Hello guy’s in this article we are going to discuss about how to identify web application firewall in simple way using linux and termux.
What is wafw00f?
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
How dose it works?
To do its magic, WAFW00F does the following:
- Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions.
- If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is.
- If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks.
What does it detect?
WAFW00F can detect a number of firewalls, a list of which is as below
How to install and use?
Just type thisbelow command to install wafw00f in your termux and linux terminal.
pip install wafw00f
Once you install wafw00f type this below command to find web application firewall.
wafw00f (victim website)
