BIG-IP AWAF Demo 01 - Create Simple App Security Policies with F5 BIG-IP Adv WAF (formerly ASM)

The purpose of this demo is to show how simple it is to use BIG-IP Advanced WAF to create an application security policy that will block the most dangerous OWASP attacks. In this demo we will:
1. Show a couple of application layer attacks (SQL injection and cross-site scripting).
2. Create a BIG-IP Advanced WAF security policy for the DVWA web application using Rapid Deployment.
3. Attempt the same application layer attacks again, all of which will be blocked.
4. Examine the BIG-IP Advanced WAF event log to view how AWAF blocked the malicious requests.

[hardiameen]

can you share those commands, texts cannot be read from the screen due to low quality of the recorded file.
while this is my beleving that this version of dvwa has been modified by f5 expertes, this number of users account is not available from default version dvwa image.
hope someone from f5 read those massages and reply back to us!

[vijaycisco]

how we can simulate this attack over simulation on gns3 tool. is it possible to load this DVWA web application behind F5...at any of servers. If it is help how to do it.

[douniameftah]

can you give us the document who contains the attacks?

[purplemonkeydishwasher]

Could you have not got a real human to do the overview! urgh