Documentation update

This commit is contained in:
Bernardo Damele 2011-02-19 21:08:18 +00:00
parent 023a80c31c
commit 6e1a08a805
2 changed files with 683 additions and 1212 deletions

View File

@ -2,13 +2,13 @@
<article> <article>
<title>sqlmap FAQ <title>sqlmap - Frequently Asked Questions
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">, <htmlurl url="mailto:miroslav.stampar@gmail.com" name="Miroslav Stampar"> <author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">,
<date>May 10, 2010 <htmlurl url="mailto:miroslav.stampar@gmail.com" name="Miroslav Stampar">
<date>March 10, 2011
<abstract> <abstract>
This document contains frequently asked questions for <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">. This document contains frequently asked questions for <htmlurl
Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage"> url="http://sqlmap.sourceforge.net" name="sqlmap">.
for the latest version.
</abstract> </abstract>
<toc> <toc>
@ -18,15 +18,9 @@ for the latest version.
<sect1>What is sqlmap? <sect1>What is sqlmap?
<p> <p>
sqlmap is an open source penetration testing tool that automates the sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
process of detecting and exploiting SQL injection flaws and taking over of
back-end database servers.
It comes with a broad range of features lasting from database
fingerprinting, over data fetching from the database, to accessing the
underlying file system and executing commands on the operating system via
out-of-band connections.
<sect1>How to run sqlmap? <sect1>How do I execute sqlmap?
<p> <p>
If you are running on a Unix/Linux system type the following command If you are running on a Unix/Linux system type the following command
@ -42,6 +36,10 @@ from a terminal:
C:\Python26\python.exe sqlmap.py -h C:\Python26\python.exe sqlmap.py -h
</verb></tscreen> </verb></tscreen>
<p>
Where <tt>C:\Python26</tt> is the path where you installed <htmlurl
url="http://www.python.org" name="Python"> <bf>>= 2.6</bf>.
<sect1>Can I integrate sqlmap with a security tool I am developing? <sect1>Can I integrate sqlmap with a security tool I am developing?
<p> <p>
@ -50,38 +48,47 @@ derivative work must be distributed without further restrictions on the
rights granted by the GPL itself. If this constitutes a problem, feel free rights granted by the GPL itself. If this constitutes a problem, feel free
to contact us so we can find a solution. to contact us so we can find a solution.
<sect1>How can I integrate sqlmap with my own tool?
<p>
TODO
<sect1>Will you support other database management systems? <sect1>Will you support other database management systems?
<p> <p>
Yes. There are plans to support also IBM DB2, Informix and others in the Yes. There are plans to support also IBM DB2, Informix and Ingres at some
long term. point.
<sect1>How can I occasionally contribute? <sect1>How can I occasionally contribute?
<p> <p>
All help is greatly appreciated. First of all download the tool, read the All help is greatly appreciated. First of all download the tool, make sure
user's manual, have fun with it during your penetration tests. If you find you are running the latest development version from the Subversion
bugs or have ideas for possible improvements, feel free to get in touch. repository, read the user's manual carefully, have fun with it during your
Many people <htmlurl url="https://svn.sqlmap.org/sqlmap/trunk/sqlmap/doc/THANKS" penetration tests.
name="have contributed"> in different ways to the sqlmap development. If you find bugs or have ideas for possible improvements, feel free to
You can be the next! <htmlurl url="http://sqlmap.sourceforge.net/#ml" name="get in touch on the
mailing list">. Many people have <htmlurl
url="https://svn.sqlmap.org/sqlmap/trunk/sqlmap/doc/THANKS"
name="contributed"> in different ways to the sqlmap development.
<bf>You</bf> can be the next!
<sect1>Can I actively contribute in the long-term development? <sect1>Can I actively contribute in the long-term development?
<p> <p>
Yes, we are looking for security geeks who can write some clean Python Yes, we are looking for people who can write some clean Python code, are
code, are up to do security research, know about web application security, up to do security research, know about web application security, database
database assessment and takeover, post-exploitation techniques, software assessment and takeover, software refactoring and are motivated to join
refactoring and are motivated to join the development team. If you are the development team.
interested, feel free to <htmlurl url="http://sqlmap.sourceforge.net/#author" If this sounds interesting to you, <htmlurl
name="get in touch">. url="http://sqlmap.sourceforge.net/#developers" name="get in touch">!
<sect1>How can I support the development? <sect1>How can I support the development?
<p> <p>
If you think that sqlmap is awesome, it really played well during your If you think that sqlmap is a great tool, it really played well during
penetration tests, or you simply like it, you, or your boss, can <htmlurl your penetration tests, or you simply like it, you, or your boss, can
url="http://sourceforge.net/donate/index.php?group_id=171598" name="donate <htmlurl url="http://sqlmap.sourceforge.net/#donate" name="donate
some money"> to the developers via PayPal. some money"> to the developers via PayPal.
<sect1>Can you hack a site for me? <sect1>Can you hack a site for me?
@ -92,6 +99,6 @@ some money"> to the developers via PayPal.
<sect1>How sqlmap decides this and that? <sect1>How sqlmap decides this and that?
<p> <p>
That's how. TODO
</article> </article>

File diff suppressed because it is too large Load Diff