How can I use SQLMAP to run tests on a website with a WAF/IDS? Suppose I want to run something like this:

python sqlmap.py -u http://www.xxxxxxxxxxxxxx.com/standard.html&id=30 --dbs

How can I test against WAF/IDs in this case?

closed as off-topic by Steffen Ullrich, Tobi Nary, forest, Rory Alsop Apr 1 '18 at 9:50

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Steffen Ullrich, Tobi Nary, forest, Rory Alsop
If this question can be reworded to fit the rules in the help center, please edit the question.

  • There is a lot of documentation for sqlmap. Start here and come back with more specific questions. – Tom K. Mar 26 '18 at 7:37

Basically, you should use the option -tamper and use the tamper scripts. However, please consult the command line helper, or visit the SQLmap wiki page.

Not the answer you're looking for? Browse other questions tagged or ask your own question.