Top 10 winner
Request encoding to bypass web application firewalls
A request body and query string can be sent in an unusual charset such as the EBCDIC code page IBM037, declared in the Content-Type header, which signature-based web application firewalls do not decode. The application server decodes it normally, so an SQL injection or similar payload passes the filter and reaches the application intact.
Record
- Researcher
- Soroush Dalili
- Published by
- NCC Group
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Soroush Dalili, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .