????sql??????????????????1?????????????????淶??????????????????????????????
????sqlmap?????????????sql???????????sql????????????????????????????????????shell ??????????sqlmap.org?????wiki?????wiki
????????????
???????windows??linux
?????譎?python?????鰲? 2.7????汾
???????
???????????????https://github.com/sqlmapproject/sqlmap/
???????????
???????
????sqlmap?????????????????????cookie??header??????????????????????????????shell??????????????????????о?????????
????/path/sqlmap.py -u "http://xxx.xxx.com/jzshow/gacs/list/id/3" --current-db
?????????????
????-u            ???????url????
????--current-db  ???????????????
???????????
?????????https://github.com/sqlmapproject/sqlmap/wiki/Usage
????wooyun???????http://drops.wooyun.org/tips/143
???????
????????????????


????
???????????

??????????????


???????????????????

?????????2015/11????????2016/03