WAF Bypass Techniques + Tools Here are some powerful tools and methods to help you bypass Web Application Firewalls during bug hunting: 🔥 Tools: - wafw00f — WAF fingerprinting tool → https://github.com/EnableSecurity/wafw00f - bypass-firewalls-by-DNS-history — Discover origin IPs via old DNS records → https://github.com/vincentcox/bypass-firewalls-by-DNS-history - CloudFail — Excellent for bypassing Cloudflare …

Channel
Offensive LSO
@BackupLSO
On this record: Topic · Growth · Engagement · Posts · Posts recorded as deleted · Citations · Handles named that no longer answer · Cite this entry
3,267subscribers
+136 since we began measuring on 6 August 2026
Risers and fallers across the register · movement among entries of 3,162–10,000.
Register entry
| Telegram ID | -1002333840978 |
|---|---|
| Type | Channel |
| Username | @BackupLSO |
| Created | Between 1 September 2024 and 31 March 2025 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 6 August 2026 |
| Last confirmed live | 11 November 2026 |
| Measurements held | 24 |
| Confirmed unchanged | 1 time, most recently 11 November 2026 |
| On Telegram | t.me/BackupLSO |
Topic
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 14 September 2026 and assigned it the closest of 31 fixed categories, at 100% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and the other topics.
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 11 Nov 2026, 02:00 | 3,267 | +5 |
| 4 Nov 2026, 00:50 | 3,262 | +4 |
| 1 Nov 2026, 08:15 | 3,258 | -3 |
| 29 Oct 2026, 16:09 | 3,261 | -5 |
| 26 Oct 2026, 22:55 | 3,266 | -1 |
| 24 Oct 2026, 04:48 | 3,267 | +3 |
| 17 Oct 2026, 22:47 | 3,264 | +5 |
| 15 Oct 2026, 02:39 | 3,259 | -3 |
| 11 Oct 2026, 16:16 | 3,262 | -6 |
| 5 Oct 2026, 01:37 | 3,268 | -15 |
| 17 Sept 2026, 18:15 | 3,283 | +21 |
| 13 Sept 2026, 13:15 | 3,262 | +3 |
| 10 Sept 2026, 01:21 | 3,259 | +6 |
| 4 Sept 2026, 19:20 | 3,253 | +4 |
| 1 Sept 2026, 06:56 | 3,249 | +10 |
| 29 Aug 2026, 15:26 | 3,239 | +17 |
| 26 Aug 2026, 05:24 | 3,222 | +20 |
| 23 Aug 2026, 13:42 | 3,202 | +12 |
| 20 Aug 2026, 04:23 | 3,190 | +8 |
| 16 Aug 2026, 19:38 | 3,182 | first reading |
Engagement
20 posts held, back to 14 July 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 4 pages of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 7 August 2026. An engagement rate over an empty window would be a number about nothing.
Recent posts
⚠️HackLabs is a collection of hands-on vulnerable labs designed to practice web exploitation, privilege escalation, Active Directory attacks, and general pentesting techniques in a safe environment. ⚠️ For educational and authorized testing only. 🔗 https://github.com/afsh4ck/HackLabs ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
Roadmap for Cyber Security & Ai Security https://t.me/+390M0bSj10BiMDJk Membership is only for 100 people. ⭕ For 47
📌Bug Bounty Tip: Finding Confidential Documents Fast ✅Admins often leave these unredacted files online by mistake, making them a high-medium severity finding for bug bounty programs. ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
CloudRip Fast Cloudflare bypass scanner. A tool that helps you find the real IP addresses hiding behind Cloudflare by checking subdomains. https://github.com/moscovium-mc/CloudRip ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
Hi everyone, I’m currently developing an AI-powered chatbot on Telegram focused on the field of Cyber Security. If you’re interested in investing in this project or would like to learn more, feel free to reach out to me. Looking forward to connecting. @RedTeamKitBot
Claude-BugHunter — Turn Claude Code into a Senior Bug Hunter & Red Team Operator 🤖💀 A powerful skill bundle built for bug bounty hunters and external red teams. • 51 specialized security skills • 15 slash commands for automated workflows • 681 real disclosed report patterns • Coverage across Web, API, Cloud, OAuth, SAML, GraphQL, SSRF, IDOR, XSS, RCE & more • Enterprise attack paths for M365, Okta, VPNs, SharePoint…
😈Turn your Burp Suite findings into clean, professional cards, ready for reports, bug bounty submissions, and social sharing. 🚨https://github.com/JFOZ1010/repshot ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
2FA Bypass https://github.com/0xmaximus/Galaxy-Bugbounty-Checklist/tree/main/2FA%20bypass ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
⚠️403 bypass tools for bug bounty hunters: bypass-403 → https://github.com/iamj0ker/bypass-403 nomore403 → https://github.com/devploit/nomore403 4-ZERO-3 → https://github.com/Dheerajmadhukar/4-ZERO-3 byp4xx → https://github.com/lobuhi/byp4xx dontgo403 → https://github.com/mbrg/dontgo403 ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
🔥CVE-2026-41940 cPanel/WHM Authentication Bypass - Detection Artifact Generator 🚨https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
Bug Bounty Reconnaissance-Phase 1 ❤ Share & Support Us 📰 @BackupLSO 📚 @LibrarySecOfficial
Showing the 12 most recent of 20 posts we hold for @BackupLSO. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Posts recorded as deleted after publishing
We recorded 1 post on @BackupLSO as deleted — posts this register held that were missing from the channel’s public page on two separate reads, taken from different network addresses at least an hour apart.
