Setting particular type of attack with Sqlmap

Question

Instead of testing all the possible attacks using sqlmap, is there any way to test a vulnerable server using a particular type of attack only? For example, I only want to attack a webserver with PostgreSQL stacked conditional-error blind queries. Is there any way to do so?

Have you already read the advanced help using `-hh`? – Gumbo May 13 '15 at 16:15 — Gumbo, May 13 '15 at 16:15

score 8 · Answer 1 · answered May 14 '15 at 10:50

The --dbms=DBMS flag will force use of a particular back-end database system.

For PostgresSQL set this to

--dbms=PostgreSQL

The --technique flag will enable you to set the type of queries.

e.g.

--technique=B

B is the setting for boolean-based blind.

See the usage guide for full details.

Setting particular type of attack with Sqlmap

1 Answers1