[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-571617-105":53,"doc-detail-571617-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","sqlmap-cheat-sheet-installation-and-usage","sqlmap Cheat Sheet - Installation and Usage","","Quick reference for using sqlmap to perform SQL injection testing. Covers installation on Linux, core scan commands for URLs and request files, interactive wizard and help flags, and essential options like verbosity and batch mode. Includes target specification, HTTP request options (POST data, headers, cookies, user-agent), WAF bypass and proxy/Tor anonymity settings, detection level and risk controls, injection technique shortcuts, session management, enumeration and exploitation options, and output saving.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/sqlmap-cheat-sheet-installation-and-usage/571617/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/sqlmap-cheat-sheet-installation-and-usage/571617.png","ImageObject",442,249,{"name":88,"@type":89},"Guten tag","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-26","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",7,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"How do I install sqlmap on Linux?","Question",{"text":109,"@type":110},"Use sudo apt install sqlmap.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"What basic command runs a scan against a target URL?",{"text":114,"@type":110},"Run sqlmap -u \u003Curl>.",{"name":116,"@type":107,"acceptedAnswer":117},"How can I enumerate databases and dump table entries with sqlmap?",{"text":118,"@type":110},"Use options like --dbs to list databases and -D \u003Cdatabase> with --tables, -T \u003Ctable> with --dump to dump table entries.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},571617,1792117981,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":9,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":4},687212321768,"https://ap-avatar.wpscdn.com/avatar/a0010bdbe886d2fe77?x-image-process=image/resize,m_fixed,w_180,h_180&k=1789897067658708522","sqlmap Cheat Sheet  \nInstallation  \nsudo apt install sqlmap  \n| \u003Cbr>Basic usage |  |  |\n| --- | --- | --- |\n| Command |  | Description |\n| sqlmap | -u \u003Curl> | \u003Cbr>Run scan against a URL |\n| sqlmap | -r \u003Cfile> | Run scan on [HTTP](HTTP) request file |\n| sqlmap | --wizard | \u003Cbr>Interactive wizard |\n| sqlmap | -h | Show basic help message |\n| sqlmap | -hh | \u003Cbr>Show advanced help message |\n| sqlmap | - -version | Show sqlmap version |\n| \u003Cbr>Basic options |  |  |\n| Option |  | Description |\n| -v \u003Cverbosity> |  | \u003Cbr>Set verbosity level (0-6) |\n| --batch |  | Don't ask for user input |\n| \u003Cbr>Target specification |  |  |\n| Option |  | Description |\n| -u \u003Curl> |  | \u003Cbr>Target URL |\n| -m \u003Cfile> |  | Scan URLs from a file |\n| -g \u003Cquery> |  | \u003Cbr>Target Google dork URLs |\n| - -crawl=\u003Cdepth> |  | Crawl from the target URL |\n| \u003Cbr>[HTTP](HTTP) request options |  |  |\n| Option | Description |  |\n| \u003Cbr>--data 'uid=1&name=test' Send a POST request with data |  |  |\n| -H \u003Cheader> |  | Specify a header |\n| \u003Cbr>--cookie='PHPSESSID=1234' Specify a cookie header |  |  |\n| --user-agent=\u003Cua> [HTTP](HTTP) user-agent header value\u003Cbr>© Nth Root Software Consultancy. Licensed under CC BY-ND 4.0  |  |  |\n\n\n| WAF bypass options |  |\n| --- | --- |\n| Option | Description |\n| - -random-agent | Use random user-agent |\n| --cs rf-token=\u003Cparam> | CSRF token parameter name |\n| --tamper=\u003Ctamper> | Use tamper script |\n| --list-tampers | List available tamper scripts |\n| IP address concealment |  |\n| Option | Description |\n| --proxy=\u003Caddress> | Use a proxy server |\n| --tor | Use Tor anonymity network |\n| --check-tor | Ensure that Tor is used properly |\n|  |  |\n| Detection options |  |\n| Option | Description |\n| --level=LEVEL | Level of tests to perform (1-5) |\n| - -risk=RISK | Risk of tests to perform (1-3) |\n| --technique=\u003Ctechniques>\u003Cbr>SQL injection techniques to use (default \"BEUSTQ\", see below) |  |\n|  |  |\n| Injection techniques |  |\n| Technique | Description |\n| Boolean-based blind (B) | Appends AND/OR to test for true/false responses |\n| Error-based (E) | Forces DBMS to generate an error |\n| UNION query-based (U) | Appends UNION SELECT |\n| Stacked queries (S) | Appends ; to execute multiple queries |\n| Time-based blind (T) | Appends SLEEP() to delay response |\n| Inline queries (Q) | Appends inline queries |\n\n\n| Session options |  |\n| --- | --- |\n| Option | Description |\n| --flush-session | \u003Cbr>Flush this target's session |\n| --fresh-queries | Ignore stored query results |\n| --purge | \u003Cbr>Remove all session data |\n|  |  |\n| Enumeration & | exploitation options |\n| Option | Description |\n| --all | \u003Cbr>Retrieve everything |\n| --banner | Retrieve DBMS banner |\n| --fingerprint | \u003Cbr>Extensive DBMS fingerprint |\n| --current-user | Retrieve current user |\n| --current-db | \u003Cbr>Retrieve current database |\n| --dbs | List databases |\n| --tables | \u003Cbr>List tables |\n| - -columns | List columns |\n| - -schema | \u003Cbr>Enumerate database schema |\n| --dump | Dump table entries |\n| --dump-all | \u003Cbr>Dump table entries for all databases |\n| -D \u003Cdatabase> | Database to enumerate |\n| -T \u003Ctable> | \u003Cbr>Table(s) to enumerate |\n| -C \u003Ccolumn> | Table column(s) to enumerate |\n| --file-read=\u003Cfile> | \u003Cbr>Read a file from the file system |\n| --os-shell | Prompt for an interactive shell |\n| Output |  |\n| Option | Description |\n| -t \u003Cfile> | \u003Cbr>Save requests and responses to a file |\n\n— Version: August 10, 2026 — Find more cheat sheets at [nth-root.nl/en/cheat-sheets](nth-root.nl/en/cheat-sheets)","cbCaitHZLKModgEH","https://ap.wps.com/l/cbCaitHZLKModgEH","pdf",58726,"English","# Installation\n# Basic usage\n# Basic options\n# Target specification\n# HTTP request options\n# WAF bypass options\n# IP address concealment\n# Detection options\n# Injection techniques\n# Session options\n# Enumeration & exploitation options\n# Output","[{\"question\":\"How do I install sqlmap on Linux?\",\"answer\":\"Use sudo apt install sqlmap.\"},{\"question\":\"What basic command runs a scan against a target URL?\",\"answer\":\"Run sqlmap -u \\u003curl\\u003e.\"},{\"question\":\"How can I enumerate databases and dump table entries with sqlmap?\",\"answer\":\"Use options like --dbs to list databases and -D \\u003cdatabase\\u003e with --tables, -T \\u003ctable\\u003e with --dump to dump table entries.\"}]","sqlmap Cheat Sheet - Installation and Usage | PDF",1791922745]