SQLMap Section 11 of 13
Pro Tips
Expert advice for efficient and effective SQL injection testing with SQLMap.
Tip
Export requests from Burp Suite and use
sqlmap -r request.txt to test them — much easier than manually crafting URLs.Info
Start with
--level=1 --risk=1 and increase only if needed. Higher levels send more requests and may cause damage.Tip
Use
--batch to run non-interactively and accept all defaults — great for scripting.Warning
The
--os-shell and --file-write options can cause serious damage to the target system. Use with extreme caution.Tip
Chain multiple tamper scripts for better WAF bypass:
--tamper=space2comment,randomcase,charencodeInfo
Use
--tor for anonymity, but remember Tor is slow. Consider a VPN for faster scans.Tip
Save session files to resume interrupted scans:
--flush-session clears old sessions.Optimization Tips
Speed Up Scans
bash
1sqlmap -u 'http://target.com?id=1' --threads=10 --batch --level=3
Use more threads for faster scanning, but don't overload the target.
Stealth Mode
bash
1sqlmap -u 'http://target.com?id=1' --delay=2 --timeout=30 --retries=1
Add delays to avoid detection by rate limiting or IDS.