https://github.com/lucacapacci/SqlmapDnsCollaborator

Burp Extension that lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap
https://github.com/lucacapacci/SqlmapDnsCollaborator

Last synced: 3 months ago
JSON representation

Burp Extension that lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap

• Host: GitHub
• URL: https://github.com/lucacapacci/SqlmapDnsCollaborator
• Owner: lucacapacci
• Created: 2021-02-13T23:33:19.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-10-07T07:46:49.000Z (about 3 years ago)
• Last Synced: 2024-04-27T06:33:16.746Z (7 months ago)
• Language: Java
• Size: 64.5 KB
• Stars: 12
• Watchers: 1
• Forks: 9
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-burp-extensions - SQLMap DNS Collaborator - SqlmapDnsCollaborator is a Burp Extension that lets you perform DNS exfiltration with Sqlmap with zero configuration needed. (Vulnerability Specific Extensions / SQL/NoSQL Injection)

README

        
# SqlmapDnsCollaborator

SqlmapDnsCollaborator is a Burp Extension that lets you perform DNS exfiltration with Sqlmap with zero configuration needed. You won't need a domain name or a public IP, just a computer with Sqlmap and Burp.   

   

How you would normally perform DNS exfiltration with Sqlmap:  

1. You buy a domain name, a public IP and then you set up a server!!  

2. You run Sqlmap on that server, which performs some SQL injection on the vulnerable target.  

3. Vulnerable target sends DNS requests to your DNS server containing interesting data.  

4. DNS requests are interpreted by Sqlmap.  

  

How you are going to perform DNS exfiltration with Sqlmap and SqlmapDnsCollaborator:  

1. You open Burp on your computer and enable SqlmapDnsCollaborator.  

2. You run Sqlmap on your computer, which performs some SQL injection on the vulnerable target.  

3. Vulnerable target sends DNS requests to Burp Collaborator containing interesting data.  

4. SqlmapDnsCollaborator reads DNS requests from Burp Collaborator and sends them to Sqlmap.  

4. DNS requests are interpreted by Sqlmap.