Hi, guys. How to bypass "information_schema" word filtration? Random upcase, urlencoding, etc... not working. I think this is a nginx filtration.
SQLi information_schema in mysql (WAF) |
 (Feb 29, 2024 08:59 AM)d0ndon Wrote: Hi, guys. How to bypass "information_schema" word filtration? Random upcase, urlencoding, etc... not working. I think this is a nginx filtration. hex unhex methode often works, unicode as well, pm me the link i will help you
Mar 11, 2024 12:43 AM
(This post was last modified: Mar 11, 2024 12:47 AM by d0ndon.)
(Mar 9, 2024 01:26 AM)Edmond24 Wrote: hex unhex methode often works, unicode as well, pm me the link i will help you Hi. This is a post request. Nginx blocking any*information_schema*any. information_sch\u0065ma - blocked information_sch\u00f0ma - not blocked, but not working. (Mar 11, 2024 12:43 AM)d0ndon Wrote: Hi. This is a post request. Nginx blocking any*information_schema*any. UPD. Not any*information_schema*any - information_schema pattern. Sorry for poor english. Innodb method not working, performance_schema not found. (Mar 11, 2024 11:57 PM)Edmond24 Wrote: please pm me the link, only so i can help you I can't share link, for security reason. White hat pentest. If you can help me, show me how to obfuscate 'information_schema' pattern. (Feb 29, 2024 08:59 AM)d0ndon Wrote: Hi, guys. How to bypass "information_schema" word filtration? Random upcase, urlencoding, etc... not working. I think this is a nginx filtration. cool |
|
|
