Web Application Firewall (WAF) Evasion Techniques

It’s not so rare to discover a Remote Command Execution vulnerability in a web application, and it is confirmed by the “OWASP Top 10 application security risk 2017” that puts “Injection” at the first position: Injection flaws, such as SQL, NoSQL, OS, and LDAP injection, occur when untrusted data is sent to an interpreter as part of a command or query. The attacker’s hostile data can trick the inte