mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-07-15 18:52:31 +03:00
Documentation update
This commit is contained in:
parent
023a80c31c
commit
6e1a08a805
71
doc/FAQ.sgml
71
doc/FAQ.sgml
|
@ -2,13 +2,13 @@
|
||||||
|
|
||||||
<article>
|
<article>
|
||||||
|
|
||||||
<title>sqlmap FAQ
|
<title>sqlmap - Frequently Asked Questions
|
||||||
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">, <htmlurl url="mailto:miroslav.stampar@gmail.com" name="Miroslav Stampar">
|
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">,
|
||||||
<date>May 10, 2010
|
<htmlurl url="mailto:miroslav.stampar@gmail.com" name="Miroslav Stampar">
|
||||||
|
<date>March 10, 2011
|
||||||
<abstract>
|
<abstract>
|
||||||
This document contains frequently asked questions for <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">.
|
This document contains frequently asked questions for <htmlurl
|
||||||
Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage">
|
url="http://sqlmap.sourceforge.net" name="sqlmap">.
|
||||||
for the latest version.
|
|
||||||
</abstract>
|
</abstract>
|
||||||
|
|
||||||
<toc>
|
<toc>
|
||||||
|
@ -18,15 +18,9 @@ for the latest version.
|
||||||
<sect1>What is sqlmap?
|
<sect1>What is sqlmap?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
sqlmap is an open source penetration testing tool that automates the
|
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
|
||||||
process of detecting and exploiting SQL injection flaws and taking over of
|
|
||||||
back-end database servers.
|
|
||||||
It comes with a broad range of features lasting from database
|
|
||||||
fingerprinting, over data fetching from the database, to accessing the
|
|
||||||
underlying file system and executing commands on the operating system via
|
|
||||||
out-of-band connections.
|
|
||||||
|
|
||||||
<sect1>How to run sqlmap?
|
<sect1>How do I execute sqlmap?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
If you are running on a Unix/Linux system type the following command
|
If you are running on a Unix/Linux system type the following command
|
||||||
|
@ -42,6 +36,10 @@ from a terminal:
|
||||||
C:\Python26\python.exe sqlmap.py -h
|
C:\Python26\python.exe sqlmap.py -h
|
||||||
</verb></tscreen>
|
</verb></tscreen>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
Where <tt>C:\Python26</tt> is the path where you installed <htmlurl
|
||||||
|
url="http://www.python.org" name="Python"> <bf>>= 2.6</bf>.
|
||||||
|
|
||||||
<sect1>Can I integrate sqlmap with a security tool I am developing?
|
<sect1>Can I integrate sqlmap with a security tool I am developing?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
|
@ -50,38 +48,47 @@ derivative work must be distributed without further restrictions on the
|
||||||
rights granted by the GPL itself. If this constitutes a problem, feel free
|
rights granted by the GPL itself. If this constitutes a problem, feel free
|
||||||
to contact us so we can find a solution.
|
to contact us so we can find a solution.
|
||||||
|
|
||||||
|
<sect1>How can I integrate sqlmap with my own tool?
|
||||||
|
|
||||||
|
<p>
|
||||||
|
TODO
|
||||||
|
|
||||||
<sect1>Will you support other database management systems?
|
<sect1>Will you support other database management systems?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
Yes. There are plans to support also IBM DB2, Informix and others in the
|
Yes. There are plans to support also IBM DB2, Informix and Ingres at some
|
||||||
long term.
|
point.
|
||||||
|
|
||||||
<sect1>How can I occasionally contribute?
|
<sect1>How can I occasionally contribute?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
All help is greatly appreciated. First of all download the tool, read the
|
All help is greatly appreciated. First of all download the tool, make sure
|
||||||
user's manual, have fun with it during your penetration tests. If you find
|
you are running the latest development version from the Subversion
|
||||||
bugs or have ideas for possible improvements, feel free to get in touch.
|
repository, read the user's manual carefully, have fun with it during your
|
||||||
Many people <htmlurl url="https://svn.sqlmap.org/sqlmap/trunk/sqlmap/doc/THANKS"
|
penetration tests.
|
||||||
name="have contributed"> in different ways to the sqlmap development.
|
If you find bugs or have ideas for possible improvements, feel free to
|
||||||
You can be the next!
|
<htmlurl url="http://sqlmap.sourceforge.net/#ml" name="get in touch on the
|
||||||
|
mailing list">. Many people have <htmlurl
|
||||||
|
url="https://svn.sqlmap.org/sqlmap/trunk/sqlmap/doc/THANKS"
|
||||||
|
name="contributed"> in different ways to the sqlmap development.
|
||||||
|
<bf>You</bf> can be the next!
|
||||||
|
|
||||||
<sect1>Can I actively contribute in the long-term development?
|
<sect1>Can I actively contribute in the long-term development?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
Yes, we are looking for security geeks who can write some clean Python
|
Yes, we are looking for people who can write some clean Python code, are
|
||||||
code, are up to do security research, know about web application security,
|
up to do security research, know about web application security, database
|
||||||
database assessment and takeover, post-exploitation techniques, software
|
assessment and takeover, software refactoring and are motivated to join
|
||||||
refactoring and are motivated to join the development team. If you are
|
the development team.
|
||||||
interested, feel free to <htmlurl url="http://sqlmap.sourceforge.net/#author"
|
If this sounds interesting to you, <htmlurl
|
||||||
name="get in touch">.
|
url="http://sqlmap.sourceforge.net/#developers" name="get in touch">!
|
||||||
|
|
||||||
<sect1>How can I support the development?
|
<sect1>How can I support the development?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
If you think that sqlmap is awesome, it really played well during your
|
If you think that sqlmap is a great tool, it really played well during
|
||||||
penetration tests, or you simply like it, you, or your boss, can <htmlurl
|
your penetration tests, or you simply like it, you, or your boss, can
|
||||||
url="http://sourceforge.net/donate/index.php?group_id=171598" name="donate
|
<htmlurl url="http://sqlmap.sourceforge.net/#donate" name="donate
|
||||||
some money"> to the developers via PayPal.
|
some money"> to the developers via PayPal.
|
||||||
|
|
||||||
<sect1>Can you hack a site for me?
|
<sect1>Can you hack a site for me?
|
||||||
|
@ -92,6 +99,6 @@ some money"> to the developers via PayPal.
|
||||||
<sect1>How sqlmap decides this and that?
|
<sect1>How sqlmap decides this and that?
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
That's how.
|
TODO
|
||||||
|
|
||||||
</article>
|
</article>
|
||||||
|
|
1822
doc/README.sgml
1822
doc/README.sgml
File diff suppressed because it is too large
Load Diff
Loading…
Reference in New Issue
Block a user