Hey, WAFs are bypassable… Both attackers and defenders should know it. They’re here to buy some time, increase the bar. I don’t understand the hype to share payloads and tools to generate them publicly. If you found cool bypass to AWS WAF, share it with AWS to make others safer https://t.co/NsRgmOhwBn