The tweet mentions the frustration of not being able to receive proper support for finding a WAF bypass. It highlights the difficulty in getting a real fuzzing tool to find neat WAF bypasses based on the logic of how WAFs work. This indicates a need for better understanding and tools in the realm of WAF bypass testing and research.
Jfyi even if you give it a real exploit that has already been well documented it will deweaponize it and attempt to simulate all things relevant. It couldn't even write me a real fuzzing tool for actually finding neat WAF bypass given real logic of how all that works.
— Voidwalker (@JustWantToQ1) February 27, 2025