Archive

WAF bypass by the_yellow_fall

This tweet highlights a flaw in ModSecurity that allows a WAF bypass for path-based payloads in request URLs. The vulnerability is rated CVSS 8.6, ind ... February 2, 2024

WAF bypass by KoppeDavid

The Sysdig Threat Research Team recently discovered a vulnerability in AWS WAF that allowed bypassing its defenses using an automated WAF fuzzer. Alth ... February 2, 2024

WAF bypass by uMdaliWethu

This tweet discusses bypassing Imperva WAF using a Boolean-based SQL injection payload. The author suspects that they are unable to extract any data d ... February 2, 2024

WAF bypass by U3nerd

The tweet mentions a blog post about exploiting blind SQL Injection manually and learning about mod_waf bypass. The blog post seems to provide insight ... February 2, 2024

WAF bypass by DanielCm1410

The Sysdig Threat Research Team recently discovered a vulnerability in AWS WAF that allowed bypassing its defenses using an automated WAF fuzzer. This ... February 2, 2024

WAF bypass by rachelhilll

The Sysdig Threat Research Team recently discovered a vulnerability in AWS WAF that allowed bypassing its defenses using an automated WAF fuzzer. The ... February 2, 2024

WAF bypass by seke4l

I discovered a bypass for KNOXSS WAF that allows an XSS attack by using the payload '</<K<Svg Onload=alert(1)>'. This payload exploits a v ... February 2, 2024

N/A

The Mystery of WAF Bypassing: A Discussion Sparked by @xAkshayTalekar

In a recent tweet, security researcher @xAkshayTalekar raised an interesting question about WAF (Web Application Firewall) bypassing. He asked why the ... August 1, 2023

N/A

Bypassing WAFs: A Compilation of Payloads Shared on Twitter by Vahidnameni

In a recent tweet, security researcher Vahidnameni shared a valuable resource for anyone interested in bypassing Web Application Firewalls (WAFs). The ... August 1, 2023

CloudFlare , XSS

Cloudflare Bypass for XSS Vulnerabilities Shared by Anastasis_King

In a recent tweet, security researcher Anastasis_King shared a Cloudflare bypass for Cross-Site Scripting (XSS) vulnerabilities. This information is c ... August 1, 2023

AWS WAF , JSON-Based hpp-like method

Unveiling a Unique AWS WAF Bypass Technique by rbidou

In a recent tweet, rbidou shared a unique AWS WAF bypass technique. This method is JSON-Based hpp-like, a vulnerability type that is not commonly seen ... July 31, 2023

AWS WAF , JSON-Based hpp-like technique

Exploring a Unique AWS WAF Bypass Technique: A Tweet Analysis by @rbidou

In a recent tweet, security researcher @rbidou shared an interesting AWS WAF bypass technique. This method is a JSON-Based hpp-like technique, which i ... July 31, 2023

N/A

Hacking Tips from a Japanese User: Bypassing WAF and More

In a recent tweet, Japanese user asadamyouji shared some interesting insights into the world of hacking. While we don't condone illegal activities, un ... July 31, 2023

WAF bypass by d0znpp

? Check out the great resource @d0znpp has put together! It's a collection of WAF bypasses from the Twitter community. ? A must-have for security prof ... July 30, 2023

SQL injection

WAF bypass SQL injection by Barbarossa0x

@Barbarossa0x just shared a great list of ways to bypass WAF & compromise SQL injection: whitespace alternatives, comments, parenthesis, DBMS & more ? ... July 30, 2023

WAF bypass by waf_bypass

RT @waf_bypass: ¡AndalusiaHacker ?? ha descubierto una herramienta ? para buscar Local File Inclusión's: LFI-FINDER! ? Prueba su potencial para dete ... July 30, 2023

WAF bypass by andalusiahacker

s @andalusiahacker ?? descubre una ? herramienta para encontrar Local File Inclusión's: LFI-FINDER. Pruébala para detectar fallos en endpoints y by ... July 30, 2023

WAF bypass by waf_bypass

AnonymousH4ck35 has the goods! ? If you're into #pentesting & #hacking, @waf_bypass has put together an awesome cheat sheet, WAF bypass tool & methods ... July 30, 2023

WAF bypass by AnonymousH4ck35

@AnonymousH4ck35 has the goods! ? If you're into #pentesting & #hacking, check out their cheat sheet, WAF bypass tool & methods to bypass WAF! ? Get a ... July 30, 2023

mod_security

WAF bypass by CVEnew

@CVEnew reports that CVE-2023-38199 coreruleset (aka OWASP ModSecurity Core Rule Set) has an issue that could allow attackers to bypass a WAF with a c ... July 13, 2023

Akamai , XSS

Akamai bypass XSS by kaungmyatmeow

@kaungmyatmeow was surprised to find out that Akamai WAF is easy to bypass ? Not a good sign for security ? Maybe it's time to look into better soluti ... July 13, 2023

WAF bypass by waf_bypass

@waf_bypass Don't let bad actors take control! ??? Mark_Hellyer has the tips you need to secure your applications & keep them safe. ?? Read his blog t ... July 13, 2023

Imperva

Imperva bypass by Mark_Hellyer

???? Protecting applications from bad actors isn't easy, but @Mark_Hellyer has the answers! Check out his blog to find out how business logic can be u ... July 13, 2023

WAF bypass by waf_bypass

@waf_bypass just announced a new security vulnerability found in #coreruleset. Attackers can bypass a WAF with crafted payloads. ? Stay safe and infor ... July 13, 2023

WAF bypass by VulmonFeeds

@VulmonFeeds New security vulnerability discovered in #coreruleset. Attackers can bypass a WAF using crafted payloads ? Protect yourself & stay inform ... July 13, 2023

WAF bypass by SaltinDeadsec

@SaltinDeadsec Check out this amazing article on how the #COVID19 pandemic is being managed by different countries ??? Read the findings here: https:/ ... July 12, 2023

CloudFlare

CloudFlare bypass by dev_laravel

RT @dev_laravel: ?The recently released OSS web crawler "Customer Wanted" fulfills all needs & leaves you trembling!? Good to see that the features ar ... July 12, 2023

Imperva

Imperva bypass by waf_bypass

@waf_bypass: Protecting apps from bad actors is essential for keeping them secure! ? Business logic is the core of an app, but malicious actors can ex ... July 12, 2023

Imperva

Imperva bypass by CyberJoseGomez

@CyberJoseGomez: Protecting applications from bad actors is critical! ? Business logic is the backbone of an app, but malicious actors can abuse it to ... July 12, 2023

Imperva

Imperva bypass by waf_bypass

@waf_bypass explains the importance of business logic for apps & how it can be used by bad actors to bypass security. Read up on how to detect & preve ... July 11, 2023