![[]](https://developers.cloudflare.com/_astro/logo.te5VL_aD.svg){kind=link}
- Overview
- Get started
- Concepts
- Traffic detections
- Overview
- Attack score
- Malicious uploads
- Bot score
- Threat intelligence
- Custom rules
- Overview
- Create in the dashboard
- Create via API
- Create using Terraform
- Configure a rule with the Skip action
- Common use cases
- Allow traffic from IP addresses in allowlist only
- Allow traffic from search engine bots
- Allow traffic from specific countries only
- Block Microsoft Exchange Autodiscover requests
- Block requests by attack score
- Block traffic by geographical location
- Block traffic from specific countries
- Build a sequence rule within custom rules
- Challenge bad bots
- Configure token authentication
- Exempt partners from Hotlink Protection
- Issue challenge for admin user in JWT claim based on attack score
- Require a specific cookie
- Require known IP addresses in site admin area
- Require specific HTTP headers
- Require specific HTTP ports
- Stop R-U-Dead-Yet? (R.U.D.Y.) attacks
- Update custom rules for customers or partners
- Custom rulesets
- Managed rules
- Overview
- Deploy in the dashboard
- Deploy via API
- Deploy using Terraform
- Troubleshooting
- Create exceptions
- Log the payload of matched rules
- Additional tools
- Account-level configuration
- Overview
- Custom rulesets
- Rate limiting rulesets
- Analytics
- Security features interoperability
- Reference
- Alerts
- Phases
- Legacy features
- WAF managed rules (previous version)
- Rate Limiting (previous version)
- Firewall rules
- Firewall rules upgrade
- Glossary
- Home
- /WAF
- /…
- /Command-line operations
- /Decrypt the payload content
Decrypt the payload content
Use the matched-data-cli tool to decrypt a payload in the command line.
-
Download the
matched-data-clitool for your platform from the Releases page on GitHub, under Assets. -
Extract the content of the downloaded
.tar.gzfile to a local folder. -
Open a command line window and change to the local folder containing the
matched-data-clibinary.cd matched-data-cli -
Create two files: one with your private key and another one with the encrypted payload:
printf "<PRIVATE_KEY>" > private_key.txt && chmod 400 private_key.txt printf "<ENCRYPTED_PAYLOAD>" > encrypted_payload.txtReplace
<PRIVATE_KEY>with your private key and<ENCRYPTED_PAYLOAD>with the encrypted payload.Note: The first
printfcommand will make your private key visible in your command history. -
Run the following command to decrypt the payload:
decrypt -k private_key.txt encrypted_payload.txt
Note
If you are using macOS and you get an error when running the matched-data-cli tool, refer to Troubleshooting macOS errors.
The following example creates two files one with the private key and another one with the encrypted payload and runs the matched-data-cli tool to decrypt the payload in the encrypted_payload.txt file:
~ cd matched-data-cli
printf "uBS5eBttHrqkdY41kbZPdvYnNz8Vj0TvKIUpjB1y/GA=" > private_key.txt && chmod 400 private_key.txt
printf "AzTY6FHajXYXuDMUte82wrd+1n5CEHPoydYiyd3FMg5IEQAAAAAAAAA0lOhGXBclw8pWU5jbbYuepSIJN5JohTtZekLliJBlVWk=" > encrypted_payload.txt
decrypt -k private_key.txt encrypted_payload.txttest matched dataEncryption formats
The format of the encrypted payload can change over time. The matched-data-cli tool returns an error if it cannot decrypt a new encryption format.
To fix this error, download a newer version of the tool from GitHub and try again.
[privacy options]Your privacy choices![[privacy options]](https://developers.cloudflare.com/cdn-cgi/image/onerror=redirect,width=26,height=12,format=svg/_astro/privacyoptions.BWXSiJOZ.svg){kind=link}