IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  WAF

    Posted 05/23/18 10:54 AM
    I was looking for a simple test to have one of the WAF rules fire
    Does anyone have any good examples of a sample

    ------------------------------
    Robert Wehrle
    ------------------------------


  • 2.  RE: WAF

    Posted 05/24/18 03:55 AM
    Hi Rob,

    You can try simple SQL Injection attacks in one of the parameters you are submitting in a HTML form or even a XSS attack. Both should get detected and trigger the WAF.

    Sample SQL Injection at it's simplest: ' || 1 = 1
    Sample simple XSS : '/><script>alert("hello")</script>

    ------------------------------
    Rohit Satyanarayana
    IBM
    Singapore
    ------------------------------



  • 3.  RE: WAF

    Posted 05/25/18 09:31 AM
    Thanks I will try it

    ------------------------------
    Robert Wehrle
    ------------------------------