[immeiron]

i seem only to find old information about it!?
does it still work?

[skull]

If by SQLi you mean SQL injection.

You can look into sqlmap, which tries to map the entire database for you, based on a entry of some kind.

However, SQL injections are not as common as they was back in the days, 15 years ago.
Most frameworks had made it very easy to secure the database queries, however, poor and unaware developers can still make this mistake.

[thecrowsec]

Yes, SQL injection still works but only when applications are poorly secured. Despite being a decades-old vulnerability, SQLi continues to affect vulnerable systems, especially legacy software, misconfigured services, or newer projects lacking proper security practices. If you want something new try APIs because they are a common attack surface for SQL injection, especially REST and GraphQL APIs that interact with relational databases. In 2025, many applications are API-driven (mobile apps, SPAs, microservices), so attackers often target APIs for SQLi and related injections.

[DramaKing]

i seem only to find old information about it!?
does it still work?

sqlmap is as good as it gets, but anyone who knows anything about cybersecurity knows about SQLi and how to identify and prevent such attacks. You have to get quite advanced to find any such basic vulnerabilities

[Dolla$]

If you're talking about those old-school tools where you just paste a dork and let it "auto-hack" everything for you, most of them are outdated.

In 2025, the majority of websites are behind WAFs or have at least basic SQLi protections by default (often enabled by the hosting provider itself). Those old tools relying on mass exploitation barely work anymore, except maybe on poorly maintained legacy sites.

SQLi is still very much a thing, but nowadays it’s:
- Often blind or time-based, requiring manual exploitation or scripting.
- Frequently found in API endpoints, where developers forget proper parameter handling.

So yeah, SQLi hasn’t disappeared, but if you want to find it in 2025, forget automated "dumper" tools and focus on understanding logic flaws, parameter pollution, and how modern frameworks handle database queries

[MadScientist]

Ahh good ol days when you could flip a coin and get a SQLi. I remember even MYSQL website got hacked by SQLi >.<

[Tanya]

This working???

[▄︻デ══━一一一一━]

This working???

yes Dumper still works.

[kabylieteam2026]

good job

[Sift]

Sqlmap is solid but if you really want to get into data breaching like DramaKing mentioned SQL injection is no longer the way to go most data breaches nowadays comes from ransomwares or chaining different vulnerabilities together.