A deletion is not wrongdoing. This register can see that a post it held is no longer on the channel’s public page, and when — not why. Expired ad placements, reposts, rotating links and corrections all look the same. This is a count of recorded detections, not an exact total: it misses deletions we could not see, because only a post we held and later re-read inside the page can be seen to go, and it may include a small number of wrong records. How this is measured.
- First seen missing
- 7 August 2026
- Most recent seen missing
- 7 August 2026
- Median time before seen missing
- 21 hours
- Seen missing in the last 30 days
- 0
Forward network
Republishes
Channels on the register whose posts this channel has forwarded.
Built only from forwarded posts we have actually read, on both sides. Coverage is early and deliberately incomplete: a missing link means we have not read the post that would prove it, never that the relationship does not exist. Counts are distinct forwarded posts observed, so they only ever go up as we read more.
Mentions
Named by 92 registered channels — every channel on the register whose own posts have named this one, by its current username or any other username it currently holds, merged from two separately captured readings of the same fact so a namer caught by only one of them is not missed and a namer both caught is not counted twice. A username this channel has since dropped is not matched — that handle may belong to someone else now, and crediting today’s namer to yesterday’s owner would misattribute it. The 24 listed below are the most frequent namers; the rest are counted above but not each listed.
Named by
Channels on the register whose posts name this channel's handle.
@sacafeketab · 28,62110 postsپروژه ادمینی | دورکاری | VIP
@admiinprojeh · 14,9329 postsطراحی گرافیک /ساخت تصاویر با ai/ابزار ادیت / بارکاو دیزاینر
@barkav_designer · 20,9169 postsBook_tips
@book_tips · 22,2829 posts🔍دنبال کار🔎
@donbal_kar · 16,1349 postsپروژه استخدامی | کارفرما | VIP
@FREELANCERVIIP · 20,5809 postsهوش مصنوعی | حسین صادقی
@hoseinsadeghi4013 · 13,6289 postsگرگ وال استریت | پولسازی
@wolfofws · 18,5219 posts𝘼𝙁𝙂 𝙋𝙇𝙐𝙎 | ܣܭߺࡉ ߊܩࡅ࣪ߺࡅ࡙ߺࡅߺ߳ࡉ
@Afg_Plus · 9,5268 postsمهندسی کامپیوتر
@devloper98 · 12,6228 postsدورنمای اقتصاد
@econviews · 18,8378 postsآموزش الایت موشن/اسماعیل مهرجوش
@esmailedit · 12,1768 posts𝐈𝐌𝐎𝐕𝐈𝐄|آیمووی
@Imovie_txt · 14,3308 posts• ɪɴꜰᴏ ᴅɪɢɪᴛᴀʟ •
@info_digital66 · 9,7278 postsVPN || PROXY
@iran_vpn66 · 7,4188 postsخودآموزهای زبان انگلیسی
@khodAmooz_zban · 18,5728 postsاستخدام ادمین | نیلای
@NilayAdmin · 12,6958 postsیادگیری انگلیسی در خانه
@OnlineConversationSchool · 17,3438 postsفیلم و داستان انگلیسی
@OnlineConversationSchool_Film · 21,5058 postsگرامر را آسان یاد بگیرید
@SimpleGrammar · 15,7188 postsهوش مصنوعی| علم داده
@AILearnCamp · 21,1537 postsورزش در خانه
@gymmhomee · 14,1417 postsیادگیری آسان زبان انگلیسی
@OnlineEnglishschool · 13,0857 postsstar source • استار سورس
@Star_Sourcee · 25,9347 posts
Names
Channels on the register whose handles appear in this channel's posts.
