Here's another writeup for a task I authored with @makelarisjr for @hackthebox_eu x UNI #CTF Quals.
? WAFfles Order consists of insecure deserializ ...February 5, 2021
Top story’s from my Newspaper @HolyBugx: ‘You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed ...January 31, 2021
Top story's from my Newspaper @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a W ...January 31, 2021
CyberSec News: @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction ...January 30, 2021
Top story: @HolyBugx: 'You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just ...January 30, 2021
You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just now.
I Covered the Syn ...January 30, 2021
You can bypass WAFs using a simple Match&Replace rule in Burp Suite, I used it and I simply bypassed a WAF restriction just now.
I Covered the Syn ...January 30, 2021
Beautiful WAF bypass I just found:
Strips specific tags, including '<>'.
Blocks all event handlers.
So I used 'on<>load' instead. It che ...January 27, 2021
Cloudflare XSS Bypass
It appears there is a regex that only checks for the first occurrence of "on" followed by a word (e.g. /on\w+/m)
This allows mul ...January 25, 2021
If your IP address is not kept secret, attackers can bypass the CloudFlare network and attack your servers directly. To bypass the Cloudflare Web Appl ...January 25, 2021
#Cloudflare (servicio #WAF Web Application #Firewall) era vulnerable a un ataque Cross-Site Scripting (#XSS) utilizando un tag de SVG.
El “#bypass� ...January 22, 2021
Everything you need to know about web-application firewalls (WAF) ?
Awesome WAF: One of the greatest resources for learning how WAFs behave & how ...January 22, 2021
Se encuentra un ‘bypass’ de la protección contra XSS en CloudFlare: Cloudflare, el conocido servicio WAF (Web Application Firewall) utilizado por ...January 22, 2021
Everything you need to know about web-application firewalls (WAF) ?
Awesome WAF: One of the greatest resources for learning how WAFs behave & how ...January 22, 2021