The tweet highlights the evolution of SQL injection attacks, emphasizing that modern SQLi techniques have surpassed the traditional ' OR 1=1– payload. The mention of WAFs effectively blocking such payloads since 2010 indicates the need for creative WAF bypass techniques, like second-order SQL injections and asynchronous payloads. The tweet also advises checking out-of-band exfiltration as sometimes the database responses unexpectedly. Overall, it highlights the importance of staying ahead of WAF protections in the face of advanced SQL injection techniques.
For more details, check out the original tweet here: https://twitter.com/0x3n0/status/1904790061712883820