SQLMAP(1)

🌈 SQLMAP(1) — like, the whole manual bestie 💖

okay so you opened the manual for sqlmap and honestly? iconic choice. it's an automatic SQL injection tool and it's lowkey a whole legend. this is the User Commands page, page one of one, and we're gonna get through it together. grab a snack 🍓

---

✨ NAME ✨

sqlmap — automatic SQL injection tool

periodt. that's the name. that's what it does.

---

🦋 SYNOPSIS 🦋

python3 sqlmap [options]

that's it. that's the whole vibe. python3 runs it, and then you feed it [options] like you're ordering a very specific drink 💅

---

💜 DESCRIPTION 💜

no cap, the description is literally a little mascot. here it is in all its glory, verbatim, because I would never mess with the art:

              ___

              __H__

       ___ ___[']_____ ___ ___
              {1.7.10#stable}

       |_ -| . [,]     | .'| . | |___|_  [)]_|_|_|__,|  _|

       |_|V...
              |_|   https://sqlmap.org

look at her. she's got the version number 1.7.10#stable right in the middle and the homepage https://sqlmap.org at the bottom. main character energy fr fr 👑

---

🎀 OPTIONS 🎀

this is the long part and I'm not skipping a single one, bestie. we're going the whole way down. buckle up 🫶

🌸 the basics

• -h, --help — shows the basic help message and dips (exits)
• -hh — shows the advanced help message and dips. yeah she has two help modes, she's extra and we love her
• --version — prints the program's version number and exits
• -v VERBOSE — verbosity level: 0-6 (default 1)

---

🎯 Target

At least one of these options has to be provided to define the target(s)

like, you have to tell her what to attack, she's not psychic bestie 😭

• -u URL, --url=URL — target URL (e.g. "http://www.site.com/vuln.php?id=1")
• -g GOOGLEDORK — process Google dork results as target URLs

---

📡 Request

these ones are for telling her how to connect to the target URL, like giving her the wifi password

• --data=DATA — data string to be sent through POST (e.g. "id=1")
• --cookie=COOKIE — HTTP Cookie header value (e.g. "PHPSESSID=a8d127e..")
• --random-agent — use a randomly selected HTTP User-Agent header value
• --proxy=PROXY — use a proxy to connect to the target URL
• --tor — use Tor anonymity network
• --check-tor — check to see if Tor is used properly

---

💉 Injection

these ones say which parameters to test for, let you bring custom injection payloads, and let you add optional tampering scripts

• -p TESTPARAMETER — testable parameter(s)
• --dbms=DBMS — force back-end DBMS to provided value

---

🔍 Detection

these customize the detection phase, aka the "is there even anything here" era

• --level=LEVEL — level of tests to perform (1-5, default 1)
• --risk=RISK — risk of tests to perform (1-3, default 1)

---

🧚 Techniques

these tweak the testing of specific SQL injection techniques

• --technique=TECH.. — SQL injection techniques to use (default "BEUSTQ")

---

👑 Enumeration

these are for enumerating the back-end database management system's information, structure, and the data chilling inside the tables

• -a, --all — retrieve everything
• -b, --banner — retrieve DBMS banner
• --current-user — retrieve DBMS current user
• --current-db — retrieve DBMS current database
• --passwords — enumerate DBMS users password hashes
• --dbs — enumerate DBMS databases
• --tables — enumerate DBMS database tables
• --columns — enumerate DBMS database table columns
• --schema — enumerate DBMS schema
• --dump — dump DBMS database table entries
• --dump-all — dump all DBMS databases tables entries
• -D DB — DBMS database to enumerate
• -T TBL — DBMS database table(s) to enumerate
• -C COL — DBMS database table column(s) to enumerate

---

🖥️ Operating system access

these let you get at the operating system sitting underneath the back-end database management system. yeah. underneath. 😳

• --os-shell — prompt for an interactive operating system shell
• --os-pwn — prompt for an OOB shell, Meterpreter or VNC

---

⚙️ General

general working parameters, the little housekeeping besties

• --batch — never ask for user input, use the default behavior
• --flush-session — flush session files for current target

---

🌈 Miscellaneous

these do not fit into any other category and honestly? relatable. they're the ones that live outside the boxes

• --wizard — simple wizard interface for beginner users

---

and that's the whole page, bestie, every single flag accounted for, nothing skipped, nothing invented 💖

reminder: at least one target option is required, so don't just run her with no target and then act surprised, iykyk 🙈

---

💅 okay and for the cute sign-off: this page is sqlmap v1.7.10, dated October 2023, and it lives on the SQLMAP(1) manual page. slay. go inject responsibly (like, legally, with permission, please) ✨🎀🦋