The tweet mentions a SQL injection vulnerability and suggests trying to bypass a WAF. The payload provided is a single quote which can be used to test for SQL injection. It also mentions trying 'ghauri' and adding a single quote to the parameter. This could potentially trigger a SQL injection bypass. Further investigation and testing are recommended to fully understand the impact and bypass techniques.
contact someone that can bypass waf yes this is sqli but try to bypass waf now also try ghauri when giving to ghauri also add ' to the param maybe ghauri do something
— Sabir Ali ? (@0xSabir) May 6, 2024