From 92ec021ecc9595c39377624c3a7f3c04da8b7aa0 Mon Sep 17 00:00:00 2001 From: trimstray Date: Mon, 2 Dec 2019 14:48:06 +0100 Subject: [PATCH] add 'Bypass WAFs by Shortening IP Address' - signed-off-by: trimstray --- README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README.md b/README.md index 62251e8..bdcc1b6 100644 --- a/README.md +++ b/README.md @@ -1470,6 +1470,18 @@ In Firefox's addressbar, you can limit results by typing special characters befo - `#` - for matches in page titles. - `@` - for matches in web addresses. +###### Bypass WAFs by Shortening IP Address (by [0xInfection](https://twitter.com/0xInfection)) + +IP addresses can be shortened by dropping the zeroes: + +``` +http://1.0.0.1 → http://1.1 +http://127.0.0.1 → http://127.1 +http://192.168.0.1 → http://192.168.1 +``` + + > This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted. + #### One-liners  [[TOC]](#anger-table-of-contents) ##### Table of Contents