+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help bypassing a WAF (XSS) (/showthread.php?tid=5324599)
Need help bypassing a WAF (XSS) - 8220347 - Jul 1, 2016
The WAF blocks the following input:
Code
<b onmouseover=
<script> or </script>
javascript:
<body [b]onload=[/b]<b>test</b>
<a href="google.com">test</a>
Any ideas? thanks
* - Pr3nK - Jul 1, 2016
(Jul 1, 2016 05:07 PM)8220347 Wrote: The WAF blocks the following input:
I have managed to achieve HTML injection with the following allowed input:Code<b onmouseover=
<script> or </script>
javascript:
<body [b]onload=[/b]
<b>test</b>
<a href="google.com">test</a>
Any ideas? thanks
Can I take a look at the website? Send it to me via PM, I'll help you
* - 'Cynical - Jul 1, 2016
Check this shit out:
https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet