@Barbarossa0x just shared a great list of ways to bypass WAF & compromise SQL injection: whitespace alternatives, comments, parenthesis, DBMS & more ? Check it out!