SQLMap DNS Collaborator
Summary: PortSwigger's BApp Store lists SqlmapDnsCollaborator, a Burp Suite extension by Luca Capacci, version 1.0, that enables DNS exfiltration with Sqlmap with zero configuration, requiring no domain name or public IP, only a computer running Sqlmap and Burp. The listing was last updated 24 March 2021 and rates overall system impact as Low, with PortSwigger noting that extensions are written by third-party users and come with no warranty of quality or usefulness.
What you should know: DNS exfiltration is a channel most outbound controls watch far less closely than HTTP, and this extension removes the two setup barriers - a domain and a public IP - that previously limited who could run it, so a tester or attacker with Sqlmap and Burp needs nothing else.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026