sqlmap: add page

[hbostan]

---

• The page (if new), does not already exist in the repo.

• The page (if new), has been added to the correct platform folder:
  common/ if it's common to all platforms, linux/ if it's Linux-specific, and so on.

• The page has 8 or fewer examples.

• The PR is appropriately titled:
  <command name>: add page for new pages, or <command name>: <description of changes> for pages being edited.

• The page follows the contributing guidelines.

[agnivade]

@hbostann - In future, you can update the same PR by pushing a new commit. You don't have to close and create a new PR every time. :)

[agnivade]

"Change the parameter delimiter (& is the default):"

[agnivade]

@hbostann - I removed the default being mentioned twice. Hope that's okay with you.

[hbostan]

@agnivade That's perfectly fine.

[benboeck]

Hello,

you should definitely include -r as it is the easiest way to get sqlmap to work with all kinds of cookies and auth headers.
Proposal:

• Use raw HTTP request (such as GET/POST) including cookies, authentication and other headers:

sqlmap -r {{raw_request_file}}

For important use cases I would also add:

• --dbs ("list databases")
• -D {{database}} -T {{table}} --dump ("dump contents of specific database table")

For advanced stuff (and as a teaser to read the sqlmap usage page ;) --os-shell might be interesting.

Oh, and the injection marker * is also very important.

[stale]

Hi all! This thread has not had any recent activity. Are there any updates? Thanks!

[agnivade]

ping @sbrl @pxgamer @mfrw