+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQL SERVER syntax (/showthread.php?tid=6217914)
SQL SERVER syntax - HardStoN - Aug 19, 2022
Hello, any methods to bypass waf from catching my string syntax for openrowset( ''c:\windows\system32\drivers\etc\hosts' )
how can I change the string?
tried 'dadsa' + 'dads' etc... but that doesn't work without select statement
thank you
RE: SQL SERVER syntax - Disqual - Sep 14, 2022
(Aug 19, 2022 04:27 AM)HardStoN Wrote: Hello, any methods to bypass waf from catching my string syntax for openrowset( ''c:\windows\system32\drivers\etc\hosts' )
how can I change the string?
tried 'dadsa' + 'dads' etc... but that doesn't work without select statement
thank you
What WAF it is? Provider?