writeups.xyz / {JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF

Submitter : c2a

Date: 8 December 2022

Bounty : undisclosed

Vulnerabilities :

• WAF Bypass
• SQL Injection

Programs :

• Palo Alto Networks
• AWS
• Cloudflare
• F5
• Imperva

Authors :

• Noam Moshe

Link :
https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf