Це відео не доступне.
Перепрошуємо.
XSS WAF Bypass Techniques
Вставка
- Опубліковано 15 сер 2024
- Master the different ways to bypass the Web Application Firewall to fully exploit Cross-Site Scripting! In this video, I will show how it looks from the defensive side and the ways to bypass those firewall rules.
---
Patreon: ott3rly.com/pa...
Twitter: ott3rly.com/tw...
Discord: ott3rly.com/di...
Get a $200, 60-day credit for DigitalOcean: ott3rly.com/do
NordVPN: ott3rly.com/No...
Domain: ott3rly.com/12...
0:00 - Intro
0:42 - Initial Setup
1:57 - User Agent Blocks
3:36 - IP & Country Blocks
6:07 - Bypassing Basic XSS Rules
10:39 - Additional Tips and Tricks
Disclaimer: This channel is strictly educational for learning about ethical hacking and penetration testing so that we can protect ourselves against real hackers. Hacking without permission is illegal so always ensure you have proper authorization before using security tools in any network environment.
#bugbounty #xss #firewall #cybersecurity #itsecurity
Dude, you're totally killing it with your techniques, way ahead of everyone else!
My pleasure!
Thanks
We need more content like this
yooo! My brother has again contributed some best things for the community! God bless you dear
Thanks bro!
This is a very good approach! Congrats on your success
Thanks so much!
gr8 video......need more like this..also on advance xss filter bypass
Noted!
i love this content, thank you Ott3rly
Nice ❤🔥
New subscriber here, i really love your content mate!
Welcome aboard!
Pretty goodddddddd Man really awesome content
Glad you enjoyed
Subscribed! Amazing content, I have just started BB
Welcome aboard!
Best best best 😮
great video boss
Appreciate it!
Awesome 😮
Thanks 🤗
Video is exllent
Thanks!
Thx great video 🫶🏽
Thank you for the wonderful videos. I watched most of them, but I have a problem with waf. When fuzz for subdomain enumeration or directory or hidden parameter or anything after a short period of time, l block with waf, and the response is late from the server.
The way you trigger WAF is trying to access the specific endpoints or sending malicious requests. It's just an another layer of defense for websites. Unfortunately, its the biggest pain in the ass for most cases while doing bug bounties. I will be sharing some extra videos on this topic in the future, to help avoid it or bypass it. Feel free to check discord, if you have some questions or looking for collabs ;)
@@Ott3rly❤
Nice ❤
Glad you like it
Osmm video 🎉❤❤❤❤❤❤❤
Thanks 🤗
How to find what ruals in wfa was used in a website
You will never know. I've just shown how it looks from defensive side.
Any video about browser extension u are using rare one ?
Not sure if that need extra video, but I could answer in next Q/A.
I'd like to see one on wordfence
That's too specific topic. I might work on that sometime, but not in the near future.
From where i can practice this bug bounty, i mean do you have any write ups?
Yes I do share a lot of tips and blog posts, check links on channel description.
@@Ott3rly thank you brother
@@Ott3rly I have another doubt, is there any vulnerability in code 503?
Auth Videos
Basically I'm lame in escape tag normally ">< this doesn't not work ;// I try this do i have to learn specific things in JavaScript to understand this
It's always about the context where your payload will end up. Practise makes it perfect!
Nice video brother ❤
Thanks ✌