+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: path traversal error 400? (/showthread.php?tid=6079523)
path traversal error 400? - joni1n3r - May 18, 2020
Hello im was playing with a site, and i see in the code one image is called from ../../image/image1.jpg, So i try to make a Path traversal to passwd, but seems like the request jump to a WAF awselb/2.0 with a 400 response. Any one know a bypass?
thanks
RE: path traversal _error_ 400? - нα¢кєя - May 19, 2020
WAF bypasses are based on guessing the rules and then bypassing it one by one. Try to type each char and figure out what exactly is being blocked and what is not.
For example
URL Encoding
Double Encoding
Random Alphabets
Null Values
New Lines
Overflow the Rule check length
These are some of the techniques you can use.