LoginSignup
2
1

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 1 year has passed since last update.

@testnin2(Shinobu Yasuda)

WAFイベントの簡単なテスト方法(URLで指定）

Last updated at Posted at 2022-03-12

実行方法

where username='1' OR '1' = '1' AND Password='1' OR '1' = '1' というSQL Injectionを想定したリクエストを投げる例として
http://<FQDN>/?username=1'%20or%20'1'%20=%20'1&password=1'%20or%20'1'%20=%20'1
を実行すれば良い。

IBM Cloud Internet Service(CIS)での実行例

  1. 該当のURLを実行するとブロックされた。
    image.png
  2. WAFのイベントが生成された。
    image.png
  3. 確かに対象のWAFイベントはSQL Injectionである。
    image.png
2
1
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
Sign upLogin
2
1

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?