Caddy Encoding Evasion / WAF Bypass Attempt
Detects anomalous URL-encoding patterns in requests handled by the Caddy web server. The rule uses regex to identify potentially malicious representations of path traversal characters and separators, such as double encoding or unusual Unicode mappings, which are frequently leveraged to bypass Web Application Firewalls (WAF) or path-based security filters.
Sigma
