WAF bypasses via 0days. based on findings from a live hacking

In May, I participated in 1337up0522 from Intigriti which was about hacking OWASP ModSecurity Core Rule Set (CRS). I’ve got 13 findings accepted including 3 exceptional, 2 critical, and 8 high…

The 5 Hacking NewsLetter 16 - Pentester Land

WAF bypasses: Tearing down the wall, by Manas Harsh

Detecting zero-days before zero-day

WAF Bypass Techniques - Using HTTP Standard and Web Servers' Behaviour

How to Bypass Web Application Firewalls with WhatWaf

Brute XSS - Page 3 of 6 - Master the art of Cross Site Scripting.

Google Books X-Hacking. Cross-Site Search on Google Books by…, by terjanq

Bypassing WAF with WAFNinja, Firewall Tutorial

OWASP ModSecurity Core Rule Set version 3.3.4