Refactoring WAF scripts

2025-12-06 12:41:30 +00:00 · 2013-02-26 15:54:50 +01:00
parent e5835dc74f
commit be50192d8d
13 changed files with 115 additions and 45 deletions
--- a/lib/core/settings.py
+++ b/lib/core/settings.py
@@ -384,6 +384,7 @@ IDS_WAF_CHECK_PAYLOAD = "AND 1=1 UNION ALL SELECT 1,2,3,table_name FROM informat

 # Vectors used for provoking specific WAF/IDS/IPS behavior(s)
 WAF_ATTACK_VECTORS = (
+                        "",  # NIL
                        "search=<script>alert(1)</script>",
                        "file=../../../../etc/passwd",
                        "q=<invalid>foobar",