Abusing the PHP Query String Parser to Bypass IDS, IPS, and WAF

Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by simlevesque on Monday July 08, 2019 @04:08PM (#20386280)

WAF has it's purpose but it's clearly not a silver bullet. Nothing is.

[ Parent | on HN ]

Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by nullwasamistake on Monday July 08, 2019 @05:31PM (#20386961)

WAF is brittle and breaks more than it fixes IMO. It's just regex against URL's in 99% of cases. If you think you need one, you need to fix the app code, there will be more vulnerabilities it doesn't block

[ Parent | on HN ]

Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by simlevesque on Tuesday July 09, 2019 @02:57PM (#20395369)

WAF provides a lot of other things, such as IP based filtering.

[ Parent | on HN ]

Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by DJBunnies on Monday July 08, 2019 @04:49PM (#20386613)

If it's so easily circumvented I wonder if it's worth the costs.

[ Parent | on HN ]