I want to know if the owasp core rule set are the rules that Google Cloud Armor use? If yes how can i test my payloads so it will be compliant to Google Cloud Armor WAF rules? Any available tools that i can use for testing?
1 Answers
Google Cloud Armor uses various rule sets, including OWASP ModSecurity Core Rule Set (CRS).
If you want to test payloads against CRS, try our sandbox service: https://coreruleset.org/docs/development/sandbox/
Related