Re: [sqlmap-users] sqlmap through proxy

Hi, @buawig Thank you for your help. You understood me! @Miroslav Thank you very much for the patch kind regards From: Miroslav Stampar http://gmane.org/get-address.php?address=miroslav.stampar%2dRe5JQEeQqe8AvxtiuMwx3w%40public.gmane.org> > Subject: Re: sqlmap through proxy

Re: [sqlmap-users] sqlmap through proxy

hi buawig. find it "patched" in the latest commit. kind regards On Sun, Jun 19, 2011 at 1:33 AM, wrote: > Miroslav Stampar wrote: >> quote from that same paragraph: >> >> " >> 10.5.5 504 Gateway Timeout >> >>    The server, while acting as a gateway or proxy, did not receive a >>    timely res

Re: [sqlmap-users] sqlmap through proxy

Miroslav Stampar wrote: > quote from that same paragraph: > > " > 10.5.5 504 Gateway Timeout > >The server, while acting as a gateway or proxy, did not receive a >timely response from the upstream server specified by the URI (e.g. >HTTP, FTP, LDAP) or some other auxiliary server (e.g.

Re: [sqlmap-users] sqlmap through proxy

quote from that same paragraph: " 10.5.5 504 Gateway Timeout The server, while acting as a gateway or proxy, did not receive a timely response from the upstream server specified by the URI (e.g. HTTP, FTP, LDAP) or some other auxiliary server (e.g. DNS) it needed to access in attempti

Re: [sqlmap-users] sqlmap through proxy

If the proxy returns 504 the hostname is probably not existing, but in anyway the response came not from the upstream target (specified in -u) and should not interpreted as such. http://tools.ietf.org/html/rfc2616#section-10.5.5 ---

Re: [sqlmap-users] sqlmap through proxy

hi again. please retest it now. i hope that "leakage" is "plugged" now ;) kr On Fri, Jun 17, 2011 at 4:54 PM, Miroslav Stampar wrote: > hi buawig. > > thank you for this fight. it really appears that we can easily solve > this one but "chocking" sockets getaddrinfo in case of proxy which > will

Re: [sqlmap-users] sqlmap through proxy

hi buawig. thank you for this fight. it really appears that we can easily solve this one but "chocking" sockets getaddrinfo in case of proxy which will solve DNS requests in case of HTTP proxy and TOR leaks. this means that i was appereantly under wrong impression. i admit :) but, good luck in f

Re: [sqlmap-users] sqlmap through proxy

Miroslav Stampar wrote: > second, are you using some plugins (like FoxyProxy) or just entered > proxy address manually into settings? no plugins, manual settings used to configure proxy. Do you see DNS queries if you configure your browser to use a http proxy? > also, have you tried to issue > s

Re: [sqlmap-users] sqlmap through proxy

ok. i'll try to make a little experiment and kill off the automatic socket DNS requests in case of proxying. i really can't find this moment what the RFCs tell about this issue. kr On Fri, Jun 17, 2011 at 4:37 PM, Miroslav Stampar wrote: > minor clarification: > "first of all, sqlmap doesn't is

Re: [sqlmap-users] sqlmap through proxy

minor clarification: "first of all, sqlmap doesn't issue DNS requests." this means that we don't do it manually. socket module does it. kr On Fri, Jun 17, 2011 at 4:31 PM, Miroslav Stampar wrote: > On Fri, Jun 17, 2011 at 4:25 PM,   wrote: >> Miroslav Stampar wrote: >>> hi buawig. >>> >>> well,

Re: [sqlmap-users] sqlmap through proxy

On Fri, Jun 17, 2011 at 4:25 PM, wrote: > Miroslav Stampar wrote: >> hi buawig. >> >> well, sure there is a misunderstanding here :) >> >> http://superuser.com/questions/272714/why-still-dns-lookup-when-using-proxy >> >> quote: >> "Even when connecting via a proxy your browser needs to get the IP

Re: [sqlmap-users] sqlmap through proxy

Miroslav Stampar wrote: > hi buawig. > > well, sure there is a misunderstanding here :) > > http://superuser.com/questions/272714/why-still-dns-lookup-when-using-proxy > > quote: > "Even when connecting via a proxy your browser needs to get the IP > address for the web site domain. Generally it

Re: [sqlmap-users] sqlmap through proxy

hi buawig. well, sure there is a misunderstanding here :) http://superuser.com/questions/272714/why-still-dns-lookup-when-using-proxy quote: "Even when connecting via a proxy your browser needs to get the IP address for the web site domain. Generally it will directly query the DNS servers. If yo

Re: [sqlmap-users] sqlmap through proxy

Miroslav Stampar wrote: > hi David. > > you won't be able to redirect DNS requests through HTTP(s) proxy for sure. I think there is a misunderstanding here. If you configure an application to route its HTTP(s) requests through a proxy the application itself should not generate any DNS requests.

Re: [sqlmap-users] sqlmap through proxy

hi David. you won't be able to redirect DNS requests through HTTP(s) proxy for sure. but, there are three ways how you can solve this problem of yours: 1) do the nslookup of the hosts ip address manually and just use the ip address instead or 2) find the hosts file for your platform (e.g. /etc/ho

[sqlmap-users] sqlmap through proxy

Hello, I am in a scenario where all web traffic is managed by a proxy, my local DNS is not able to resolve external domain names, so I have installed a local proxy to authenticate into the corporate proxy. The web browser uses my local proxy at 127.0.0.1:8080 sqlmap give me an error because it ca