WAF Rule & Normalization Audit (offensive-waf-bypass)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Web Application Firewall (WAF) rule evaluation and parser discrepancy testing covering character encoding normalization, multipart/chunked parsing differences, inspection body size limits, and defense-in-depth verification ensuring application-layer fixes do not rely solely on edge WAF rules.

Operational Workflow