[joni1n3r]

Hello im was playing with a site, and i see in the code one image is called from ../../image/image1.jpg, So i try to make a Path traversal to passwd, but seems like the request jump to a WAF awselb/2.0 with a 400 response. Any one know a bypass?

thanks

[нα¢кєя]

WAF bypasses are based on guessing the rules and then bypassing it one by one. Try to type each char and figure out what exactly is being blocked and what is not.

For example
URL Encoding
Double Encoding
Random Alphabets
Null Values
New Lines
Overflow the Rule check length

These are some of the techniques you can use.