http://hackonadime.blogspot.com/2011/07/sqlmap-introduction-sql-injection.htmlalso a videohttp://www.securitytube.net/video/269bypassing firewallshttp://eshunrd.blogspot.com/2011/09/bypassing-web-application-firewalls.html