2.1.5. Lab 5 – HTTP Payload Manipulation

Collect an HTTP payload, change it, and release it to the client. As in the previous lab replace Damn with Darn, or get creative.

Important

  • Estimated completion time: 20 minutes

  1. Open Chrome Browser

  2. Enter https://bigip1 into the address bar and hit Enter

  3. Login with username: admin password: admin

  4. Click Local Traffic -> iRules -> iRules List

  5. Click Create button

  6. Enter Name of HTTP_Payload_iRule

  7. Enter Your Code

  8. Click Finished

  9. Click Local Traffic -> Virtual Servers -> Virtual Server List

  10. Click on https_irules_vip

  11. Click on the Resources tab

  12. Click Manage button for the iRules section

    ../../_images/iRulesManage.png

  13. What should you do here? (Hint: Remove Stream_iRule)

  14. Click the Finished button

  15. Open the Firefox browser

  16. Enter https://dvwa.f5lab.com and ensure you get there and it is HTTPS

Hint

Basic Hint

if you need a hint here is some example code:

Link to DevCentral: https://devcentral.f5.com/wiki/iRules.HTTP__collect.ashx

Link to DevCentral: https://devcentral.f5.com/wiki/iRules.HTTP__release.ashx

If you are really stuck, here is what we are looking for:

  1. When HTTP_Request comes in
  2. Second change the version of HTTP and disable compression for the request
  3. When HTTP_RESPONSE comes back
  4. Next we need to collect some HTTP::collect some data.
  5. Now when we get HTTP_RESPONSE_DATA
  6. Now we will set some find and replace strings.
  7. Finally we will perform a regsub on the payload and replace with new text.
  8. Now you should have enough to understand and the majority of code to create the iRule. If not here is the complete iRule.
Previous Next