Easiest way: From Burp Suite go to target website. Once the requests has been captured, copy the entire requests and put it in a file, for example search.txt. Use the following command: sqlmap -r search.txt -p parameterToAttack
Use --force-ssl when doing HTTPS remember!! Useful: --proxy=http://127.0.0.1:8083 --level=5 --risk=3
--sql-shell for SQL shell
--flush-session to delete the previous sessions