Re: [sqlmap-users] DNS Exfiltration

[Miroslav S. <mir...@gm...>]

Hi.

Currently, there is no support, but it's planed for sure

Kind regards,
Miroslav Stampar
On Feb 21, 2012 9:15 PM, <bu...@gm...> wrote:

> On 02/24/2011 11:43 AM, Bernardo Damele A. G. wrote:
> > Hi,
> >
> > There exist two families of out-of-band techniques:
> >
> > * oob to takeover the database server and get command execution on the
> > underlying os: sqlmap implements several techniques to achieve this
> > already both via tcp and icmp channel. Support for takeover oob via
> > dns channel (udp) is planned and will be possibly added to 1.0.
> >
> > * oob to exfiltrate data from the database: you refer to this. sqlmap
> > does not implement yet any technique. This can be achieved on a number
> > of dbms via either tcp or udp channels (mssql openrowset, pgsql
> > db_link, oracle utl_*, ...) This is planned and will potentially make
> > it for 1.0 release.
>
> What is the current state on DNS exfiltration in sqlmap?
>
> thanks,
> buawig
>
>
>
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>