• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
The Practical Guide to sqlmap for SQL Injection

20 sections · 62 lessons

  • Video
  • Reading
  • Quiz
  • Premium
  1. 1 About the Course
    1. Video: About the course Preview
    2. Video: About the course author Preview
    3. Video: Pre-requisites Preview
  2. 2 Setting up our lab environment
    1. Video: Creating a home lab environment Preview
    2. Video: Downloading the latest sqlmap (optional) Preview
  3. 3 sqlmap Overview
    1. Video: What is sqlmap? Premium
    2. Video: sqlmap: An introduction Premium
    3. Video: Techniques used by sqlmap Premium
    4. Video: Features and usage Premium
    5. Video: Understanding the source code Premium
    6. Reading: Knowledge check Premium
      1. Quiz: sqlmap Overview Knowledge Check Premium
  4. 4 sqlmap Options Deep Dive
    1. Video: Navigating the options sections Premium
    2. Video: Using vulnserver.py Premium
  5. 5 Main Options
    1. Video: Options Premium
    2. Video: Target Premium
    3. Reading: Practical Knowledge Check Premium
  6. 6 Requests Options
    1. Video: HTTP headers, methods, and data Premium
    2. Video: Cookies Premium
    3. Video: HTTP authentication Premium
    4. Video: Proxies and using sqlmap anonymously Premium
    5. Video: CSRF tokens Premium
    6. Video: General Options Premium
    7. Video: Eval Premium
    8. Reading: Practical Knowledge Check Premium
  7. 7 Optimizations Options
    1. Video: Optimization Premium
  8. 8 Injections Options
    1. Video: Injection part 1 Premium
    2. Video: Injection part 2 Premium
    3. Video: Tamper scripts Premium
  9. 9 Detection Options
    1. Video: Detection Premium
    2. Reading: Practical Knowledge Check Premium
  10. 10 Techniques Options
    1. Video: Techniques part 1 Premium
    2. Video: Techniques part 2 Premium
  11. 11 Fingerprinting Options
    1. Video: Fingerprinting Premium
    2. Reading: Practical Knowledge Check Premium
  12. 12 Enumeration Options
    1. Video: Enumeration part 1 Premium
    2. Video: Enumeration part 2 Premium
    3. Video: Enumeration part 3 Premium
    4. Reading: Practical Knowledge Check Premium
  13. 13 Brute Force Options
    1. Video: Brute force Premium
  14. 14 UDF Options
    1. Video: User-defined function injection Premium
  15. 15 File, OS, and Windows registry access
    1. Video: File system access Premium
    2. Video: Operating system access Premium
    3. Video: Windows registry access Premium
    4. Reading: Practical knowledge check Premium
  16. 16 General & Miscellaneous
    1. Video: General part 1 Premium
    2. Video: General part 2 Premium
    3. Video: General part 3 Premium
    4. Video: Miscellaneous Premium
    5. Reading: Practical Knowledge Check Premium
  17. 17 sqlmap in action
    1. Video: Information gathering Premium
    2. Video: Finding an SQL injection vulnerability Premium
    3. Video: Exploiting an SQL injection vulnerability to extract data Premium
    4. Video: Cracking extracted password hashes Premium
  18. 18 Bypassing WAFs
    1. Video: WAFs overview Premium
    2. Video: WAF identification Premium
    3. Video: Manual WAF bypass Premium
    4. Video: WAF bypass with sqlmap Premium
  19. 19 Running sqlmap as an API
    1. Video: Why run sqlmap as an API? Premium
    2. Video: How to run sqlmap as an API Premium
  20. 20 Conclusion
    1. Reading: Additional resources Premium
    2. Reading: What now? Premium

Section 3 · sqlmap Overview

Features and usage

Christophe Limpalair

Christophe Limpalair

Premium

This lesson is part of a Premium course

Join Premium to open it, along with every course, practice exam and hands-on lab on Cybr.

View Plans Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
PreviousTechniques used by sqlmap
Next Understanding the source code