WAF.NINJA

Nov 1, 2018 0

I monitor bots activity for a while and often see such behavior: * [SUCCESS] Robot comes...

Oct 15, 2018 0

ModSecurity [https://www.modsecurity.org/] is open-source WAF. It protects web applications with libinjection and...

May 28, 2018 0

When new exploit to popular CMS's vulnerability appears, same day someone will send it all...

Oct 9, 2017 0

It is sequel of previous article [https://waf.ninja/libinjection-fuzz-to-bypass/], where I was fuzzing MariaDB...

Sep 24, 2017 0

libinjection is a library that parses parameter value to SQL elements (tokens) and check if...

Sep 22, 2017 0

Apache Struts 2 [https://en.wikipedia.org/wiki/Apache_Struts_2] is used as framework...

Sep 18, 2017 0

Cross-Site Scripting (XSS) vulnerabilities are divided into three types: * Reflected: when payload is injected from...

Sep 17, 2017 0

A while ago I had to make comparison of different Web Application Firewalls based on...

Sep 16, 2017 0

WAFNinja was presented by Khalil Bijjou at OWASP Stammtisch Frankfurt 2015 and PHDays 2016. This...

Hello! We have 0 resources for you...