multiple encoding attacks

Question

Hi;&nbsp;
When a hacker tries to do multiple encoding. i.e. encode once then encode the encoded then encode again, What is the depth of encoding times that the ASM can protect from please?&nbsp;
Kindly
Wasfi&nbsp;

mo_99289 · Accepted Answer

check out this SOL&nbsp;
SOL7929: Working with Evasion technique detected violations&nbsp;
https://support.f5.com/kb/en-us/solutions/public/7000/900/sol7929.html?sr=51580751&nbsp;
hope it could help.&nbsp;

wasfi_182818 · Answer

Hi ... The article is very useful but the maximum number of decoding attempts (I guess I may call it decoding attempts depth). This max number is 5, what if the hacker tries 6 encodings nested in each other.

Kindly
Wasfi

mo_99289 · Answer

when configure X time(X is 2-5), if after X times decoding, there are still encoded code found, "Evasion technique detected" will be detected.

wasfi_182818 · Answer

Thank you mo

Forum Discussion

multiple encoding attacks

4 Replies

Recent Discussions

I cannot activate the license on BIG-IP-NEXT

Issue with Capturing SYN-ACK Packets on F5 BigIP Virtual Server

[APM] URL stops working , location : /my.policy?ORG_URI=1f931c35

When POST request access policy is used, it is not forwarded to the server behind.

LB_FAILED test event

Related Content

The HTTP/2 CONTINUATION frame attack

ESRP Strategies: DNS Water Torture Attack

Juice jacking attack and State-funded attacks - April 15th - 21st - This Week in Security

Real Attack Stories: Bank Gets DDoS Attacked

CDK breach, Qilin Synnovis attack, Velvet Ant and Nobelium Threat Groups