Web Application Firewall Bypassing - DefCamp - 2016

Web Application Firewall Bypassing - DefCamp - 2016

Explore web application firewall (WAF) bypassing techniques in this DefCamp 2016 conference talk. Learn about security models, input validation, and various bypassing methods used by penetration testers. Discover approaches for disabling WAFs, conducting reconnaissance, attacking pre-processors, exploiting impedance mismatches, and circumventing rule sets. Gain insights into identifying vulnerabilities that WAFs may not detect, such as broken authentication mechanisms and privilege escalation. Understand the importance of post-pentest actions, including informing clients about vulnerabilities and recommending both immediate virtual patching and long-term fixes for root causes.