bpassing a un waf

[qbit28]

estoy en una practica de pentesting y se me ocurrio poner un waf que es securebox a una web y quisiera saber que si hay manera de evadirlo osea por medio de bypassing o algun metodo que sea efectivo

[el-brujo]

¿Securebox waf de Comodo?

Exploiting Error Based SQL Injections & Bypassing Restrictions
https://infosecwriteups.com/exploiting-error-based-sql-injections-bypassing-restrictions-ed099623cd94

Cross-site scripting (XSS) cheat sheet
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet



XSS bypass WAF, filters, sanitizers. HTML URL UTF-8 encode
https://gist.github.com/hackerscrolls/5c0990dfc734eeb4a9ce8cf2ccdf6fba

Radix number and Anonymous Function to Bypass some WAF's during XSS
https://boulouizyoussouf.medium.com/radix-number-and-anonymous-function-to-bypass-some-wafs-during-xss-d012e1525ccd

[qbit28]

gracias