diff --git a/Usage.md b/Usage.md index 9e2938223..ec5cfe322 100644 --- a/Usage.md +++ b/Usage.md @@ -1506,6 +1506,16 @@ Option: `--flush-session` As you are already familiar with the concept of a session file from the description above, it is good to know that you can flush the content of that file using option `--flush-session`. This way you can avoid the caching mechanisms implemented by default in sqlmap. Other possible way is to manually remove the session file(s). +### Parse and test forms' input fields + +Switch: `--forms` + +Say that you want to test against SQL injections a huge _search form_ or you want to test a login bypass (typically only two input fields named like _username_ and _password_), you can either pass to sqlmap the request in a request file (`-r`), set the POSTed data accordingly (`--data`) or let sqlmap do it for you! + +Both of the above mentioned instances, and many others, appear as `