Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I want to understand the deep theory behind sqlmap - the decision making of the programm - how is it done? Is there any public paper? (There is still an option to read and understand sqlmap code and use -vvv switch).
I'm searching for a visualisation of sqlmap's decision tree.
Note: I know how SQL injection works and I'm familiar with sqlmap's wiki.
You may want to look at the list of presentations maintained by the sqlmap project. For example, they list sqlmap - Under the Hood and link to the slides. The same talk as presented by the author is no longer available on Youtube (unfortunate, since slide decks often leave out the meat of the discussion). (Of course, there are many other presentations and tutorials on Youtube, but probably less on the deep internals).
