WAF Bypass Techniques: Let's make some WAFfles

WAF or web application firewalls can be a mystery for some people. Let's take away that fog for once and for all in just 20 minutes.
Uncle rat's courses:
thexssrat.podi...
Become a member of this channel to unlock special perks: / @thexssrat
You can now Buy me a block of cheese:
www.buymeacoff...
Patreon:
/ thexssrat
Instagram:
thexssrat
Follow me on twitter to be notified when i release a new video:
/ thexssrat
Come join our discord :D i hang out there often!
/ discord

[@Samuirai]

Why does php replace the space? That makes no sense? Where is this documented? What example code does that?

[@TheXSSrat]

You are correct 🤗 I encountered this in my hunting and it seems like i made a bad assemption. I will add a card to correct this when I get home 🏡

[@praveenvishnu17]

Thank u for the video, love from India 🇮🇳😍

[@alexanderkronholm3607]

I had no idear you had a youtube channel, Im subscribe right now.

[@TheXSSrat]

Thank you friend 😍❤️

[@AnthonyMcqueen1987]

I hate WAFs no matter what payload i use or how clever i make a payload these damn things seem to have figured it all out.

[@TheXSSrat]

I love them! 😍 a WAF means the devs had to put it there. Nobody puts up a WAF without a good reason so there’s probably treasure behind them

[@AnthonyMcqueen1987]

@@TheXSSrat Yeah I know but getting past them as the problem.

[@housenemo5649]

Liked the video bro keep up the good work amazing .... But My head hurts now gotta know/look for that last technique u didn't tell :)

[@MdAsifulHuq]

Best

[@ishanpatel8386]

Amazing amazing amazing 😍😍😍😍

[@ishanpatel8386]

Thanks for this genuine amazing content uncle rat 🤗❤️

[@TheXSSrat]

Thank you for all the support amazing hacker 😍😍

[@ishanpatel8386]

@@TheXSSrat keep rocking...😍😍❤️❤️

[@TrecXsec]

just watching you has got me so much better, thank you!

[@carlopasswords7083]

@
The XSS rat
I have same feel about bad memory, am always have feel i don't know everything... Strange feeling

[@TheGpp2011]

Very informative 👍

[@Amazon-Insider]

Nice explanation, but what to do when the site block us if we use tag event with " = " signs ? Like onerror= is blocked but onerror"= are not blocked (dosen't work)

[@TheXSSrat]

Have you tried url encoding or html entities? 🤗

[@cvenn63]

Good stuff!

[@bhag47]

It's been months i looking for waf bypassing in more detail. finally i got the right one. thanks buddy for sharing

[@ReligionAndMaterialismDebunked]

❤🎉

[@satepestage3599]

Subscribed