sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-27 08:30:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

added a link for WAF evasion technique blog

Browse Source
This commit is contained in:
noamiscool 2022-12-08 23:13:37 +00:00
parent 03f8af8e90
commit fac863c3ef
3 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tamper/json_waf_bypass_mysql.py
View File

@ -95,6 +95,10 @@ def generate_random_payload():
def tamper(payload, **kwargs): def tamper(payload, **kwargs):
""" """
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022 Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774 https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774

4
tamper/json_waf_bypass_postgres.py
View File

@ -140,6 +140,10 @@ def generate_random_payload():
def tamper(payload, **kwargs): def tamper(payload, **kwargs):
""" """
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022 Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774 https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774

4
tamper/json_waf_bypass_sqlite.py
View File

@ -112,6 +112,10 @@ def generate_random_payload():
def tamper(payload, **kwargs): def tamper(payload, **kwargs):
""" """
This SQLMap tamper script was written by Noam Moshe of Claroty Team82. To read more about this novel
WAF bypass, read our blog:
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf
Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022 Bypasses generic WAFs using JSON SQL Syntax. For more details, see our talk in BH EU 2022
https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774 https://www.blackhat.com/eu-22/briefings/schedule/#js-on-security-off-abusing-json-based-sql-queries-28774