The Web Application Firewall Fingerprinting Tool. Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is. If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks. For further details, check out the source code on our main repository.
Features
- Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions
- Web Application Firewall Fingerprinting Tool
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website
- It sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is
- It analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks
Project Samples
Categories
Web Application Firewalls (WAF)License
BSD LicenseFollow WAFW00F
You Might Also Like
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of WAFW00F!