waf-bypass

This skill should be used when the user mentions "WAF", "web application firewall", "WAF bypass", "WAF evasion", "WAF detection", "WAF fingerprint", "wafw00f", "firewall bypass", "firewall evasion", "request filtering", "request blocked", "payload blocked", "blocked by WAF", "403 forbidden", "406 not acceptable", "429 too many requests", "rate limit", "rate limiting", "IP ban", "IP block", "IP reputation", "IP blacklist", "CDN bypass", "origin IP", "origin discovery", "Cloudflare", "Cloudflare bypass", "CF bypass", "Cloudflare WAF", "AWS WAF", "AWS Shield", "AWS managed rules", "Akamai", "Akamai Kona", "Akamai WAF", "Imperva", "Incapsula", "Imperva WAF", "ModSecurity", "OWASP CRS", "Core Rule Set", "ModSec", "paranoia level", "Sucuri", "Sucuri WAF", "F5 BIG-IP", "F5 ASM", "Barracuda WAF", "Fortinet FortiWeb", "FortiWeb", "Citrix WAF", "Azure WAF", "Azure Front Door", "payload encoding", "double encoding", "URL encoding bypass", "Unicode normalization", "Unicode bypass", "null byte injection", "comment injection", "obfuscation", "mixed encoding", "hex encoding", "HTML entity encoding", "overlong UTF-8", "HTTP verb tampering", "method tampering", "HTTP/2 smuggling", "request smuggling", "chunked transfer", "chunked encoding", "content-type switching", "multipart abuse", "multipart boundary", "transfer-encoding", "HTTP parameter pollution", "HPP", "tamper script", "sqlmap tamper", "WAF rule bypass", "WAF rule evasion", "managed rules bypass", "custom rules bypass", "regex bypass", "regex evasion", "WAF fingerprinting", "WAF identification", "WAF detection technique", "nmap http-waf-detect", "nmap http-waf-fingerprint", "WAF error page", "WAF signature", "WAF response analysis", "security header analysis", "X-Forwarded-For bypass", "header injection bypass", "path normalization", "path confusion", "path traversal bypass", "directory traversal bypass".