The --level and --risk options are critical to understand when using sqlmap, because they decide what tests are performed and what payloads are used when looking for SQL injections in web applications. They can make the difference between finding and not finding SQL injection vulnerabilities. They can also cause damage to your target applications if not used correctly. Definitely check out this video before using sqlmap in bug bounty or pentest engagements, and share with anyone else who you think needs to see this! Download free sqlmap cheat sheets: https://cybr.com/ethical-hacking-archives/sqlmap-cheat-sheets-to-help-you-find-sql-injections/ This video was extracted from our sqlmap course: https://cybr.com/courses/the-practical-guide-to-sqlmap-for-sql-injection/