Skip to content

WAF Bypass Workshop

Introduction
What is a WAF?
1. Alternative Syntax
1. Alternative Syntax
- Alternative Syntax Material
- Alternative Syntax Lab
2. Encoding
2. Encoding
- Encoding Material
- Encoding Lab Encoding Lab
  Table of contents
  - Launching the instance
3. SQL Syntax
3. SQL Syntax
- SQL Syntax Material
- SQL Syntax Lab
4. Switching Protocol
4. Switching Protocol
- Switching Protocol Material
- Switching Protocol Lab
5. Request Smuggling
5. Request Smuggling
- Request Smuggling Material
- Request Smuggling Lab
Conclusion

Encoding Lab

Launching the instance

$ cd 03-sqli
$ docker-compose up

Open http://localhost:2222 in a browser to confirm that everything is running.

Live instance (only for Hackfest)

Can you find the XSS for all 3 forms?