0

How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is Sqlmap uploading it and is the file just a normal reverse shell trojan?

Also, is it still anonymous when being used over the --tor switch?

Improve this question
3
  • For your second question, see security.stackexchange.com/q/261018/106285
    – forest
    Apr 24, 2022 at 1:20
  • I asked that question aswell, but sending a HTML get/post request is something completely different than using a reverse shell
    – UndercoverDog
    Apr 24, 2022 at 1:53
  • 1
    Oh I didn't notice it was you who asked that! Anyway, the --tor switch sets the entire program to use Tor for all TCP connections. It's not possible to do this for a reverse shell though, because it would need to know your real IP. Have you read the manual page for sqlmap to see what that parameter does?
    – forest
    Apr 24, 2022 at 1:55

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .