webeasy

02

spbctf

Task: SQL injection with WAF blocking SQL keywords. Solution: Use mixed case (SeLeCt, FrOm) to bypass case-sensitive WAF filter while MySQL processes keywords case-insensitively.

$ ls tags/ techniques/
waf_bypasssqlimysqlcase_sensitivity
mixed_case_bypasswaf_evasion
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]