SQLMap Section 7 of 13

Common Flags Reference

Complete reference of SQLMap command-line flags organized by category.

-u <url>Target URL with parameter to test

-r <file>Load HTTP request from file (Burp export)

-p <param>Specify parameter(s) to test

--data <data>POST data string

--cookie <cookie>HTTP Cookie header value

--headers <headers>Extra HTTP headers

--user-agent <ua>Custom User-Agent header

--referer <url>HTTP Referer header

--level <1-5>Test level (1=basic, 5=exhaustive)

--risk <1-3>Risk level (1=safe, 3=aggressive)

--technique <techniques>Specify technique order (BEUSTQ)

--dbms <dbms>Force backend DBMS type

--dbsEnumerate databases

--tablesEnumerate tables

-D <db>Specify database name

-T <table>Specify table name

--columnsEnumerate columns

-C <columns>Specify column names

--dumpDump table data

--dump-allDump all databases

--os-shellGet OS shell

--os-cmd <cmd>Execute OS command

--file-read <path>Read file from server

--file-write <local>Write file to server

--file-dest <path>Destination path for file write

--tamper <script>Use tamper script(s) to bypass WAF

--tamper <s1,s2>Chain multiple tamper scripts

--proxy <url>Route traffic through proxy

--torUse Tor anonymity network

--tor-port <port>Tor SOCKS port (default: 9050)

--threads <n>Number of concurrent HTTP requests

--batchNever ask for user input (use defaults)

-v <0-6>Verbosity level (0=quiet, 6=debug)

--output-dir <path>Output directory for logs

--flush-sessionFlush session files