Re: [sqlmap-users] sqlmap through proxy
Brought to you by:
inquisb
From: <bu...@gm...> - 2011-06-17 13:42:14
|
Miroslav Stampar wrote: > hi David. > > you won't be able to redirect DNS requests through HTTP(s) proxy for sure. I think there is a misunderstanding here. If you configure an application to route its HTTP(s) requests through a proxy the application itself should not generate any DNS requests. The application will also not send DNS requests to the proxy. The application - in this case sqlmap - should just ask the proxy to send a HTTP request to example.com, the proxy will take care of DNS resolution. I just tried sqlmap with --proxy and this is in my opinion a bug because sqlmap issues DNS queries even if --proxy is used. This bug can be quite serious for the guys using --tor or --proxy http://localhost:8118 because sqlmap will leak DNS queries to the local DNS server. |