#NahamCon2024

[@detecht]

Shubs is like, "Have you ever heard of the internet? Yeah, I own it." Wow! This was amazing! Thank you, sir. Greatly appreciated.

[@Ott3rly]

Thanks, Shubs for showing some cool techniques for WAF bypasses. I guess the community had long waited for this! Even though some WAF bypasses were not new, but many people knew this for sure.

[@HopliteSecurity]

Great presentation and really appreciated the fun and engaging delivery. Big thanks again for putting on NahamCon2024 ❤❤

[@Blu3ther]

ANYTIME I see Shubs in the thumbnail, I'm clicking on it! Thanx for the tips!! 💪

[@MFoster392]

Great talk thanks for NAHAMCON Ben :)

[@Dkdiebebdjdb]

Great talk, glad to see it here too

[@SKY911]

Wish I knew this earlier!!! I spent soo much time trying to craft a fancy payload that never worked 😐

[@rctech1237]

Wow keep it up , present 😊

[@golfreeze]

Thank you Shah , Good topic

[@MFoster392]

Can these tools be ran from a laptop this is the first video I've seen on them thanks again Ben you still da man Bro :)

[@Mersal-tq9lm]

With the shared certificates trick(cross-tenant attacks). You will have to know the origin IP of the target right?

[@thatonesecguy]

Brilliant!!!

[@InfoSecIntel]

Will/Have the slides been released?

[@WebWonders1]

Super infromative

[@d1_v_1ne]

Thanks

[@bokfpv]

Nice!!

[@breakoutgaffe4027]

Nice tips

[@shareb1t]

Caido made way into these videos lmao , i can see some crime websites as flare too

[@romeokoati5385]

Nice talk

[@ranoshlover]

wow

[@trustedsecurity6039]

Shadow clone is like axiom finally

[@parthshukla1216]

Amazing Doc. I certainly doubt nowafpls working, but happy to be wrong.

[@trustedsecurity6039]

And i highly doubt you know anything about web hacking and who is this guy lmao

[@parthshukla1216]

@@trustedsecurity6039 This is not PCI compliance relax. Just try the tool and then tell. Oh wait! but you wont get blocked because pretty sure your attacks are not that powerful. LMAO

[@trustedsecurity6039]

@@parthshukla1216 just talking about PCI compliance when it comes to bypass/hacking show your dont have the basics of web pentesting LMAO I do web pentest everyday... And this guy do it since you wasnt even born... And to finish it is a bypass he use since years and we use it for years ;) it is like when EDR didnt scan large files too... Not PCI compliance LMAO

[@jesperwall839]

Ok. This only applies to cloud WAF.

[@okonkwochukwudalu9340]

Use of shared certificates is why I disliked akamai, they do not support bring your own certs....terrible!

[@testauthoritytes9917]

So people are back to human intellect and making custom rules now ...

[@Noman22410]

In a capitalist world this shouldn't be free