Finding a string in a gzip compressed client payload

[PiotrL]

How can I uncompress client payload to find something ?

[Yoann_Le_Corvi1]

Hi

Funny, I just had to do the same thing for ASM 🙂

Have a look at this, it worked for me :

https://support.f5.com/csp/article/K65342257

Yoann

[PiotrL]

It turned out, that the payload is additionally encrypted on app level, so this closes the case.

[Yoann_Le_Corvi1]

Great.

Do not hesitate the mark it as Answer if it helped 🙂

Have a nice day.

[PiotrL]

Thanks Yoann

I tried: DECOMPRESS::enable request at the HTTP_REQUEST, but with no success.

In a http header from client there are no "Accept-Encoding" or "Content-Encoding" - seems it is not a standard communication ...