https://appseceurope2018a.sched.com/speaker/soroush_dalili.1y2dtv3m
waf-bypass-techniques-using-http-standard-and-web-servers-behavior
一个过waf的研究牛人
原文:http://blog.51cto.com/simeon/2139830