Hello guy’s in this article we are going to discuss about how to identify web application firewall in simple way using linux and termux.
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
How dose it works?
To do its magic, WAFW00F does the following:
- Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions.
- If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is.
- If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks.
What does it detect?
WAFW00F can detect a number of firewalls, a list of which is as below
pip install wafw00f
Once you install wafw00f type this below command to find web application firewall.