Improving the efficiency of sqlmap blasting

improving the efficiency of Sqlmap blasting

Sqlmap after the injection succeeds, it attempts to obtain the structure of the database and the table. For MSSQL, MySQL, SQLite and other databases, Sqlmap can get the structure of database and table through system database and system data table. However, for an Access database, you can only get the table name and table structure by blasting. During blasting, the SQLMAP is operated using a built-in dictionary. These dictionaries are saved in the/usr/share/sqlmap/txt directory. To provide burst efficiency, users can expand these dictionaries. For example, Common-colums.txt holds the dictionary used by the bursting column; Common-tables.txt holds the dictionary used for the name of the bursting table. When expanding, simply add a new word at the end of the dictionary file. The format is one per line.

Improving the efficiency of sqlmap blasting