Skip to main content

Module encoding

Module encoding 

Source
Expand description

Payload encoding strategies — transform payloads to bypass WAF keyword detection.

Each strategy changes HOW the payload looks without changing WHAT it does. The server decodes the payload back to its original form, but the WAF fails to match it against its rules.

§Module structure

ModuleResponsibility
strategyStrategy enum and encode() dispatcher
urlURL, double-URL, and triple-URL encoding
unicodeUnicode \uXXXX, %uXXXX, JSON, and HTML entity encoding
keywordCase alternation, whitespace/comment insertion, SQL obfuscation
structuralNull byte, overlong UTF-8, chunked split, HPP, compression
layeredMulti-strategy chaining and aggressiveness scoring

Re-exports§

pub use layered::aggressiveness;
pub use layered::encode_layered;
pub use layered::layered_combinations;
pub use strategy::Strategy;
pub use strategy::all_strategies;
pub use strategy::encode;

Modules§

keyword
Keyword manipulation strategies (case, whitespace, comments). Keyword manipulation encoding strategies.
layered
Multi-strategy layering and aggressiveness scoring. Multi-strategy encoding chains and aggressiveness scoring.
strategy
Strategy enum and encode() dispatcher. Strategy enum and main encode() dispatcher.
structural
Structural encoding strategies (null byte, overlong UTF-8, chunked, HPP). Structural encoding strategies — byte-level and framing manipulations.
unicode
Unicode and HTML entity encoding strategies. Unicode and HTML entity encoding strategies.
url
URL-based encoding strategies (single, double, triple). URL-based encoding strategies.