Difficulty Level: 3

Cyber Security

How to Bypass CloudFront/AWS WAF and Pop Blind XSS
ByCooper Young January 28, 2026February 15, 2026

I want to share some tips on one of my favorite vulnerability classes: blind cross-site scripting. One of the reasons I love blind XSS is that when a payload pops, it’s almost always a critical vulnerability. When I first learned about XSS Hunter (an easy-to-use online tool that facilitates the blind XSS setup), I could…

Read More How to Bypass CloudFront/AWS WAF and Pop Blind XSS
Cyber Security

Exacerbating Cross-Site Scripting: The Iframe Sandwich
ByCooper Young April 13, 2025February 15, 2026

I’m starting this post with adoration for the Critical Thinking Podcast. The podcast launched around the time I began hacking full-time, and I consider it my companion. It is required listening for bug bounty hunters, but I recommend it to anyone involved in cyber security—especially if you care about the offensive perspective (and you should)….

Read More Exacerbating Cross-Site Scripting: The Iframe Sandwich