Vulnerabilities in web applications are a target and can be attributed to many problems and can damage a company. This means poor input validation, session management, insecure, system settings configured incorrectly and flaws in operating systems and server software web. It is noteworthy that humans err by nature; in fact, writing secure code is the most effective method to minimize vulnerabilities in web applications! However, we are subject to error while developing, writing secure code is much easier said than done and involves several key issues.

In this whitepaper, you'll read about the following topics:

• Fingerprinting a WAF
• Cookie Values
• HTTP Response
• Automatic Fingerprinting With Wafw00f
• Bypassing Blacklists
• Approach for Bypassing Blacklists – The Cheat Sheet
• Initial Tests
• Entity Decoding
• Encoding
• Context Based Filtering
• Browser Bugs
• Bypasses