tarcisio-marinho / A-Deep-Learning-Approach-to-Web-Application-Firewall

Avoid malicious payloads in your webapp with machine learning!
https://payload.tarcisiomarinho.io
18 stars 7 forks source link

Missing payloads #2

Open kosletr opened 4 years ago

kosletr commented 4 years ago

Amazing job and really useful app, but for some reason, although: "" is classified properly as xss, the same payload without spaces: "" isn't.

Could please provide info on how to run api on localhost. Thanks!

tarcisio-marinho commented 4 years ago

Hi @kosletr The API uses fasttext to recognize the attack, I'll update it to use an new and better model I'm working on, based on BERT language model. It has higher accuracy. Running local, you need to setup the environment with python and node. Run python: python knowledge/main.py Run transpiler: tscon the solution /src Run node server: node src/app.ts