Skip to content
An Interesting XSS-Bypassing WAF
labs.cognisys.group | vulnerability | #pentesting | #web-security | #xss | #waf | #waf-bypass | #payload
Summary
A web pentest case study on landing XSS past a WAF: after standard payloads were blocked, the tester studied the filter logic and crafted a custom payload that slipped through, plus mitigation advice.
- Published
- Collected