Bypassing Akamai WAF's XSS Protection: A Bug Bounty Hunter's Perspective

Disclaimer:
This video is for strictly educational and informational purpose only.I own all equipment used for this demonstration and is not intended to be used for malicious purposes.Hacking without permission is illegal so always ensure you have proper authorization from the system or network owners before using security tools or attempting to exploit vulnerabilities.

[@exploitable0x1]

Yr methodology of finding sqli xss one liner methodology etc.. make a video on that tooo please Buddy

[@lostsecc]

sure

[@dazzleking3869]

Your videos are great 💙 , love from Egypt 🇪🇬

[@lostsecc]

happy to hear brother ❤️🤗😇

[@littlebitsomething3106]

Great video, but your payload is not working now, is there anything you might share?

[@KennysDeaths]

I must say that i love your videos :)

[@lostsecc]

☺️❤️🤗

[@Servib]

Bro please make a video on how to setup wsl in windows like you and how to install all these tools like you 🥺☺️

[@lostsecc]

sure ❤️

[@exploitable0x1]

Finallllyyy it's outtt

[@xh4rmy]

does that mean that steam migh also be vulnerable to this? since they use akamai cdn

[@Rui3144]

It depends. You need first to identify if its vulnerable to some kind of cross site scripting and then you can bypass the akamai with it, otherwise you can just use the same payload and dont have any result. Its a bypass, but first you need to check if the websites has the vulnerability somewhere.

[@M7MDTube]

what a hero bro !! Thanks for every thing

[@lostsecc]

❤️😇

[@akashpokemonhunter7502]

Bro can u tell me your all extensions used for bug Bounty purpose

[@lostsecc]

i shared all in my telegram channel

[@akashpokemonhunter7502]

@@lostsecc when bro i didn't get it i am following from long time

[@lostsecc]

t.me/lostsec/405

[@HRKL-j4g]

what is the name of app at the top of your screen like hat where you getting payload

[@lostsecc]

its Hackstools extension i shared in my telegram channel

[@yahai_]

I want the nuclei tamplate that you used in the previous video

[@lostsecc]

upload soon..

[@yahai_]

Your videos are great, keep it up ❤❤

[@lostsecc]

❤️🤗

[@The25yahya]

can you give a link for the payloads ?

[@lostsecc]

i shared in telegram bro

[@Govi-fu1ti]

Incredible bro , you are very good thanks bro 🔥🔥🔥.thank you bro

[@lostsecc]

🤗❤️

[@Zer02-kv4vy]

I always learn a lot from watching your videos, but I would like to ask if you can share your experience with the payload document.

[@lostsecc]

i shared all things in my tg channel..

[@apple_00]

Love you bro

[@lostsecc]

love you three bro ❤️🤗

[@ayushmanngupta7027]

Bro make a video on how to bypass waf for xss manual approach to craft a payload pleade

[@lostsecc]

sure

[@monikasharma2931]

Amazing 😳

[@lostsecc]

Thanks

[@limynal]

What are the implications of this kind of exploit ? I'm new to this

[@lostsecc]

ato

[@lostsecc]

account takeover

[@rayhankanak]

what is the name of this application in your taskbar for using take note?

[@lostsecc]

its default window notes

[@exzezet]

bro, please tutorial fast scanning use nuclei🙏

[@sylsoft2724]

Love From Africa ivory coast , Please beginner roadmap 🥺

[@lostsecc]

sure ❤️

[@shivitheh4cker354]

amazing bhai

[@lostsecc]

thna bro ❤️

[@Sidharthas89]

Love from kali wsl❤❤❤😂😂

[@lostsecc]

🌝❤️

[@akashpokemonhunter7502]

Bro i finished portswigger labs and advance labs i am ready for bug Bounty hunting or i should still gain knowledge bro

[@lostsecc]

just read some hackerone reports and some payload bypass from github repo or hacktricks

[@haxonit]

I Love your vides bro❤

[@lostsecc]

❤️🤗

[@Servib]

I am having problem installing go in my wsl Linux plz help. Btw your videos are super 🤯 😍

[@lostsecc]

dm me in telegram

[@Servib]

Ok

[@kiritprajapati8811]

bigfan Sir 🖤

[@lostsecc]

my pleasure ❤️🤗

[@bughunting8584]

Why the strong parameter is used?

[@lostsecc]

what

[@IBO.ATTACKS]

I like your idea's

[@lostsecc]

❤️😇

[@isaiahjohnson7707]

i see but how to escalate it from there?

[@lostsecc]

what

[@poiuymnbvc8339]

bro can you explain how did you get that payload working, like how did you figure that payload

[@lostsecc]

there are many bypass payloads i shared in my tg channel must check

[@rubenreinagarcia9563]

Hi, i wanted to ask if u have any vpn or what do u use or what’s the best?

[@lostsecc]

ipvanish

[@rubenreinagarcia9563]

@@lostsecc thanks bro u the best

[@l00pzwastaken]

How to search for endpoints ?

[@lostsecc]

use katana or gau

[@SohelPratap]

bro video on payloads please how do you make them

[@lostsecc]

ok

[@iphkb5315]

give the priv8-templates to us?

[@lostsecc]

sure upload soon in github

[@ShermaMahdi]

Bro whats the name of that JS extention?

[@lostsecc]

h4ckstool

[@__CJ.__]

Music is crazy🎉

[@lostsecc]

and coffin is ? 🤭😎

[@rollups-]

Your videos are THE BEST. Try listening to the Qur’an instead of songs

[@lostsecc]

❤️

[@MustafaGains]

What’s ur Github?

[@lostsecc]

github.com/coffinxp/payloads

[@bountyvitcim]

i need payload

[@lostsecc]

i shared in mt tg channel many must check.

[@mayaprotocol8106]

Song pls

[@lostsecc]

dark beach slowed

[@mnageh-bo1mm]

where are the payloads and how did you come up with them for fuck sake

[@lostsecc]

i shared all in my tg channel

[@iphkb5315]

Hi bro!

[@lostsecc]

helo

[@brolytim4303]

what extensions u have?

[@lostsecc]

h4acktools

[@brolytim4303]

​@@lostsecc thanks!!! great content

[@DBVLOGS1510]

Send me payload???

[@lostsecc]

check telegram

[@mr-dark]

🫡❤

[@jahanajj]

can you teach hoe to hunt on a cve , i was struggling with "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" this , what to do further

[@lostsecc]

sure i am planing to upload that..

[@Servib]

Bro I have dm you on telegram for or my issue 🥺