[sqlmap-users] DNS Exfiltration
Brought to you by:
inquisb
From: <bu...@gm...> - 2011-02-23 22:30:00
|
Hi, will sqlmap support DNS exfiltration for dbms that have such a feature? e.g. oracle: UTL_INADDR.get_host_address() UTL_HTTP.REQUEST() for such a feature new options would be needed: --domain Domain used for exfitrating results. --port Port on which sqlmap should listen for incoming DNS requests. Default 53. The latter could be useful if root redirects traffic from 53 to a high port, where also non-root user could open a listener. This way sqlmap wouldn't have to run as root. let me know what you think about it. |