https://www.hackingarticles.in/command-injection-exploitation-through-sqlmap-in-dvwa/
Command Injection Exploitation through Sqlmap in DVWA (OS-cmd)