ModSecurity

TryHackMe Farewell: WAF rate-limit bypass to XSS cookie theft
Bypassing WAF

Farewell: WAF rate-limit bypass to XSS cookie theft

November 4, 2026 · 4 min
TryHackMe Padelify: blind XSS cookie theft to LFI admin takeover
Bypassing WAF

Padelify: blind XSS cookie theft to LFI admin takeover

November 4, 2026 · 4 min