Skip sqlmap waf testing

[johnyjin]

When I try to start testing with sqlmap, sqlmap will send queries like these :

1'tFmggO<'">AeQpzc

1"(,..,'(,,

And my target will response with error 500 and sqlmap will show me connection dropped

I tested my target manualy and it is okey

So how should I skip those two queries? Or in which files I can comment this lines?

Regards

[stamparm]

Those are really the most harmless payloads out of all others in sqlmap. You have bigger issues than you think. Closing this down as sqlmap won't be of a help here

[johnyjin]

I didn't say these words at all
I need some helps because I'm not programmer
So If you don't like to help, You don't need to joke me instead of helping

[stamparm]

Can you please pinpoint where did I made a joke of you? I said that those payloads are most harmless than ALL other payloads used by sqlmap. Neutralizing those won't help you in any way as sqlmap will try more evasive payloads

[687766616e]

You need to know why the server will send you "500"

[687766616e]

Sometimes it's not because WAF blocks your connection.

[johnyjin]

I know why server send me error 500
It just becasue of these payloads 1'tFmggO<'">AeQpzc
SQLMap is great tools but I need to disable these payloads for now
How should I do that?

[687766616e]

Which thing in this payload leads to the "500", have you found it?

[687766616e]

> or ' or " ......?
or what

[johnyjin]

Yes
<'"> and "(,..,'(,,

[687766616e]

When you know that, try to use tamper (try it one by one?)
or mixed use

[johnyjin]

It is not about tamper
It is the first payloads that loaded and sent to targets
It can not past with tampers

[687766616e]

Which one did you use

[johnyjin]

what methods? I said before sqlmap before all request sent those payloads

[687766616e]

Which or what did you use? (tamper
and... What did you enter(command