SQL注入工具使用指南与常见问题解答.pdfVIP

sqlmapfrequentlyaskedquestions(FAQ)

BernardoDameleA.G.andMiroslavStampar

April15,2013(DRAFT)

sqlmapisanopensourcepenetrationtestingtoolthatautomatesthe

processofdetectingandexploitingSQLinjectionflawsandtakingoverof

databaseservers.Itcomeswithapowerfuldetectionengine,manyniche

featuresfortheultimatepenetrationtesterandabroadrangeofswitches

lastingfromdatabasefingerprinting,overdatafetchingfromthedatabase,

toaccessingtheunderlyingfilesystemandexecutingcommandsonthe

operatingsystemviaout-of-bandconnections.

Contents

1FrequentlyAskedQuestions1

1.1Whatissqlmap?1

1.2HowdoIexecutesqlmap?1

1.3CanIintegratesqlmapwithasecuritytoolIamdeveloping?2

1.4CanIembedsqlmapintoaproprietarysoftware?2

1.5HowcanIreportbugsorrequestnewfeatures?2

1.6CanIcontributeoccasionallytothedevelopment?3

1.7CanIactivelycontributeinthelong-termdevelopment?4

1.8HowcanIsupportthedevelopmentandshowmyappreciation?.4

1.9HowcanIfollowcloselythedevelopment?4

1.10Willyousupportotherdatabasemanagementsystems?5

1.11Canyouhackasiteforme?5

1.12Mysitewasattackedwithsqlmap.Stopdevelopingityoudumb

f.cks!?5

1.13WhensqlmapwillswitchtoPython3?5

SQLMAP经常询问问题（FAQ）

BernardoDameleA.G.和MiroslavStampar

（草案）

抽象的

SQLMAP是一种开源渗透测试工具，可自动检测和利用SQL注入并

接管数据库服务器的过程。它带有功能强大的检测引擎，最终渗透测试仪

的许多利基特征以及从数据库构图（从数据库获取到