3.10+
- sqlmap (auto-downloaded in Docker)
- Flask
- Linux/macOS/Windows
git clone https://github.com/<your-user>/sqlmap_gui
cd sqlmap_gui
pip install -r requirements.txt
python app.pyOpen:
http://localhost:5000
docker build -t sqlmap_gui .docker run --rm -p 5000:5000 sqlmap_guiGUI:
http://localhost:5000
sqlmap_gui/
├── app.py
├── templates/index.html
├── static/css/style.css
├── static/js/script.js
├── requirements.txt
├── Dockerfile
└── README.md
Use sqlmap and this GUI only on systems you own or have permission to test.
Star the repo if you enjoy it!