So, you think your WordPress isn’t leaking user emails? Here are 6 ways to bypass WordPress hardening: https://t.co/B2qFcp58PE #wordpress #waf #apps ...March 16, 2021
TIL you can add JS comments between a function name and its arguments. Was able to bypass Akamai WAF in an endpoint that reflected many of my params u ...March 15, 2021
TIL you can add JS comments between a function name and its arguments. Was able to bypass Akamai WAF in an endpoint that reflected many of my params u ...March 15, 2021
Almost all XSS Payloads in one place.
I need more payloads like WAF bypass to complete the list.
#bugbounty #cybersecurity #infosec #BugBountyTips
ht ...March 14, 2021
Almost all XSS Payloads in one place.
I need more payloads like WAF bypass to complete the list.
#bugbounty #cybersecurity #infosec #BugBountyTips
ht ...March 14, 2021
Almost all XSS Payloads in one place.
I need more payloads like WAF bypass to complete the list.
#bugbounty #cybersecurity #infosec #BugBountyTips
...March 14, 2021
Security researcher posts new XSS bypass for WAF, a tester stumbles upon Twitter a day later and a “patch” is implemented #XSS #InfoSec #BugBounty ...March 11, 2021
Security researchers shows how to completely bypass ModSecurity 3 web application firewall by Eli Cyber Security https://t.co/5vQj2CEaBy @EliSecurity ...March 7, 2021
ModSecurity 3 web application firewall (WAF) installations configured to disable Request Body Access can be bypassed, security researchers warn
https: ...March 7, 2021
Cloudflare XSS Bypass via add 8 or more superfluous leading zeros for dec and 7 or more for hex.
Dec: <svg onload=prompt%26%230000000040document.d ...March 6, 2021
Cloudflare XSS Bypass via add 8 or more superfluous leading zeros for dec and 7 or more for hex.
Dec: <svg onload=prompt%26%230000000040document.d ...March 6, 2021
"If you run CRS or one the known commercial ModSecurity rule sets on ModSecurity 3 and you disable Request Body Access for the WAF, then you have conf ...March 4, 2021
Hi folks, @ChrFolini asked that users of OWASP @CoreRuleSet read this blog and ensure they aren't subject to a complete @ModSecurity 3 #WAF bypass. ^ ...March 2, 2021