Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

sqlninja

SQL server injection and takeover tool

initial-accessRed Team

Matches ATT&CK tactic: Initial Access ↗

Official docs ↗Download ↗Source repo ↗

Platforms: Linux · Last verified September 6, 2026

Fancy going from a SQL Injection on Microsoft SQL Server to a full GUI access on the DB? Take a few new SQL Injection tricks, add a couple of remote shots in the registry to disable Data Execution Prevention, mix with a little Perl that automatically generates a debug script, put all this in a shaker with a Metasploit wrapper, shake well and you have just one of the attack modules of sqlninja!

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Install on Kali Linux with `sudo apt install sqlninja`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing