How to Bypass CloudFront/AWS WAF and Pop Blind XSS

I want to share some tips on one of my favorite vulnerability classes: blind cross-site scripting. One of the reasons I love blind XSS is that when a payload pops, it s almost always a critical vulnerability. When I first learned about XSS Hunter (an easy-to-use online tool that facilitates the blind XSS setup), I could... The post How to Bypass CloudFront/AWS WAF and Pop Blind XSS appeared first…