hi David.

you won't be able to redirect DNS requests through HTTP(s) proxy for sure.

but, there are three ways how you can solve this problem of yours:
1) do the nslookup of the hosts ip address manually and just use the
ip address instead
or
2) find the hosts file for your platform (e.g. /etc/hosts or
c:\Windows\System32\drivers\etc\hosts) and manually enter IP addresses
of wanted servers
or
3) use proxychains (http://proxychains.sourceforge.net/) - this is the
best way if you want everything to be fully automated (e.g.
proxychains python sqlmap.py -u ....). read the manual there, install
it, configure it and use it. that's pretty it :)

kr

p.s. please, do the SVN update to upgrade to the latest v1.0-dev from
our repository

On Fri, Jun 17, 2011 at 12:07 PM, David Alvarez
<david.alvare...@gmail.com> wrote:
> Hello,
> I am in a scenario where all web traffic is managed by a proxy, my local DNS
> is not able to resolve external domain names, so I have installed a local
> proxy to authenticate into the corporate proxy. The web browser uses my
> local proxy at 127.0.0.1:8080
> sqlmap give me an error because it can't resolve the domain name, because it
> is using my local DNS, instead of ask to proxy:
> $>python sqlmap.py -u 'https://myserver/myapp/...?param1' -p param1 --proxy
> http://127.0.0.1:8080
>    sqlmap/0.9 - automatic SQL injection and database takeover tool
>    http://sqlmap.sourceforge.net
> [*] starting at: 11:54:28
> [11:54:29] [INFO] using 'path' as session file
> [11:54:29] [CRITICAL] host 'myserver' does not exist
> [*] shutting down at: 11:54:29
> Is there an option to not try to resolve the domain name and send requests
> through the proxy?How could I resolve this problem?
> Thank you very much.
> Kind Regards,
> David Alvarez
> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to