https://insinuator.net/tags/tsakwaf/ Recent content in Tsakwaf on Insinuator.net - Bold Statements Hugo en-us Sun, 11 Sep 2011 00:00:00 +0000 https://insinuator.net/2011/09/tsakwaf-0.9.1-released/ Sun, 11 Sep 2011 00:00:00 +0000 https://insinuator.net/2011/09/tsakwaf-0.9.1-released/ <p>A few weeks ago, I released version 0.9 of a web application testing tool called tsakwaf (The Swiss Army Knife for Web Application Firewalls) together with an ERNW <a href="http://www.ernw.de/content/e15/e28/index_ger.html" title="Newsletter">Newsletter</a> about <a href="http://www.insinuator.net/2011/06/the-5-myths-of-web-application-firewalls/" title="web application firewalls">web application firewalls</a>. tsakwaf is based on perl and supports fingerprinting of some supported WAFs and code generation methods to circumvent filter rules. Today, version 0.9.1 will be released, which adds SSL support for the WAF fingerprinting function (Big thanks to Simon Rich!) and a bug fix regarding the detection of WAF reactions which may lead to false positives. Additionally, I’m happy to announce that at least one talk at next year’s <a href="http://www.troopers.de" title="Troopers">Troopers</a> will cover attacks against WAFs (like this one from the 2009 <a href="http://troopers09.org/content/e644/e649/TROOPERS09_gauci_henrique_web_application_firewalls.pdf" title="edition">edition</a>) . So mark your calendar – Troopers12 will happen on 21^(st) and 22^(nd) March 2012, with the usual workshops before the conference and the round table sessions the day after – and enjoy playing with tsakwaf!</p>