Hack Forums
Need help bypassing WAF on this websitz - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help bypassing WAF on this websitz (/showthread.php?tid=5381223)

Need help bypassing WAF on this websitz - userchange - Aug 20, 2016

I have a waf probleme in this url

Code
http://www.bzaf.tv/video_player.php?id=225

ordr by does not work

Code
http://www.bzaf.tv/video_player.php?id=225 order by 1
also and+1=1

Code
http://www.bzaf.tv/video_player.php?id=225+and+1=1
Also Im asking please if there is a way to update or insert into by using union select sqli
Any help please

* - userchange - Sep 2, 2016

srill need some help please

up

* - DROP TABLE users - Sep 3, 2016

I don't think this site is vulnerable to SQLi. I tried adding an ' after the id=255 and no error popped up.

* - iliketrees123 - Sep 4, 2016

(Sep 3, 2016 10:31 AM)DROP TABLE users Wrote:  I don't think this site is vulnerable to SQLi. I tried adding an ' after the id=255 and no error popped up.

That only works for error based sqli, union sql injection and blind based injection could still work

EDIT) No, it's not injectable

* - userchange - Sep 4, 2016

Thank you gor your reply :)

but I still think its vulnerable