Raptor OpenSource Web application firewall and bypass Techniques

[r41d3n 0]

I write this tool to test some payloads and to get deep understand about how  bypass WAF

 

 Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal.

 https://github.com/CoolerVoid/raptor_waf

 

tool to help bypass

 https://github.com/CoolerVoid/payloadmask

 

cheers

[externalentity 0]

Did you take this in account .https://blog.qualys.com/wp-content/uploads/2012/07/Protocol-Level Evasion of Web Application Firewalls v1.1 (18 July 2012).pdf

bit dated however I have incorporated quite a few of the techniques there's also a good paper out this year from blackhat on waf evasion I forgot it's name but it also has a github. HTTP Parameter polution is also a good vuln to smuggle shady payloads in. I haven't really tried array injection yet but I mean a lot of php sites are vulnerable to it.

[tekio 118]

Good programming will stop ether dead in their tracks....  Repeat after me, "On the Internet any user supplied data is rogue, unless proven otherwise....".

 

I think this is a false sense of security and measures need be taken at the web app dev. level or NOTHING can stop SQLI or any exploits.

 

 

EDIT: but with that said, I've seen some pretty 1337 stuff done with null terminated strings in PHP. Seen  people exploit PHP functions (regEx engines, stored procedures) exploiting the underlying C code. 

Edited August 27, 2016 by tekio