The tweet mentions a SQL Injection bypass for a WAF. The bypass was done manually. The WAF vendor is unknown. The tweet includes a link to a video demonstrating the bypass. The details of the bypass can be found in the video linked in the tweet.