Description:
Explore protocol-level evasion techniques for Web Application Firewalls (WAFs) in this Black Hat USA 2012 conference talk. Delve into the vulnerabilities of virtual patches and learn how attacks can become virtually invisible through lower-level processing manipulation. Discover lessons from a decade of WAF development, including a previously unknown flaw in ModSecurity. Gain insights into various evasion methods, their effectiveness against different tools, and how to counter them. Access a comprehensive catalogue of protocol-level evasion techniques and a complete testing suite released as part of this presentation.
Confessions of a WAF Developer - Protocol-Level Evasion of Web App Firewalls
Add to list
#Conference Talks
#Black Hat
#Programming
#Web Development
#Information Security (InfoSec)
#Cybersecurity
#Programming Languages
#PHP
#Web Security
#Web Application Firewalls
#ModSecurity