THREATOPS
THREAT OPS › Threat News › Bypassing WAFs with the phantom $Version cookie

Bypassing WAFs with the phantom $Version cookie

infoportswigger_researchPublished 2024-12-04

HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known

MITRE ATT&CK techniques

Original source: https://portswigger.net/research/bypassing-wafs-with-the-phantom-version-cookie