@LibrarySecOfficial · 9,47618 postsپروژه ادمینی | دورکاری | VIP
@admiinprojeh · 14,9321 post𝑨𝒊𝑴𝒆𝒏𝒕𝒐𝒓 | برنامه نویسی و هوش مصنوعی
@Ai_teleegram · 3,6841 postهوش مصنوعی| علم داده
@AILearnCamp · 21,1531 postامیری هک|| AMIRI_HACK
@AMIRIHACK · 18,6751 postطراحی گرافیک /ساخت تصاویر با ai/ابزار ادیت / بارکاو دیزاینر
@barkav_designer · 20,9161 postدستورات ترموکس - ᴛᴇʀᴍᴜx
@Bia2Termux · 9,3211 post🌧⚡️بـًٍۋ℘يٰٰ بـٰٖـــٍٰـارٰٖان⚡️🌧
@bouyebaran · 5,6931 postکانفیگ v2ray و Npv
@chanel_v2ray_2 · 4,6691 postکوروش گرافیک|CyrusGraphic
@Cyrus_Graphic · 9,8241 postمهندسی کامپیوتر
@devloper98 · 12,6221 postابزارها و کاربردهای هوش مصنوعی
@DocPython · 4,9561 post🔍دنبال کار🔎
@donbal_kar · 16,1341 postEnglishtub | انگلیسی آسان با استایل
@Englishtub · 3,8841 postآموزش الایت موشن/اسماعیل مهرجوش
@esmailedit · 12,1761 postᴩʀᴏxy ᴍᴛᴩʀᴏᴛᴏ
@FireProxy66 · 3,6471 post️فریلنسر گلد پروژه
@goldenporojehh · 12,0661 post𝐈𝐌𝐎𝐕𝐈𝐄|آیمووی
@Imovie_txt · 14,3301 post𓆩 IPMan | آیپـیمَـن
@IPManTeam · 10,2011 postVPN || PROXY
@iran_vpn66 · 7,4181 postکاریابی ماجراجو | معرفی کارفرما | پروژه دانشجویی
@KARYABI_MAJARAJOO_W · 7,9301 postاستخدام ادمین | نیلای
@NilayAdmin · 12,6951 postپرامتوگرام
@peramtogram · 4,5361 postP.F.K Security
@PfkSecurity · 2,1071 post
A mention is a weaker signal than a forward and is counted separately for that reason — naming a channel is not republishing it, and a handle in a post body is easy to place deliberately. The post counts beside each row below are distinct posts in which the handle appeared, from posts we have read on both sides — the “Named by N registered channels” figure above is a different count, of distinct NAMING CHANNELS rather than posts, and is not the sum of the rows under it.
Handles this channel named that no longer answer
- Dead references
- 3
- handles named in this channel’s posts, vacant today
- Evidenced gone
- 3
- we ourselves saw one of these resolve, at some point
- Never seen alive
- 0
- vacant every time we have ever looked
@BackupLSO named 3 handles that resolve to nothing today. That is a fact about the reference, not necessarily a fact about the handle’s history — see the two groups below.
Most of these may never have existed as a live channel at all. A handle a channel names can be a typo, an aspirational name nobody registered, or a channel that was already gone before this one ever mentioned it. Unless a row below is marked evidenced, all we know is that it references a handle that is not a live channel today — not that anything “died”. How this is measured.
Evidenced gone
We ourselves saw each of these resolve to a real page at some point before it went vacant — a genuine, evidenced change, not an inference from absence.
named in 1 post, 8 August 2026 – 8 August 2026 · confirmed gone 14 October 2026 (two independent sightings — see how we confirm a dead handle)evidenced
named in 1 post, 8 August 2026 – 8 August 2026 · confirmed gone 14 October 2026 (two independent sightings — see how we confirm a dead handle)evidenced
named in 1 post, 8 August 2026 – 8 August 2026 · confirmed gone 17 October 2026 (two independent sightings — see how we confirm a dead handle)evidenced
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 11 November 2026 — this entry's latest reading, not the date you are reading this.
“Offensive LSO” (@BackupLSO), 3,267 subscribers as measured 11 November 2026. Telegram Register, tgregister.com/channel/BackupLSO.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.