Lab 2 - TestingΒΆ

All the previous tests and attacks can be done again against the LB that has only been deployed on the onprem environment and not on the F5 XC Global Network .

We have listed bellow a few tests that you can try out.

  1. WAF Protection

    https://$$ceArcadia$$/?a=%3Cscript%3Ealert(%27xss%27)

  2. Parameter inspection

    curl -H "Content-Type: application/json;charset=UTF-8" --data-raw "{\"email\":\"11223344\",\"password\":\"bitcoin\"}" http://arcadia-re-$$makeId$$.workshop-sa.emea.f5se.com/v1/login

  3. BOT Protection

    curl -H "Content-Type: application/json;charset=UTF-8" --data-raw "{\"email\":\"satoshi@bitcoin.com\",\"password\":\"bitcoin\"}" https://$$ceArcadia$$/v1/login