Dive into a comprehensive workshop exploring Web Application Firewalls (WAFs) and their role in application security. Learn about the controversial nature of WAFs, their potential benefits for virtual patching and defense in depth, and their impact on security assessments. Discover various circumvention methods through four main bypass categories: encoding techniques, SQL injection bypasses, protocol switching, and syntax alternatives. Apply newly acquired knowledge through hands-on exercises using a demonstration application. Prepare for the workshop by installing Docker, Burp Suite Pro or OWASP ZAP, and Python on your system to maximize participation and learning.