wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Name:wafw00f

Category:Scanners

Publisher:trickest

Created:9/7/2021

Container:quay.io/trickest/wafw00f:ae6a67f

Output Type:

License:Unknown

Source:View Source

Parameters

url · string · required

Specify target url(s) url1 [url2 [url3 ... ]]

list · boolean

--listList all WAFs that WAFW00F is able to detect

test · string

--testTest for one specific WAF

proxy · string

--proxyUse an HTTP proxy to perform requests, examples: http://hostname:8080, socks5://hostname:1080, http://user:pass@hostname:8080

format · string

--formatForce output format to csv, json or text.

findall · boolean

--findallFind all WAFs which match the signatures, do not stop testing on the first one

headers · file

--headersPass custom headers via a text file to overwrite the default header set.

verbose · boolean

--verboseEnable verbosity

no-colors · boolean

--no-colorsDisable ANSI colors in output.

input-file · file · required

--input-fileRead targets from a file. Input format can be csv, json or text. For csv and json, a `url` column name or element is required.

noredirect · boolean

--noredirectDo not follow redirections given by 3xx responses