How can I use SQLMAP to run tests on a website with a WAF/IDS? Suppose I want to run something like this:

python sqlmap.py -u http://www.xxxxxxxxxxxxxx.com/standard.html&id=30 --dbs

How can I test against WAF/IDs in this case?

  • There is a lot of documentation for sqlmap. Start here and come back with more specific questions.
    – Tom K.
    Mar 26, 2018 at 7:37

1 Answer 1


Basically, you should use the option -tamper and use the tamper scripts. However, please consult the command line helper, or visit the SQLmap wiki page.

Not the answer you're looking for? Browse other questions tagged .