I recommend having a read of this CTF writeup[0], and the Albatar framework that was used to solve it (cannot be done with sqlmap, I tried). It's incredible how

I recommend having a read of this CTF writeup[0], and the Albatar framework that was used to solve it (cannot be done with sqlmap, I tried). It's incredible how far people can go with SQLi. [0] https://github.com/ctfs/write-ups-2016/tree/master/nullcon-hackim-2016/web/luhn-300 https://github.com/ctfs/write-ups-2016/tree/master/nullcon-h...