sqlmap, an automated tool for sql injection and database