I just attended an interesting talk&#x2F;livedemo by a security researcher[1] on WJAX2015 who used sqlmap to exploit a web application and extract and manipulate its content. So folks are using sqlmap.<p>[1] <a href="https:&#x2F;&#x2F;twitter.com&#x2F;cschneider4711" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;cschneider4711</a>