AI-Powered Web Application Firewall - REST API Documentation

Back to Home

Home

Base URL

https://restapiwaf.leagueofcoders.app

Authentication

No authentication is required for testing purposes.

Endpoints

{
    "data": {
        "field1": "value1",
        "field2": "value2",
        "fieldN": "valueN"  // Any number of simple key-value pairs
    }
}

curl -X POST https://restapiwaf.leagueofcoders.app/predict \
  -H "Content-Type: application/json" \
  -d '{
        "data": {
            "name": "John",
            "email": "test@test.com",
            "age": "47",
            "occupation": "engineer",
            "city": "New York",
            "isActive": true
            }
        }'

"malicious"  or "non-malicious"

https://restapiwaf.leagueofcoders.app/predict?param1=hello&param2=world&param3=1234&param4=5678

"malicious"  or "non-malicious"

Field Guidelines

• Fields are completely flexible and dynamic
• All fields are optional
• You can include any number of fields or parameters
• Field or parameters names can be any valid string
• Each field must be a simple key-value pair

Allowed value types:

• Strings
• Numbers
• Booleans
• null

Example Valid Field Types

{
    "data": {
        "string_field": "text value",
        "number_field": 42,
        "boolean_field": true,
        "null_field": null
    }
}

Response Description

Error Responses

Error Response Format

{
    "status": "error",
    "message": "Description of the error",
    "error_code": "ERROR_CODE"
}

WAF Test Guidelines

1. Sandbox your testing environment
2. Clear all data regularly from the testing environment
3. No sensitive or production data should be used
4. Service availability is not guaranteed

WAF Test Results CSV Download

All your test data would be logged as "logginginput_v36.csv" and you can download it to see how it performance.

1. WAF test log record - https://withwaf.leagueofcoders.app/logginginput_v36.csv
2. WAF Rest API test log record - https://restapiwaf.leagueofcoders.app/download_logs

Web Application Attack Vectors Test Results

1. Download the SQLi, XSS, SSRF, Command Injection, Directory Traversal and Local File Inclusion from Dropbox https://www.dropbox.com/scl/fo/f6r493yylu5p5osnenfme/AOhU6uObejrvH848NN2DU_Y?rlkey=uhdhx0sgqv4s4visesmkpefb2&st=pnagt45b&dl=0

Support

For testing-related questions, reach to me at www.linkedin.com/in/naiwah or email naiwah@loc.com.sg

Back to main page Home