The Web Application Firewall Fingerprinting Tool. Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is. If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks. For further details, check out the source code on our main repository.

Features

  • Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions
  • Web Application Firewall Fingerprinting Tool
  • WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website
  • It sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is
  • It analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks

Project Samples

Project Activity

See All Activity >

License

BSD License

Follow WAFW00F

WAFW00F Web Site

Other Useful Business Software
Go from Code to Production URL in Seconds Icon
Go from Code to Production URL in Seconds

Cloud Run deploys apps in any language instantly. Scales to zero. Pay only when code runs.

Skip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
Start Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of WAFW00F!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

Python

Related Categories

Python Web Application Firewalls (WAF)

Registered

2023-08-02