HackerPapers

arXiv:1303.3047cs.CR

Data Retrieval over DNS in SQL Injection Attacks

Miroslav Stampar

Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.

Abstract

This paper describes an advanced SQL injection technique where DNS resolution process is exploited for retrieval of malicious SQL query results. Resulting DNS requests are intercepted by attackers themselves at the controlled remote name server extracting valuable data. Open source SQL injection tool sqlmap has been adjusted to automate this task. With modifications done, attackers are able to use this technique for fast and low profile data retrieval, especially in cases where other standard ones fail.

arXiv comments
7 pages, 3 figures, 1 table. Presented at PHDays 2012 security conference, Moscow, Russia
Journal reference
DOI
Subjects
cs.CRCryptography and Security cs.DBDatabases cs.NINetworking and Internet Architecture

On Hacker News

Linked by 1 identifiable commenter in 1 comment across 1 thread, from Aug 2013 to Aug 2013. Found in 1 HN submission from Jun 2019 to Jun 2019. Open submission discussions.

Comments linking this paper, per year.

Discussed in comments1 thread

  1. Exfiltrate Files with DNS Queries 1 comment

    • The author of sqlmap added DNS exfiltration for blind SQL injection last year. Really creative technique (DNS stack doubled the size of sqlmap code-base). Paper: http://arxiv.org/pdf/1303.3047.pdf Slides: http://www.slideshare.net/stamparm/dns-exfiltration-using-sq...

      agnokapatheticView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.