• Services
  • Use Cases
  • Shield Up!
  • Knowledge

Knowledge

Posted on 8 Oct at 5:16 pm

Normalization Techniques Checklist- Base

Signature
3 months ago
Normalization is the preprocessing step performed by Web Application Firewalls (WAFs) to decode and transform incoming HTTP requests before applying security logic like signature inspection or rule-based checks. Attackers often…

Unified Exploit Classification Matrix

Signature
3 months ago
Entity AV Type Risk Detection Type Example Param Value SQLi Specific Signature id=1' or '1'='1 matches CVE signature Header Value RFI General Meta Characters User-Agent: php://input with path traversal marker…

Web Exploits (CAV – Common Attack Vectors)

WAF Scanning Strategy
3 months ago
Injection Attacks SQL Injection (SQLi) OS Command Injection (RCE) XML External Entity (XXE) Server-Side Template Injection (SSTI) LDAP Injection Expression Language Injection (EL Injection) Cross-Site Attacks Cross-Site Scripting (XSS) –…

WAF Scanning Strategy – Finding the Right Balance

WAF Scanning Strategy
4 months ago
Before diving into scan frequency or cost, it’s important to understand the strategic role of WAF scanning.Scanning is about validating the actual protection level of your WAF. Too little scanning…

Understanding WAF Scoring & Security Exposure

WAF scan value
3 months ago
What is WAF Scoring? To truly understand your web application’s defense posture, you need to evaluate the WAF itself — not just the app. WAF scoring does exactly that. WAF…

WAF Assessment Types

WAF Scanning Strategy
7 days ago
Security Controls Assessment (SCA) Purpose: Evaluate WAF’s ability to detect and mitigate known attack techniques.Tests Include: Signature effectiveness (XSS, SQLi, RCE, etc.) Custom payload detection Evasion technique handling Entity-level protection…

Entities (E1–E4)

WAF Technology
3 months ago
Code Name Focus Used In E1 Request Input Entities User input, payload Signatures, Restrictions E2 Source & Frequency IP, Geo, Sessions, RPS Anomalies, Rate Limiting E3 Protocol & RFC Behavior…

WAF landscape review 2026 oct

Uncategorized
1 week ago

D1. Signatures – Exploit Detection Based on Patterns and Payloads

Signature
3 months ago
D1. Signatures – Exploit Detection Based on Patterns and Payloads ID Name Description / Sub-elements S1 RCE AV Remote Command Execution detection via signature matching. S2 SQLi SQL Injection detection.…

Signature / Attack signature / Pattern matching

Signature
3 months ago
Pattern matching is a fundamental concept in computer science involving checking a sequence of tokens or data against a defined pattern, and potentially extracting data from it. It’s a more…
Previous Post
Shiled UP ! concepts

Recent Posts

  • WAF Assessment Types October 8, 2026
  • Shiled UP ! concepts October 8, 2026
  • WAF landscape review 2026 oct October 8, 2026
  • The Three Main Components: the planes July 27, 2026
  • Normalization Techniques Checklist- Base July 16, 2026

Categories

  • Signature (5)
  • Uncategorized (2)
  • WAF scan value (1)
  • WAF Scanning Strategy (3)
  • WAF Technology (2)

Links:

  • Company
  • Contact
  • FAQ Page
  • Assessment Request
  • Terms of Use (TOU)
  • Privacy Policy

Social

Facebook
YouTube
X
GitHub
Instagram
LinkedIn

Contacts

info@wafscan.com
What’s up: @WAF.SCAN
London UK

WAFScan © 2026   |   Part of Hacktica – Security Evaluation

This website uses cookies to improve your experience. If you continue to use this site, you agree with it.