estoy en una practica de pentesting y se me ocurrio poner un waf que es securebox a una web y quisiera saber que si hay manera de evadirlo osea por medio de bypassing o algun metodo que sea efectivo
¿Securebox waf de Comodo?
Exploiting Error Based SQL Injections & Bypassing Restrictions
https://infosecwriteups.com/exploiting-error-based-sql-injections-bypassing-restrictions-ed099623cd94
Cross-site scripting (XSS) cheat sheet
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
(https://i.imgur.com/IlNmT0N.jpg)
XSS bypass WAF, filters, sanitizers. HTML URL UTF-8 encode
https://gist.github.com/hackerscrolls/5c0990dfc734eeb4a9ce8cf2ccdf6fba
Radix number and Anonymous Function to Bypass some WAF's during XSS
https://boulouizyoussouf.medium.com/radix-number-and-anonymous-function-to-bypass-some-wafs-during-xss-d012e1525ccd
gracias