Full Disclosure mailing list archives
Web Application Firewall bypass - part 3
From: Red Timmy Security <publications () redtimmy com>
Date: Sun, 07 Jun 2020 20:16:46 +0200
Hiwe have published the part 3 of "How to hack a company by circumventing its WAF for fun and profit". We basically show how the usage of a single character can be abused to skip common checks performed at layer 7 by network devices and security appliances.
Also another case where F5 Big-IP WAF is bypassed by means of SSRF is shown.
Full story here: https://www.redtimmy.com/web-application-hacking/how-to-hack-a-company-by-circumventing-its-waf-for-fun-and-profit-part-3/ Regards RedTimmy Security _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- Web Application Firewall bypass - part 3 Red Timmy Security (Jun 09)