1. Paste raw HTTP request
Copy a request from Burp (Repeater/Proxy → right‑click → "Copy request") and paste it below. Nothing here ever leaves your browser — parsing and command generation are 100% client‑side.
2. Review request & mark injection point
Click insert * next to any field to place sqlmap's injection marker at the cursor position. You can mark one or several spots (URL params, cookie values, headers, body).
3. SQLMap options
4. Generated command
Save the request below as request.txt (the injection marker * stays embedded in it), then run the command underneath in the same directory.