#5·sqlmap

Implement out-of-band for data fetching

Author: bdameleCreated Jun 26, 2012Updated Dec 7, 2022
Labelsenhancementnormalenumeration

Recently we implemented DNS for data fetching. The objective is to implement more out-of-band techniques for data fetching:

  • HTTP requests (Oracle UTL_HTTP)
  • openrowset (to replicate dbms remotely on MSSQL)
  • db_link() (to replicate dbms remotely on PgSQL)

Some relevant materials: