KB: 00001047

How to set mitigation for OS command Injection?

Problem Statement

The user wants to set the mitigation for the OS command injection attack.

DVWA Page

Solution

1. First log into the Haltdos management portal.

Stacks

2. Go to stack > WAF > listener > profile > profile settings > signatures

Signatures

3. Select all signature and update status as "Prod" status.

Signatures

4. Now, go to stack > WAF > listener > profile > profile settings.

Profile Settings

5. Set the operational settings to mitigation.

Operational Settings to Mitigation

In this way, user can set the mitigation for the OS command injection attack and mitigate the attack.

Blocking the attack - Showing Haltdos Block Page