SQLMap DNS Collaborator
SqlmapDnsCollaborator is a Burp Extension that lets you perform DNS exfiltration with Sqlmap with zero configuration needed. You won't need a domain name or a public IP, just a computer with Sqlmap and Burp.
How you would normally perform DNS exfiltration with Sqlmap:
- You buy a domain name, a public IP and then you set up a server!!
- You run Sqlmap on that server, which performs some SQL injection on the vulnerable target.
- Vulnerable target sends DNS requests to your DNS server containing interesting data.
- DNS requests are interpreted by Sqlmap.
How you are going to perform DNS exfiltration with Sqlmap and SqlmapDnsCollaborator:
- You open Burp on your computer and enable SqlmapDnsCollaborator.
- You run Sqlmap on your computer, which performs some SQL injection on the vulnerable target.
- Vulnerable target sends DNS requests to Burp Collaborator containing interesting data.
- SqlmapDnsCollaborator reads DNS requests from Burp Collaborator and sends them to Sqlmap.
- DNS requests are interpreted by Sqlmap.
| Author | Luca Capacci |
|---|---|
| Version | 1.0 |
| Rating | |
| Popularity | |
| Last updated | 24 March 2021 |
You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.
| You can view the source code for this BApp by visiting our GitHub page. | |
| Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates. |
Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.
Go back to BappStore