sqlmap-users

[sqlmap-users] Randomize payload with uppercase/lowercase

[Vinícius K-M. <vin...@gm...>]

hello

I can manually bypass an WAF/filter with this trick: uNiOn aLl sElEcT... and
so on.

Is there an option like this in sqlmap?

Thanks!

-- 
Vinícius

Re: [sqlmap-users] Randomize payload with uppercase/lowercase

[Ignacio H. <nac...@gm...>]

You can use a tamper. Check the tampers folder. You can create your own une
to achieve that if there isn't one for it.
El 08/10/2011 12:37, "Vinícius K-Max" <vin...@gm...>
escribió:

> hello
>
> I can manually bypass an WAF/filter with this trick: uNiOn aLl sElEcT...
> and so on.
>
> Is there an option like this in sqlmap?
>
> Thanks!
>
> --
> Vinícius
>
>
> ------------------------------------------------------------------------------
> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2dcopy2
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>

Re: [sqlmap-users] Randomize payload with uppercase/lowercase

[Miroslav S. <mir...@gm...>]

Hi.

You can use --tamper=randomcase for your case.

Kind regards,
Miroslav Stampar
On 8.10.2011. 12:37, "Vinícius K-Max" <vin...@gm...> wrote:

Re: [sqlmap-users] Randomize payload with uppercase/lowercase

[Vinícius K-M. <vin...@gm...>]

Ignacio and Miroslav, thank you guys!

Em 8 de outubro de 2011 10:04, Miroslav Stampar
<mir...@gm...>escreveu:

> Hi.
>
> You can use --tamper=randomcase for your case.
>
> Kind regards,
> Miroslav Stampar
> On 8.10.2011. 12:37, "Vinícius K-Max" <vin...@gm...> wrote:
>



-- 
Vinícius