2.1.1.5. Lab 5 - HTTP Payload Manipulation

Collect an HTTP payload, change it, and release it to the client. As in the previous lab replace Damn with Darn, or get creative. We arent going to use a stream profile this time we are using an HTTP::payload command instead.

Important

• Estimated completion time: 20 minutes

1. Open Chrome Browser

2. Enter https://bigip1 into the address bar and hit Enter

   

3. 1. Login with username: admin

      password: admin.F5demo.com

4. Click Local Traffic -> iRules -> iRules List

5. Click Create button

   

6. Click Create button

7. Enter Name of HTTP_Payload_iRule

8. Enter Your Code

9. Click Finished

10. Click Local Traffic -> Virtual Servers -> Virtual Server List

11. Click on http_irules_vip

    

12. Click on the Resources tab.

13. Click Manage button for the iRules section.

    

14. What should you do here? (Hint: Remove Stream_iRule and replace with HTTP_Payload_iRule)

15. Click the Finished button

16. Open the Firefox browser

17. Enter https://dvwa.f5lab.com and ensure you get there and it is HTTPS

Hint

Basic Hint

if you need a hint here is some example code:

Link to DevCentral: https://clouddocs.f5.com/api/irules/HTTP__collect.html

Link to DevCentral: https://clouddocs.f5.com/api/irules/HTTP__release.html

If you are really stuck, here is what we are looking for:

1. When HTTP_Request comes in
2. Second change the version of HTTP and disable compression for the request
3. When HTTP_RESPONSE comes back
4. Next we need to collect some HTTP::collect some data.
5. Now when we get HTTP_RESPONSE_DATA
6. Now we will set some find and replace strings.
7. Finally we will perform a regsub on the payload and replace with new text.
8. Now you should have enough to understand and the majority of code to create the iRule. If not here is the complete iRule.