writeups.xyz / Bypassing Akamai’s Web Application Firewall Using an Injected Content-Encoding Header

Submitter : c2a

Date: 21 February 2023

Bounty : undisclosed

Vulnerabilities :

• WAF Bypass
• CRLF Injection
• XSS

Programs :

• Akamai

Authors :

• Adam Crosser

Link :
https://www.praetorian.com/blog/using-crlf-injection-to-bypass-akamai-web-app-firewall/