http://blog.mazinahmed.net/2015/09/evading-all-web-application-firewalls.html which is related to the proposed "control enumeration framework" from http://lists.webappsec.org/pipermail/wasc-wafec_lists.webappsec.org/2015-July/000307.html -- Regards, Christian Heinrich http://cmlh.id.au/contact