XSS WAF Bypass Techniques

[@iloiskihailm8710]

Dude, you're totally killing it with your techniques, way ahead of everyone else!

[@Ott3rly]

My pleasure!

[@cyberpro151]

yooo! My brother has again contributed some best things for the community! God bless you dear

[@Ott3rly]

Thanks bro!

[@PleaseTheNinja]

This is a very good approach! Congrats on your success

[@Ott3rly]

Thanks so much!

[@abhinavbansal-cc8gr]

gr8 video......need more like this..also on advance xss filter bypass

[@Ott3rly]

Noted!

[@Khalid-bm4fw]

Thanks We need more content like this

[@nurmuhammadkevin8395]

its really helpfull dude, thank you for making this video

[@Ott3rly]

My pleasure!

[@ilhamdn23]

i love this content, thank you Ott3rly

[@detective5253]

New subscriber here, i really love your content mate!

[@Ott3rly]

Welcome aboard!

[@HeroKing-xg6ys]

Hello bro honestly you are doing great job I'm learning a lot from you where are you from

[@Ott3rly]

Hey, thanks. I'm from Lithuania.

[@vlogsprasenjit]

Subscribed! Amazing content, I have just started BB

[@Ott3rly]

Welcome aboard!

[@asifsaifi2925]

Pretty goodddddddd Man really awesome content

[@Ott3rly]

Glad you enjoyed

[@Lazyhackerbd]

great video boss

[@Ott3rly]

Appreciate it!

[@BanglarPranChitra]

Best best best 😮

[@AhmedMoubarak-pz5yu]

Thank you for the wonderful videos. I watched most of them, but I have a problem with waf. When fuzz for subdomain enumeration or directory or hidden parameter or anything after a short period of time, l block with waf, and the response is late from the server.

[@Ott3rly]

The way you trigger WAF is trying to access the specific endpoints or sending malicious requests. It's just an another layer of defense for websites. Unfortunately, its the biggest pain in the ass for most cases while doing bug bounties. I will be sharing some extra videos on this topic in the future, to help avoid it or bypass it. Feel free to check discord, if you have some questions or looking for collabs ;)

[@AhmedMoubarak-pz5yu]

​@@Ott3rly❤

[@overthinker1877]

Thx great video 🫶🏽

[@sattharzakeer9594]

Awesome 😮

[@Ott3rly]

Thanks 🤗

[@HasanthaGimhana]

Nice ❤‍🔥

[@overthinker1877]

Any video about browser extension u are using rare one ?

[@Ott3rly]

Not sure if that need extra video, but I could answer in next Q/A.

[@munchlenova6353]

How to find what ruals in wfa was used in a website

[@Ott3rly]

You will never know. I've just shown how it looks from defensive side.

[@ss-rc1gy]

Nice ❤

[@Ott3rly]

Glad you like it

[@Shintowel]

amazing

[@munchlenova6353]

Video is exllent

[@Ott3rly]

Thanks!

[@devrajdhiwar9028]

Osmm video 🎉❤❤❤❤❤❤❤

[@Ott3rly]

Thanks 🤗

[@RajuHa-g3m]

Nice video brother ❤

[@Ott3rly]

Thanks ✌

[@Shapeshiftshow]

From where i can practice this bug bounty, i mean do you have any write ups?

[@Ott3rly]

Yes I do share a lot of tips and blog posts, check links on channel description.

[@Shapeshiftshow]

@@Ott3rly thank you brother

[@Shapeshiftshow]

@@Ott3rly I have another doubt, is there any vulnerability in code 503?

[@TrackinDaMeta]

I'd like to see one on wordfence

[@Ott3rly]

That's too specific topic. I might work on that sometime, but not in the near future.

[@c_war]

Basically I'm lame in escape tag normally ">< this doesn't not work ;// I try this do i have to learn specific things in JavaScript to understand this

[@Ott3rly]

It's always about the context where your payload will end up. Practise makes it perfect!

[@KH-en1yr]

Auth Videos