If you are blocked by a waf and cannot bypass it, retest on different days of the week. my target site blocked me every day except Wednesday and Sunday. every wednesday and sunday when i get Not blocked i look for vulnerabilty on my target.
#bugbountytips