Re: [sqlmap-users] sqlmap through proxy

[<bu...@gm...>]

Miroslav Stampar wrote:
> hi David.
> 
> you won't be able to redirect DNS requests through HTTP(s) proxy for sure.

I think there is a misunderstanding here.

If you configure an application to route its HTTP(s) requests through a
proxy the application itself should not generate any DNS requests.
The application will also not send DNS requests to the proxy.

The application - in this case sqlmap - should just ask the proxy to
send a HTTP request to example.com, the proxy will take care of DNS
resolution.

I just tried sqlmap with --proxy and this is in my opinion a bug because
sqlmap issues DNS queries even if --proxy is used.

This bug can be quite serious for the guys using
--tor
or
--proxy http://localhost:8118
 because sqlmap will leak DNS queries to the local DNS server.