How to test a website being protected by WAF?

Put <script>alert("123")</script> in the URL

E.g. www.abc.com/<script>alert("123")</script>

Different WAF have different block page like the following:

How to test a website being protected by WAF?

WAF block request - Attack Type "HTTP parser attack"

WAF block request - Attack Type "HTTP parser attack" Violations - "HTTP protocol compliance failedhe - check maximum header of numbers" header over 21 (Default value is 20, max value is 30)

Recommended Actions

 Log on to the BIG-IP ASM/AWAF Configuration utility (gui).

 Go to Security > Policy Building > Learning and Blocking Settings.

 Expand HTTP protocol compliance failed.

 Modify the Check maximum number of headers value to the required value for your application.

 Click Save.

 Click Apply Policy.

Reference:

https://my.f5.com/manage/s/article/K35241129

Increase "Check maximum number of headers" to 30 under Learning and Blocking settings screen for a policy.

https://cdn.f5.com/product/bugtracker/ID1051213.html

WAF block request - Attack Type "HTTP parser attack"

Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF (CVE-2022-22963 / CVE-2022-22965)

Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF | Citrix Blogs

 

Guidance for reducing Spring4Shell security vulnerability risk with Citrix WAF (CVE-2022-22963 / CVE-2022-22965)

Imperva Upgrade from 11.5 to 13

From v 11.5 to 13

1. V13 the NTLM support have compatibility issue with Windows Server 2012 R2 AD under HTTP Proxy Configuration (Workaround is change the “Authentication Policy” to “Basic”)
2. Collect all SSL certificate file and key (e.g. abc.com.crt and abc.com.key) before upgrade since some key will lost during the upgrade

Imperva Upgrade from 11.5 to 13