WAF绕过安全狗绕过1.绕过思路：对文件的内容，数据。数据包进行处理。关键点在这里Content-Disposition
orm-data;name=file;filename=ian.php将form-data;修改为~form-data;2.通过替换大小写来进行绕过Content-Disposition
orm-data;name=file;filename=yjh.phpContent-Type:application/octet-stream将Content-Disposition修改为content-Disposition将form-data修改为Form-data将Content-Type修改为content-Type3.通过删减空格来进行绕过Content-Disposition
orm-data;name=file;filename=yjh.phpContent-Type:application/octet-stream将Content-Disposition
orm-data冒号后面增加或减少一个空格将form-data;name=file;分号后面增加或减少一个空格将Content-Type:application/octet-stream冒号后面增加一个空格4.通过字符串拼接绕过看Content-Disposition
orm-data;name=file;filename=yjh3.php将form-data修改为f+orm-data将from-data修改为form-d+ata5.双文件上传绕过formaction=
