http://blog.mazinahmed.net/2015/09/evading-all-web-application-firewalls.html
which
is related to the proposed "control enumeration framework" from
http://lists.webappsec.org/pipermail/wasc-wafec_lists.webappsec.org/2015-July/000307.html
--
Regards,
Christian Heinrich
http://cmlh.id.au/contact