+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: how do you bypass sql injection filters? (/showthread.php?tid=5547611)
how do you bypass sql injection filters? - dannova0 - Feb 9, 2017
i need to know how to bypass Use of Prepared Statements,Use of Stored Procedures,
Escaping all User Supplied Input and a White List. as far as i'm concerned as long as the owner has set up all of these up correctly.websites cant be attacked because all data being sent will be stored,escaped, or replaced or forbidden. any ideas?
* - JustAnotherRandomDude - Feb 12, 2017
SQLMap has tamper script support which you can use however depending on who wrote the WAF and how secure the underlying code is then is may or may not be bypassable. Do you have a specific target? It might be possible to give you better advice if you show us what you are trying to target.