sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-27 17:30:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

taking care of few issues regarding reverse address lookup of localhost/127.0.0.1 at remote DNS server

Browse Source
This commit is contained in:
Miroslav Stampar 2012-05-28 16:57:10 +00:00
parent 190ae4ca13
commit a72cb29c1f
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/request/dns.py
View File

@ -8,6 +8,7 @@ See the file 'doc/COPYING' for copying permission
""" """
import os import os
import random
import re import re
import socket import socket
import threading import threading
@ -47,13 +48,13 @@ class DNSQuery:
if self._query: if self._query:
retVal += self._raw[:2] # Transaction ID retVal += self._raw[:2] # Transaction ID
retVal += "\x84\x00" # Flags (Standard query response, No error) retVal += "\x85\x80" # Flags (Standard query response, No error)
retVal += self._raw[4:6] + self._raw[4:6] + "\x00\x00\x00\x00" # Questions and Answers Counts retVal += self._raw[4:6] + self._raw[4:6] + "\x00\x00\x00\x00" # Questions and Answers Counts
retVal += self._raw[12:(12 + self._raw[12:].find("\x00") + 5)] # Original Domain Name Query retVal += self._raw[12:(12 + self._raw[12:].find("\x00") + 5)] # Original Domain Name Query
retVal += "\xc0\x0c" # Pointer to domain name retVal += "\xc0\x0c" # Pointer to domain name
retVal += "\x00\x01" # Type A retVal += "\x00\x01" # Type A
retVal += "\x00\x01" # Class IN retVal += "\x00\x01" # Class IN
retVal += "\x00\x00\x01\x2c" # TTL retVal += "\x00\x00\x00\x05" # TTL
retVal += "\x00\x04" # Data length retVal += "\x00\x04" # Data length
retVal += "".join(chr(int(_)) for _ in resolution.split('.')) # 4 bytes of IP retVal += "".join(chr(int(_)) for _ in resolution.split('.')) # 4 bytes of IP
@ -96,7 +97,7 @@ class DNSServer:
while True: while True:
data, addr = self._socket.recvfrom(1024) data, addr = self._socket.recvfrom(1024)
_ = DNSQuery(data) _ = DNSQuery(data)
self._socket.sendto(_.response("127.0.0.1"), addr) self._socket.sendto(_.response("127.%s" % ".".join(str(random.randint(1, 255)) for _ in xrange(3))), addr)
with self._lock: with self._lock:
self._requests.append(_._query) self._requests.append(_._query)