exploit DVWA dengan sqlmap(updated)

firsh we running ubuntu in virtual box and open browser and write  192.168.56.1/dvwa then we running in attacer n open dvwa and picture as below:

and we running sqlmap than we write order as below

after then we write order in sqlmap as image in below, use for see database any kind of existing

then we insert the cookie and php but i trying to insert security high, this manner still be

then we delete --dbs and change with --user --passwords  use is looking user and password but here security just high

and i change security from high become medium,  last we can password

then we insert in database mysql with write order mysql -h ip -u root -p

to be continue