+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLi Error WAF Bypass - link inside (/showthread.php?tid=6079076)
Pages: Pages
1
2
SQLi Error WAF Bypass - link inside - krlo-s - May 17, 2020
Greetings Hackforums,
I have an SQLi vulnerable site WAF protected but I can't bypass it to get the columns of the database table "accounts"
Please can you help me?
https://www.dropbox.com/s/6jm0e3w3qtyp5qc/vulnerability.txt?dl=0
I got database and tables by:
selselectect
whewherere
frfromom
Howerver columns do not show, I think the asterisk "*" is being blocked. I tried this:
tabletable_name_name
/*!0table_name
tABlE//_//N//A//me
databadatabase_namese_nam
tabletable_schema_schema
C//ol//UmNS
COLCOLUMNSUMNS
INFORMATION_SCHEMA//.C//ol//UmNS
INFORMATION_INFORMATION_SCHEMASCHEMA
Thank you
RE: SQLi _error_ WAF Bypass - link inside - Disqual - May 19, 2020
I don't usually say this, but have you tried SQL Map? It has some mostly used WAF tampers. If doesnt help, pm me for more
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - May 23, 2020
(May 19, 2020 03:02 PM)Disqual Wrote: I don't usually say this, but have you tried SQL Map? It has some mostly used WAF tampers. If doesnt help, pm me for more
SQLmap tamper doesn't work, I sent you a PM
RE: SQLi _error_ WAF Bypass - link inside - Litecoin - May 23, 2020
Interesting i will have a proper look when i get home
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - May 28, 2020
Please I need help pretty please
RE: SQLi _error_ WAF Bypass - link inside - pizza500 - May 28, 2020
try some syntax from here https://owasp.org/www-community/attacks/SQL_Injection_Bypassing_WAF
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 5, 2020
Seems like tihs WAF is hard for everybody...
RE: SQLi _error_ WAF Bypass - link inside - linhtinh - Jun 5, 2020
Everybody dont know hard or not when vulnerable url not available
RE: SQLi _error_ WAF Bypass - link inside - Kumara - Jun 5, 2020
(Jun 5, 2020 11:28 AM)linhtinh Wrote: Everybody dont know hard or not when vulnerable url not available
It's in the thread, did you not read or decide to shitpost?
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 5, 2020
(Jun 5, 2020 11:28 AM)linhtinh Wrote: Everybody dont know hard or not when vulnerable url not available
¿Are you fricking blind?, it's in my first post. Well, judging by how you write...I have no doubts about you.
RE: SQLi _error_ WAF Bypass - link inside - linhtinh - Jun 6, 2020
(Jun 5, 2020 07:32 PM)krlo-s Wrote: ¿Are you fricking blind?, it's in my first post. Well, judging by how you write...I have no doubts about you.
![[Image: YfZDoFU.png]](https://i.imgur.com/YfZDoFU.png)
Yes i'm fricking blind
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 6, 2020
So you are not, how you managed to bypass the asterisk "*" and other queries to get the columns?.
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 13, 2020
Please help me out, you already bypassed it
Thanks
(Jun 6, 2020 04:25 AM)linhtinh Wrote:
Yes i'm fricking blind
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 22, 2020
Can somebody help me please?, it's possible but I don't know how to bypass *, among others.
Thank you
RE: SQLi _error_ WAF Bypass - link inside - krlo-s - Jun 27, 2020
@linhtinh are you able to help me outp please?