1

I want to bypass a sql injection waf that replaces /,* and whitespaces.

This is a payload I want use :

?parameter=22321'union select CAST(normal_column AS bigint),'a','b' from normal_table--

But the website replaces the whitespaces with nothing before parse query.

I decided to use '/**/' instead of whitespaces but the website filters this too.

what should I do?

5
  • Maybe the instruction chr() can help you Commented Feb 26, 2022 at 18:17
  • @MarcoNappi can you give an example for it ?
    – Mahdi
    Commented Feb 27, 2022 at 5:38
  • SELECT CHR(65) || CHR(87) || CHR(65) || CHR(69); this one should be enough Commented Feb 28, 2022 at 7:36
  • @MarcoNappi We cant use whitespaces
    – Mahdi
    Commented Feb 28, 2022 at 15:47
  • In that you can avoid whitespaces in the example above Commented Feb 28, 2022 at 16:15

0

Browse other questions tagged .