The tweet mentions the difficulty of bypassing a WAF (Web Application Firewall) to execute XSS attacks. It highlights the challenge of executing XSS attacks when the WAF is in place to prevent them. The tweet does not provide a specific bypass payload or WAF vendor. It emphasizes the importance of bypassing WAFs for successful XSS attacks. No technical details or specific information is provided in the tweet.
Xss is so fun but hard if you can’t bypass WAF. #xss @coffinxp7
— Oludare Ezekiel????? (@OludareEzekiel9) March 15, 2025