Sql Injection Exploitation with Sqlmap and Burp Suite (Burp CO2 Plugin)

Burp CO2 is an extension for the popular web proxy / web application testing tool called Burp Suite, available at Portswigger. You must install Burp Suite before installing the Burp CO2 extension. The CO2 extension includes a variety of functionality to enhance certain web penetration test tasks, such as an interface to make interacting with SQLMap more efficient and less error-prone, various tools for generating lists of users, a Laudanum exploitation shell implementation, and even a word masher for generating passwords.

For more details read from here burpco2.com

In this is article I will show you how to obtain sqlmap command through burp suit for sql injection.

Start burp suit andClick on Extender tag then click on BApp store which cantains burp extensions to extend burp’s capabilities.

Now select CO2 and click on install button available on the right sideof the frame.

Full Article Read here