News for hackers. Stuff that matters.

A comment on Abusing the PHP Query String Parser to Bypass IDS, IPS, and WAF. Parent comment

Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by nullwasamistake on Monday July 08, 2019 @05:31PM (#20386961)
WAF is brittle and breaks more than it fixes IMO. It's just regex against URL's in 99% of cases. If you think you need one, you need to fix the app code, there will be more vulnerabilities it doesn't block
[ Parent | on HN ]
Re:Abusing the PHP Query String Parser to Bypass IDS, IPS, a... by simlevesque on Tuesday July 09, 2019 @02:57PM (#20395369)
WAF provides a lot of other things, such as IP based filtering.
[ Parent | on HN ]