The tweet highlights the use of unobfuscated UNION + SELECT keywords in a SQL injection bypass. This technique can potentially bypass certain WAFs. The tweet mentions that Akamai's WAF is not mentioned in the test results, implying that it may be capable of blocking such attacks. It is important to pay attention to the effectiveness of WAFs in blocking common SQL injection techniques like this one.
For more insights, check out the original tweet here: https://twitter.com/RodoAssis/status/1850938900073664633
Subscribe for the latest news: