Some tips for Sqlmap

There are two ways to post injection for post injection, one is to use --dataparameter, the post key and value are submitted in a similar get method. The second is to use -rparameter, Sqlmap reads the POST request packet that the user has captured for post injection detection.
View payload has been added to the local agent, and then use Burpsuit to see Sqlmap payload, until now found using -vParameters can be implemented. Always thought -vThe only implementation is the control warning, debug information level. actually use -v 3The injected payload,4,5,6 can also be displayed to display HTTP requests, HTTP response headers, and pages.
Using Google search sqlmap can test SQL injection in Google search results, which is a powerful feature. The use method is parameter -g。 However, it is still very rare to use it in practice.
Request delay may be blocked by a firewall when it is requested too frequently during injection. --delayThe parameter is working. You can set the delay between HTTP requests two times. Some Web programs block all requests after multiple false accesses, which results in all subsequent tests not being able to be done, bypassing this policy to use --safe-urlTo access a normal page every once in a while.
Pseudo-static pages Some Web servers are URL rewrite or the site is pseudo-static and cannot be directly supplied with test parameters, which can be used *Instead of the parameters to be tested.
Execute system command when the database is supported, and the current user has permissions, you can execute system commands, using --os-cmdOr --os-shell, specifically, when multiple statements can be executed, a UDF (Mysql,postgrepsql) or xp_cmdshell (MSSQL) is attempted to execute the system commands. When you cannot execute multiple statements, you still try to create a Webshell to execute the statement, which requires the absolute path of the web. Overall, the success rate is low, but the individual also has a successful experience ~
Test level Sqlmap Use --levelParameters for different comprehensiveness of the test, the default is 1, different parameters affect the use of which payload,2 when the cookie injection detection, 3 will be useragentDetection.

Some tips for Sqlmap