WAF Bypass
Named by 3 kept items in this workspace.
2 items name it under techniques and 1 under classification.key entities.
Search every workspace for WAF Bypass. It matches the name as written, so it can find other things that share it.
The items that name it 3
The challenge task: evade Cloudflare's default WAF rules for CVE-2026-109618 and CVE-2026-109619; awards require a materially distinct bypass mechanism
Header injection (X-Forwarded-For, X-Original-URL), encoding bypass, HTTP method override, path manipulation, content-type manipulation, protocol smuggling (CL.TE, TE.CL)
All techniques in this workspace.