SQL

Using burpsuite, intercept a request containing a request to a SQL database. Proxy -> intercept -> raw -> right click --> save item.
sqlmap -r (filename) --tamper=space2comment --dump-all [--dbms (dbms type)]
sqlmap will then use the parameters from the intercepted request.
​
Copy link