Increase The SQLi Attack Success Rate using SqlMap with the use of Tamper Selection Scripts

SQLi attacks rank 3 in OWASP and MITRE and still become a vulnerability and weakness in many software. SQLi attack is a technique that is relatively common and widely used toward online services in penetration testing areas. Unfortunately, as a penetration tester, performing SQLi attacks using SqlMap is not always delivered successfully. Therefore, this paper presents a model for performing SQLi attacks effectively using SqlMap. This study aims to provide acceptable knowledge about SQLi attacks, especially the use of tamper scripts in SqlMap. Proper selection of tamper scripts when using SqlMap can result in higher success and time-effective penetration testing.