Waf

Hello Fellow Hackers, today i want show you how to automate the discovering of origin IP of those sites behind CloudFlare, using Censys and CloudFlair tool. Why this ? Cloudflare is a global network designed to make everything you connect to the Internet secure, private, fast, and reliable. Cloudflare is…

Denial of Service attacks are commons in these times. In my company we receive from time to time such an attack. …

In last couple years we begun to see more bot attacks than before. A bot attack is a malicious attempt to disrupt the normal traffic of a targeted server, service or network by overwhelming the target or its surrounding infrastructure with a flood of Internet traffic. Because each bot is…

The following tutorial describes step-by-step how to deploy a Web Application Firewall based on ModSecurity, which has recently become available for Nginx. Note specifically that the procedure described here works for Nginx installed directly from the Ubuntu 20.04.4 LTS system repositories. …

This is also a not that easy box. Almost medium, I think. As the name suggests, there might be a weak WAF(Web Application Firewall). On opening the homepage, we see on the tab “XXE” is written which means XML External Entity vulnerability. Check the source code, nothing in the source…

TL:DR Find out how multiple vulnerabilities in WAPPLES WAF allow an attacker to run arbitrary commands on the device with root privileges as well as access the device with privileges via a backdoor account. Vulnerability Summary WAPPLES — “logical web application firewall” by Penta Security Systems Inc. founded in South Korea in…

Purpose When I was working on my last post on Traffic management using Istio 101, one thing which came into my mind was “Can you leverage Azure Application Gateway WAF (or GCP Armor in GCP) and other security features while not giving up on Istio service mesh features at the same…

OWASP Coraza v3 is reaching a stable point, and it’s time to show the people how to harness its power. In this tutorial, I’m going to teach you how to easily set up a production-ready environment for your web applications and APIs using OWASP Coraza WAF. About the stack We are going to…