SQLi WAF Bypass Techniques Part 1 - Time-Based Attacks

[@nurmuhammadkevin8395]

I know this channel is more valuable than other channels. Provide real-case examples from both the attacker's and the defender's perspectives.

[@Ott3rly]

Thanks for the feedback!

[@MdAsifulHuq]

Wow.....bro......this vdo is legit gem about sqli

[@0xrohit54]

Awesome explanation with Live Practical🔥

[@alamlearnn]

Best part is live waf bypass.
Share a video on live web app to look for Boolean SQLi.

[@Ott3rly]

Thanks for the suggestions. I will think about it ;)

[@shahid.aaqeel]

Man you're the best

[@Ott3rly]

Thanks!

[@deepakpatidar9303]

This is another great video, i am really want to be your student all time ❤

[@Ott3rly]

Wow, thank you!

[@ehimuanfrancis3225]

What tool is used to decete vulnerability?

[@saYOn-tj7xq]

can you show us how did you set up that WAF lab ! and thanks for the amazing video :)

[@Ott3rly]

Good idea, I might do this in the future.

[@Lurd-q7s]

Bro, can you share how to find any site that potential to find sqli but have waf also?

[@mdjeionmia4118]

Any tool for automatic temper check?

[@Ott3rly]

There are multiple ones on Github, but to be honest they haven't worked me that much that I would be 100% comfortable to recommend one.

[@jsmith85151]

Let's GOOOOO!

[@writecode9932]

Bro, can you make a video about your browser extensions and their use, looks some nice extensions are there.

[@Ott3rly]

Not sure about separate video, but I could mention this on following live video ;)

[@writecode9932]

@@Ott3rly 😎

[@yesireact]

Nice

[@Usmaini-ku7lq]

Good

[@Ott3rly]

Thanks

[@Jutapensaja]

Is this a step for beginners?

[@Ott3rly]

Yes

[@Free.Education786]

Part2 link ? Please. Thanks 🎉❤💢💯🥇👌💉♥️✅️🔥✔️💫🤝💥❤️

[@Ott3rly]

Will add that to description soon

[@user-pj1zb3yz2i]

Bro recon part 2

[@Ott3rly]

Next week. Be patient ;)

[@Free.Education786]

Thanks, Boss.
👌💉♥️🔥💫💥💢💯🥇👍✅️✔️🤝
Please, if possible, cover these important topics.
1. How to discover hidden subdomains of subdomains.
2. How to delete out of scope and dead Subdomains.
3. How to crawl all subdomains to discover hidden endpoints and parameters to pipe them in SQLMAP and GHAURI.
4. How to bypass WAF using SQLMAP and GHAURI.
5. How to try time based blind SQL injection 💉 using http request headers.
6. How to write custom http request headers for XOR encoded time based blind SQL injection 💉.
7. How find website origin IP ❤

[@Free.Education786]

Thanks, Boss, 👌💯✅️✔️🔥♥️✌️🤝✈️❤️

[@iloiskihailm8710]

keep them nuggets comin' (^///^)(^///^)

[@aanyt5755]

Broh idor topic

[@Ott3rly]

I might do some CTFs in the future and explain how to hunt those ;)