Guys,
Does anyone know of any way to bypass the WAF protection against the < sign that comes with a character? For example: if I enter "< a" t ...February 11, 2021
How many ways does PHP give you to exploit an RCE bypassing filters, input sanitization, and WAF rules? Read more here https://t.co/LThMAmKMd3 #bugbou ...February 11, 2021
Here's another writeup for a task I authored with @makelarisjr for @hackthebox_eu x UNI #CTF Quals.
? WAFfles Order consists of insecure deserializ ...February 5, 2021
Top story’s from my Newspaper @HolyBugx: ‘You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed ...January 31, 2021
Top story's from my Newspaper @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a W ...January 31, 2021
CyberSec News: @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction ...January 30, 2021
Top story: @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just ...January 30, 2021
You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just now.
I Covered the Syn ...January 30, 2021
You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just now.
I Covered the Syn ...January 30, 2021
Beautiful WAF bypass I just found:
Strips specific tags, including '<>'.
Blocks all event handlers.
So I used 'on<>load' instead. It che ...January 27, 2021
Cloudflare XSS Bypass
It appears there is a regex that only checks for the first occurrence of "on" followed by a word (e.g. /on\w+/m)
This allows mul ...January 25, 2021
If your IP address is not kept secret, attackers can bypass the CloudFlare network and attack your servers directly. To bypass the Cloudflare Web Appl ...January 25, 2021