Security Hacking with SQLMap + Flask + Requests Sometimes, you will find a SQL-injection vulnerability in a parameter that SQLmap cannot exploit, because the injection point is not supported.This can be the username or password in a Basic Authentication HTTP-header.