mirror of
https://github.com/trimstray/the-book-of-secret-knowledge
synced 2024-12-25 09:58:21 +01:00
add 'Bypass WAFs by Shortening IP Address'
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
parent
996da61c56
commit
92ec021ecc
1 changed files with 12 additions and 0 deletions
12
README.md
12
README.md
|
@ -1470,6 +1470,18 @@ In Firefox's addressbar, you can limit results by typing special characters befo
|
|||
- `#` - for matches in page titles.
|
||||
- `@` - for matches in web addresses.
|
||||
|
||||
###### Bypass WAFs by Shortening IP Address (by [0xInfection](https://twitter.com/0xInfection))
|
||||
|
||||
IP addresses can be shortened by dropping the zeroes:
|
||||
|
||||
```
|
||||
http://1.0.0.1 → http://1.1
|
||||
http://127.0.0.1 → http://127.1
|
||||
http://192.168.0.1 → http://192.168.1
|
||||
```
|
||||
|
||||
> This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted.
|
||||
|
||||
#### One-liners [<sup>[TOC]</sup>](#anger-table-of-contents)
|
||||
|
||||
##### Table of Contents
|
||||
|
|
Loading…
Reference in a new issue