sqlmap is an open source penetration testing tool developed in Python that automates the process of detecting and exploiting SQL injection and taking over of database servers. This makes the tool independent from the operating system. sqlmap relies on the Metasploit Framework for some of its post-exploitation takeover features.