CVE-2022-24112 Apache APISIX: Emulation and Detection

Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!

In this section, we begin with the first challenge: emulating an attack against a vulnerable instance of Apache APISIX. The challenge consists of two hands-on exercises, which include initial discovery and exploitation of the vulnerability.

Armed with the knowledge of how to exploit the APISIX vulnerability, we're ready to proceed with the next challenge: detecting exploitation attempts. The challenge consists of a hands-on exercise, where we leverage Apache's advanced logging and security capabilities to detect real-time attacks

With the knowledge of how to perform and detect attacks against Apache APISIX, we are now ready to progress to the next challenge, where we leverage Apache to prevent attacks against vulnerable APISIX instances. This challenge consists of a hands-on exercise, whereby the mod-security module will be configured to prevent real-time attacks

Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.