Waf bypass: webknight waf bypass

On a certain day of a certain month, I met a server, a website, an injection point, a webknight, and then had the following content.
Try to inject. The test finds that the select and from keywords are filtered and the direct keyword is filtered. This method has a high false positive rate...
First test percent bypass (se % lect) and test failed

If you want to bypass using the parameter contamination method of the GPC data packet format, this method is invalid because it is a keyword filter...
Try to bypass the encoding method, and find that the unicode method can be perfect bypass. For example, if select uses unicode encoding for one character: % u0073elect www.2cto.com