Cobalt Vulnerability Wiki

Observe what payloads WAF blocks and HTML encode the payload to bypass WAF Standard: "> Encoded: "><img src=x onerror=confirm&lpar;&rpar;> (General form) Encoded: "><img src=x onerror=confirm()> (Numeric reference) For more techniques, please check: https://github.com/0xInfection/Awesome-WAF#evasion-techniques Note: This is a broad concept, above payload is just an example

Bypass WAF with Unicode Seperators pwn3d

For more techniques, please check: https://github.com/0xInfection/Awesome-WAF#evasion-techniques Note: This is a broad concept, above payload is just an example