Skip to main content
1 of 4

bypass website security blocking sql words with sqlmap

I'm using sqlmap to get a website DB, and sqlmap was able to find out that the site is time based boolean vulnerable, but the target were showing sql errors, what made me think that it would be a error based injection, I was curious, so I turned on the " --parse-errors" option, and it showed that some sql word were been blocked, something like:

AND became A_N_D, SELECT became S_E_LE_C_T.. and so on...

there is a way to bypass this with sqlmap? some tamper option?

obs: im really sorry about my bad English, hope u guys can understand it.