sqlmap 命令

常用示例

说明

sqlmap is an automated SQL injection and database takeover tool. It detects and exploits SQL injection vulnerabilities in web applications, supporting a wide range of database systems including MySQL, PostgreSQL, Oracle, Microsoft SQL Server, and SQLite. The tool uses various injection techniques: boolean-based blind, error-based, UNION query, stacked queries, time-based blind, and inline queries. It can enumerate databases, tables, columns, and dump data. Advanced features include OS access through database functions. Detection levels (--level) control test thoroughness—higher levels test more injection points including cookies and headers. Risk levels (--risk) control whether potentially harmful tests (like heavy time delays) are used.

参数

-u _URL_

Target URL with injectable parameter

-r _FILE_

Load HTTP request from file

--data _DATA_

POST data string

--cookie _COOKIE_

HTTP Cookie header value

-p _PARAM_

Testable parameter(s)

--level _LEVEL_

Test thoroughness (1-5, default: 1)

--risk _RISK_

Test risk level (1-3, default: 1)

--technique _TECH_

Injection techniques (B, E, U, S, T, Q)

--dbms _DBMS_

Force specific database type

--dbs

Enumerate databases

--tables

Enumerate tables

--columns

Enumerate columns

--dump

Dump table entries

-D _DB_

Target database

-T _TABLE_

Target table

-C _COLUMNS_

Target columns

--os-shell

Get interactive OS shell

--os-cmd _CMD_

Execute OS command

--batch

Non-interactive mode

--threads _NUM_

Concurrent requests (default: 1)

-v _LEVEL_

Verbosity level (0-6)

--wizard

Interactive wizard for beginners