Rule 1️⃣ : "In WAF we (should not) trust"

Your WAF is doing its best. That's just not enough 😮‍💨
A deep dive into Web Application Firewall bypass techniques, discovering why blocked ⛔ doesn't always mean safe.

https://blog.quarkslab.com/in-waf-we-should-not-trust.html