Collected research
Bypassing WAFs to Exploit CSPT Using Encoding Levels
Client-side path traversal payloads can be hidden from a WAF by exploiting how many times the WAF and the application each URL-decode. Encode above the WAF's level, pad with segments only the WAF decodes, or use an encoded dot-dot which the browser treats as traversal but the WAF counts as a directory, so the traversal reaches fetch and chains to an open redirect for XSS.
Record
- Researcher
- Matan Berson
- Published by
- matanber.com
- Date
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Matan Berson, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .