When bypassing Akamai WAF for XSS, the payload <svg>script</svg> was successful despite blacklisted words. This indicates a potential weakness in the WAF's filtering mechanism. It's important to investigate further to ensure proper protection against XSS attacks. For more details, check out the full blogpost on this Akamai WAF bypass.
Check out the original tweet here: https://twitter.com/0mar__9h/status/1879745657445204391
Subscribe for the latest news: