TLDR Search

Enter a command. For example: particle, fakedata, sails, drush.

sqlmap

Detect and exploit SQL injection flaws. More information: https://sqlmap.org.

• Run sqlmap against a single target URL:
   
  python sqlmap.py -u "{{http://www.target.com/vuln.php?id=1}}"
   
• Send data in a POST request (--data implies POST request):
   
  python sqlmap.py -u "{{http://www.target.com/vuln.php}}" --data="{{id=1}}"
   
• Change the parameter delimiter (& is the default):
   
  python sqlmap.py -u "{{http://www.target.com/vuln.php}}" --data="{{query=foobar;id=1}}" --param-del="{{;}}"
   
• Select a random User-Agent from ./txt/user-agents.txt and use it:
   
  python sqlmap.py -u "{{http://www.target.com/vuln.php}}" --random-agent
   
• Provide user credentials for HTTP protocol authentication:
   
  python sqlmap.py -u "{{http://www.target.com/vuln.php}}" --auth-type {{Basic}} --auth-cred "{{testuser:testpass}}"