From 90c4cf291bfc04653bbba96ebff5baab954edecb Mon Sep 17 00:00:00 2001 From: stamparm Date: Fri, 15 Mar 2013 09:47:24 -0700 Subject: [PATCH] Updated Usage (markdown) --- Usage.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/Usage.md b/Usage.md index a8b519668..15b9aca3e 100644 --- a/Usage.md +++ b/Usage.md @@ -247,11 +247,17 @@ A reasonable level of verbosity to further understand what sqlmap does under the At least one of these options has to be provided. +### Direct connection to the database + +Option: `-d` + +Run sqlmap against a single database instance. This option requires a connection string in form `http(s)://targeturl[:port]/[...]`. + ### Target URL Option: `-u` or `--url` -Run sqlmap against a single target URL. This switch requires an argument which is the target URL in the form `http(s)://targeturl[:port]/[...]`. +Run sqlmap against a single target URL. This option requires a target URL in form `DBMS://USER:PASSWORD@DBMS_IP:DBMS_PORT/DATABASE_NAME` (for e.g. MySQL) or `DBMS://DATABASE_FILEPATH` (for e.g. Microsoft Access). ### Parse targets from Burp or WebScarab proxy logs @@ -270,7 +276,7 @@ each of those one by one. Sample content of a bulk file provided as an argument to this option: www.target1.com/vuln1.php?q=foobar - www.target2.com/vuln2.php?id=1 + www.target2.com/vuln2.asp?id=1 www.target3.com/vuln3/id/1* ### Load HTTP request from a file