How can I use SQLMAP to run tests on a website with a WAF/IDS? Suppose I want to run something like this:

python sqlmap.py -u http://www.xxxxxxxxxxxxxx.com/standard.html&id=30 --dbs

How can I test against WAF/IDs in this case?

  • There is a lot of documentation for sqlmap. Start here and come back with more specific questions.
    – Tom K.
    Mar 26, 2018 at 7:37

1 Answer 1


Basically, you should use the option -tamper and use the tamper scripts. However, please consult the command line helper, or visit the SQLmap wiki page.

Not the answer you're looking for? Browse other questions tagged or ask your own question.