pentester.land· Dec 1, 2021· by Momen Ali (Cyber Guy) (@theCyberGuy0)

How i was able to bypass Cloudflare WAF for SQLi payload

Open Original Article ↗
Target Program: -
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#SQL injection#WAF bypass

More Writeups Like This

pentester.land

Null Byte on Steroids

by Omar (@0x0ld)
pentester.land

AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice

by Marc Olivier Bergeron
pentester.land

Bypassing An Industry-Leading WAF and Exploiting SQLi

by Adeeb Shah
pentester.land

SQL Injection: Utilizing XML Functions in Oracle and PostgreSQL to bypass WAFs

by Mahmoud Gamal (@Zombiehelp54)