Other nomination
{JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF
Appending JSON operators such as @> to a SQL injection payload keeps the statement valid to the database while the firewall's SQL parser, which had no JSON support, stops recognising it as an attack. The payload passes inspection and reaches the backend, a generic bypass of Palo Alto, AWS, Cloudflare, F5 and Imperva, now automated in SQLMap.
Record
- Researcher
- Noam Moshe
- Published by
- Claroty
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Noam Moshe, first published at the original source. Preserved copies are kept so the citation survives its host.