Data Retrieval over DNS in SQL Injection Attacks
Cryptography and Security
2013-03-14 v1 Databases
Networking and Internet Architecture
Abstract
This paper describes an advanced SQL injection technique where DNS resolution process is exploited for retrieval of malicious SQL query results. Resulting DNS requests are intercepted by attackers themselves at the controlled remote name server extracting valuable data. Open source SQL injection tool sqlmap has been adjusted to automate this task. With modifications done, attackers are able to use this technique for fast and low profile data retrieval, especially in cases where other standard ones fail.
Cite
@article{arxiv.1303.3047,
title = {Data Retrieval over DNS in SQL Injection Attacks},
author = {Miroslav Stampar},
journal= {arXiv preprint arXiv:1303.3047},
year = {2013}
}
Comments
7 pages, 3 figures, 1 table. Presented at PHDays 2012 security conference, Moscow, Russia