BURPSUITE+SQLMAP verifying SQL injection across logins

(The system I operate is Kali Linux)

1. Use Burpsuite proxy settings to intercept browser requests (refer to the following steps: http://www.cnblogs.com/hito/p/4495432.html)

2. Interception of completed requests specific content in "proxy--intercept" full display

3. Right-click-copy to file, save to Desktop (TXT format)

4. Call Sqlmap in the application, enter the command

Sqlmap-r Xxx.txt-tfupass (file I was put on the desktop and dragged directly to the terminal)

Start scanning the target link of the first step interception

BURPSUITE+SQLMAP verifying SQL injection across logins