Use SQLMap for cookie Injection

SQLMap is called an injection artifact. N is A powerful tool that uses SQLmap for injection testing. I will also use SQLMAP to install A * C for A long time, however, cookie injection is rarely used. It is troublesome to use the injection transit tool whenever a cookie is injected. Just today, the USB in the group asked if sqlmap supports cookie injection. I studied it and found that it is very easy to use sqlmap for cookie injection. Test URL:

$ Id = $ _ REQUEST ['id'] is used for obtaining parameters. cookie submission is supported. After studying the SQL official documentation, we can find the following introduction: by default, SQLMAP only supports the GET/POST parameter injection test. However, when the -- level parameter is used and the value is greater than or equal to 2, it also checks the cookie parameters, when the value is greater than or equal to 3, the User-agent and Referer will be checked. Therefore, we can simply add -- level 2 to the original base. Verify, successful,