Re: [sqlmap-users] sqlmap through proxy

[<bu...@gm...>]

Miroslav Stampar wrote:
> hi buawig.
> 
> well, sure there is a misunderstanding here :)
> 
> http://superuser.com/questions/272714/why-still-dns-lookup-when-using-proxy
> 
> quote:
> "Even when connecting via a proxy your browser needs to get the IP
> address for the web site domain. Generally it will directly query the
> DNS servers. If you are using a Socks 5 proxy, you can have the DNS
> queries go through your proxy."
> 
> there has to be a DNS request when dealing with HTTP proxy.

This is only true if the HTTP Proxy is entered/specified as a hostname
and not as an IP address.

I just checked this for firefox. Firefox doesn't issue any DNS request
when configured to use a HTTP proxy, so why should sqlmap need to issue
a DNS request?

> about DNS leaks with TOR. we are aware of this issue and there is no
> easy way out of it. believe me. I've spent three days searching and
> implementing and there is NO easy way out of it. we can try to search
> and use things like "tor-resolve" but it will work just for minor
> number of cases (users which prepare environment for it).

Pidgin recently fixed a DNS leak in their implementation. I don't think
this is 'unfixable'.