EnableSecurity/wafw00f

Features

• WAF Presence Verifiers - Detects WAF presence by analyzing responses to normal and malicious HTTP requests.
• WAF Response Fingerprinters - Examines server responses to fingerprint the specific WAF technology protecting a site.
• WAF Signature Databases - Matches request-response patterns against a library of over 200 WAF vendor signatures.
• HTTP Baseline Comparators - Compares benign and malicious request responses to detect WAF interference.
• WAF Block Page Matchers - Matches default WAF block page content to identify the specific firewall product.
• WAF Header Fingerprinters - Analyzes HTTP response headers to fingerprint the specific WAF technology in use.
• Firewall Detection Tools - Detects whether a website is protected by a WAF using normal and malicious request patterns.
• WAF Presence Detectors - Identifies whether a website is protected by a WAF through HTTP response analysis.
• WAF Enumeration Tools - Enumerates WAF products from a database of over 200 known vendors for security assessments.
• WAF Reconnaissance Tools - Gathers information about web application security infrastructure during penetration testing.
• WAF Brand Identifiers - Identifies the brand and model of WAF protecting a website through HTTP response analysis.
• WAF Probing Payloads - Sends malicious payloads to trigger WAF-specific responses for vendor identification.
• WAF Status Code Analyzers - Analyzes HTTP status code differences between normal and malicious requests to detect WAFs.
• Open Source Intelligence - Fingerprinting tool for identifying web application firewall products.
• Fingerprinting Tools - Tool for detecting and identifying WAF products.
• Technology Fingerprinting - Identifies and fingerprints Web Application Firewalls.
• Network and Web Reconnaissance - Fingerprints web application firewalls.
• WAF Fingerprinting - Comprehensive tool for identifying WAF vendors and configurations.

Star history