Re: [sqlmap-users] DNS Exfiltration

[Miroslav S. <mir...@gm...>]

hi.

we are planning OOB features for v1.0, especially DNS based like the
one you've mentioned.

kr

On Thu, Feb 24, 2011 at 12:27 AM,  <bu...@gm...> wrote:
> Hi,
>
> will sqlmap support DNS exfiltration for dbms that have such a feature?
> e.g.
> oracle:
> UTL_INADDR.get_host_address()
> UTL_HTTP.REQUEST()
>
> for such a feature new options would be needed:
> --domain  Domain used for exfitrating results.
> --port   Port on which sqlmap should listen for incoming DNS requests.
> Default 53.
> The latter could be useful if root redirects traffic from 53 to a high
> port, where also non-root user could open a listener. This way sqlmap
> wouldn't have to run as root.
>
> let me know what you think about it.
>
>
>
> ------------------------------------------------------------------------------
> Free Software Download: Index, Search & Analyze Logs and other IT data in
> Real-Time with Splunk. Collect, index and harness all the fast moving IT data
> generated by your applications, servers and devices whether physical, virtual
> or in the cloud. Deliver compliance at lower cost and gain new business
> insights. http://p.sf.net/sfu/splunk-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B