SQLMAP 2018中文详解：高级渗透工具命令与选项解析

Usage: python sqlmap.py [options]  
  
Options（选项）:  
  
  -h, --help            Show basic help message and exit        显示此帮助消息并退出  
  -hh                   Show advanced help message and exit     展示先进的帮助信息并退出  
  --version             Show program's version number and exit  显示程序的版本号并退出  
  -v VERBOSE            Verbosity level: 0-6 (default 1)        详细级别：0-6（默认为1）   
  
  Target（目标）:  
  
    At least one of these options has to be provided to define the    
    target(s)  
    以下至少需要设置其中一个选项，设置目标URL。  
  
    -d DIRECT           Connection string for direct database connection        直接连接到数据库。  
    -u URL, --url=URL   Target URL (e.g. "http://www.site.com/vuln.php?id=1")   目标URL。  
    -l LOGFILE          Parse target(s) from Burp or WebScarab proxy log file   解析目标(s)从Burp或WebScarab代理日志文件  
    -x SITEMAPURL       Parse target(s) from remote sitemap(.xml) file          解析目标(s)从远程站点地图文件(.xml)  
    -m BULKFILE         Scan multiple targets given in a textual file           扫描文本文件中给出的多个目标  
    -r REQUESTFILE      Load HTTP request from a file                           从文件加载HTTP请求  
    -g GOOGLEDORK       Process Google dork results as target URLs              处理Google dork的结果作为目标URL。  
    -c CONFIGFILE       Load options from a configuration INI file              从INI配置文件中加载选项。  
  
  Request（请求）:  
  
    These options can be used to specify how to connect to the target URL   这些选项可以用来指定如何连接到目标URL。  
  
    --method=METHOD     Force usage of given HTTP method (e.g. PUT)          强制使用给定的HTTP方法（e.g. PUT）  

    --data=DATA         Data string to be sent through POST                  通过POST发送的数据字符串  
    --param-del=PARA..  Character used for splitting parameter values        用于拆分参数值的字符  
    --cookie=COOKIE     HTTP Cookie header value                             HTTP Cookie头的值  
    --cookie-del=COO..  Character used for splitting cookie values           用于分割Cookie值的字符  
    --load-cookies=L..  File containing cookies in Netscape/wget format      包含Netscape / wget格式的cookie的文件  
    --drop-set-cookie   Ignore Set-Cookie header from response               从响应中忽略Set-Cookie头  
    --user-agent=AGENT  HTTP User-Agent header value                         指定 HTTP User - Agent头    
    --random-agent      Use randomly selected HTTP User-Agent header value   使用随机选定的HTTP User - Agent头   
    --host=HOST         HTTP Host header value                                HTTP主机头值  
    --referer=REFERER   HTTP Referer header value                             指定 HTTP Referer头  
    -H HEADER, --hea..  Extra header (e.g. "X-Forwarded-For: 127.0.0.1")      额外header  
    --headers=HEADERS   Extra headers (e.g. "Accept-Language: fr\nETag: 123") 额外header  
    --auth-type=AUTH..  HTTP authentication type (Basic, Digest, NTLM or PKI) HTTP认证类型(Basic, Digest, NTLM or PKI)  
    --auth-cred=AUTH..  HTTP authentication credentials (name:password)       HTTP认证凭证(name:password)  
    --auth-file=AUTH..  HTTP authentication PEM cert/private key file         HTTP认证 PEM认证/私钥文件  
    --ignore-401        Ignore HTTP Error 401 (Unauthorized)                  忽略HTTP错误401(未经授权)  
    --proxy=PROXY       Use a proxy to connect to the target URL              使用代理连接到目标网址  
    --proxy-cred=PRO..  Proxy authentication credentials (name:password)      代理认证证书(name:password)   
    --proxy-file=PRO..  Load proxy list from a file                           从文件中加载代理列表  
    --ignore-proxy      Ignore system default proxy settings                  忽略系统默认代理设置  
    --tor               Use Tor anonymity network                             使用Tor匿名网络  
    --tor-port=TORPORT  Set Tor proxy port other than default                 设置Tor代理端口而不是默认值  
    --tor-type=TORTYPE  Set Tor proxy type (HTTP (default), SOCKS4 or SOCKS5) 设置Tor代理类型  
    --check-tor         Check to see if Tor is used properly                  检查Tor是否正确使用  
    --delay=DELAY       Delay in seconds between each HTTP request             每个HTTP请求之间的延迟（秒）  
    --timeout=TIMEOUT   Seconds to wait before timeout connection (default 30) 秒超时连接前等待（默认30）  
    --retries=RETRIES   Retries when the connection timeouts (default 3)       连接超时时重试（默认值3）  
    --randomize=RPARAM  Randomly change value for given parameter(s)           随机更改给定参数的值(s)  
    --safe-url=SAFEURL  URL address to visit frequently during testing         在测试期间频繁访问的URL地址  
    --safe-post=SAFE..  POST data to send to a safe URL                        POST数据发送到安全URL