I played with SQLMap a bit on Kali.  Easy tool to use, plays nicely with SOCKS5&#x2F;TOR.  I&#x27;m amazed at how prevalent SQLi is as an attack vector still.  With PreparedStatements&#x2F;PDO&#x2F;other query libraries I would have bet this vector would have been all but eliminated many years ago.