Tool released at Black Hat contains 150 ways to bypass Web application firewalls

However, there are various methods for sneaking malicious requests that violate these rules past WAFs by modifying certain parts of their headers or the paths of requested URLs. These are known as protocol-level evasion techniques, and WAFs are not properly equipped to deal with them at the moment because the techniques are not very well documented, Ristic said. The researcher tested the evasion t

[kdaiba]

akamai waf 使ってるところに試してみたいなぁ