Re: [sqlmap-users] DNS queries for every test?

[Miroslav S. <mir...@gm...>]

On Thu, Apr 7, 2011 at 10:36 PM, Ryan Sears <rd...@mt...> wrote:
> Hi there,
>
> First of all I have to say that I think this is one of, if not THE favorite penetration testing tool in my collection. It saves a ridiculous amount of time, and is remarkably stable. Great job, and I hope you keep up the amazing work!

:)

>
> It seems as though sqlmap (latest SVN revision) doesn't cache DNS information though, causing a fraction of latency on every request. Is anyone else noticing this? I may just have a mis-configuration somewhere, but I've scoured around the config files and documentation and can't seem to find anything about it. Even when I put the hostname in the /etc/hosts file to try to bypass this latency, it still makes the query. Is there any way to stop it from doing this? Obviously it's not that big a deal, but when you're making 1,000 requests to a web-app, hitting the DNS server first every time does put on significant overhead for something that could be cached after the first query.
>
> I'm not sure if this is something that python itself is doing, or something in the code that makes it happen (I'm guessing the former). Ideas?

it's a python thing, but it would be a good idea to circumvent it
somehow. we'll do it (hopefully) and report back.

>
> Also what do you guys think of possibly having the --dump option do something like --dump-all flag but with just a single database if you supply it with the -D argument? Just a thought (although maybe I'm missing something).

good idea. we'll probably do it (after internal agreement).

>
> Thanks!
> Ryan

kr

>
> ------------------------------------------------------------------------------
> Xperia(TM) PLAY
> It's a major breakthrough. An authentic gaming
> smartphone on the nation's most reliable network.
> And it wants your games.
> http://p.sf.net/sfu/verizon-sfdev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B