Skip to main content
4 of 4
Orthografic stuff
schroeder
  • 132.1k
  • 55
  • 307
  • 348

Sqlmap: bypass website security filtering SQL reserved words

I'm using sqlmap to get a website's DB and found out that the site is time-based boolean vulnerable; but the target is showing SQL errors, which made me think that it would be an injection error.

I was curious, so I turned on the --parse-errors option which showed that some SQL reserved words are filtered; something like:

AND became A_N_D, SELECT became S_E_LE_C_T ...

and so on...

Is there a way to bypass this with sqlmap? Some tamper option?