Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Add support for akamai waf

See original GitHub issue

Akamai Waf:

https://www.paypal.com/mx/home?cds=ccds<<script>

modsecurity fingerprint based on the rules

/?phpsessid=asdfdasfadsads

https://github.com/SpiderLabs/owasp-modsecurity-crs/blob/f844b8510beb619ebad0d17d23a6dac08c1bd62d/util/regression-tests/tests/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION/943110.yaml

https://github.com/EnableSecurity/wafw00f/blob/d0f0a2144426516d9c4a8e377526d5269098ee8f/wafw00f/plugins/modsecurity.py#L17

if response.reason == 'ModSecurity Action' and response.status == 403:

Issue Analytics

State:
Created 4 years ago
Reactions:1
Comments:8 (2 by maintainers)

Top GitHub Comments

1reaction

0xInfectioncommented, Aug 12, 2020

No problem mate, happens to the best of us. Feel free to ping if you run into further problems. 😉

0reactions

durakicommented, Aug 12, 2020

Ah crap! Forget it. Just did history | grep wafw00f and saw I passed a wrong DNS. Sorry guys, must be lack of caffeine.

Top Results From Across the Web

Web Application Firewall - Akamai TechDocs

Enter the WAF Configuration File, Specifies a file containing details about your firewall configuration, for example: "firewallConfiguration": { "configId" : 1, ...

Web Application Protector - App and API Protector - Akamai

Read how Akamai Web Application Protector is designed to meet the needs of enterprises to protect web assets from web application and DDoS...

How to add an exception to a WAF rule? - Akamai Community

This article explains the procedure to add exception for WAF rules, such that WAF does not inspect.

How to add an exception to the Web Application Protector (WAP)

I need to add exception to some of the traffic, the only exception configuration I found is here https://community.akamai.com/customers/s/ ...

Akamai Blog | How to Get Started With Application Security

Our Developer Advocacy team is here to walk you through the process so you can achieve Infrastructure as Code — or, as we...