Fuzzing and Bypassing the AWS WAF

Originally published by Sysdig. Written by Daniele Linguaglossa. The Sysdig Threat Research Team discovered techniques that allowed the AWS WAF to be bypassed using a specialized DOM event. Web Application Firewalls (WAFs) serve as the first line of defense for your web applications, acting as a filter between your application and incoming web traffic to protect against unauthorized or malicious activity.In this blog post, we will analyze one of the most commonly used Web Application Firewal...

application applications aws aws waf bypassing defense dom event filter firewalls fuzzing line research sysdig sysdig threat research team team techniques threat threat research traffic waf web web application web application firewalls web applications web traffic written