One search of “xss” will lead you to hundreds of payloads and bypasses.

How does XSS WAF bypassing work?

I was intrigued and here I’m dumping everything I uncovered while reverse engineering WAF bypasses.