sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-25 15:39:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

added a link for WAF evasion technique blog

Browse Source
This commit is contained in:
noamiscool 2022-12-08 23:13:37 +00:00
parent 03f8af8e90
commit fac863c3ef
3 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tamper/json_waf_bypass_mysql.py
View File

@ -95,6 +95,10 @@ def generate_random_payload():
def tamper(payload, **kwargs):
"""
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774

4
tamper/json_waf_bypass_postgres.py
View File

@ -140,6 +140,10 @@ def generate_random_payload():
def tamper(payload, **kwargs):
"""
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774

4
tamper/json_waf_bypass_sqlite.py
View File

@ -112,6 +112,10 @@ def generate_random_payload():
def tamper(payload, **kwargs):
"""
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774