15. and * that are useful for SQL injection attacks. Changing Cases Some WAF's don't have any rule or signatures to detect upper cases, Here are some examples of a union statement with Uppercase. uNiOn aLl sElEcT UnIoN aLL SELECT You can combine uppercase statements with comments for...