Miroslav Stampar wrote:
> hi David.
> 
> you won't be able to redirect DNS requests through HTTP(s) proxy for sure.

I think there is a misunderstanding here.

If you configure an application to route its HTTP(s) requests through a
proxy the application itself should not generate any DNS requests.
The application will also not send DNS requests to the proxy.

The application - in this case sqlmap - should just ask the proxy to
send a HTTP request to example.com, the proxy will take care of DNS
resolution.

I just tried sqlmap with --proxy and this is in my opinion a bug because
sqlmap issues DNS queries even if --proxy is used.

This bug can be quite serious for the guys using
--tor
or
--proxy http://localhost:8118
 because sqlmap will leak DNS queries to the local DNS server.



------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to