WAF>> wafw00f>> 返回
项目作者： EnableSecurity

项目描述 ：
WAFW00F允许用户识别和指纹保护网站的Web应用程序防火墙（WAF）产品。
高级语言： Python
项目地址: git://github.com/EnableSecurity/wafw00f.git



wafw00f


WAFW00F


The Web Application Firewall Fingerprinting Tool.



— From Enable Security















How does it work?

To do its magic, WAFW00F does the following:

  • Sends a normal HTTP request and analyses the response; this identifies a
    number of WAF solutions.
  • If that is not successful, it sends a number of (potentially malicious) HTTP
    requests and uses simple logic to deduce which WAF it is.
  • If that is also not successful, it analyses the responses previously
    returned and uses another simple algorithm to guess if a WAF or security
    solution is actively responding to our attacks.

For further details, check out the source code on our main repository.

What does it detect?

WAFW00F can detect a number of firewalls, a list of which is as below:

  1. $ wafw00f -l
  4.                   ?              ,.   (   .      )        .      "
  5.           __        ??          ("     )  )'     ,'        )  . (`     '`
  6.     (___()'`;   ???          .; )  ' (( (" )    ;(,     ((  (  ;)  "  )")
  7.     /,___ /`                 _"., ,._'_.,)_(..,( . )_  _' )_') (. _..( ' )
  8.     \\   \\                 |____|____|____|____|____|____|____|____|____|
  10.                                 ~ WAFW00F : v2.3.1 ~
  11.                   ~ Sniffing Web Application Firewalls since 2014 ~
  13. [+] Can test for these WAFs:
  15.   WAF Name                        Manufacturer
  16.   --------                        ------------
  18.   360WangZhanBao                   360 Technologies
  19.   ACE XML Gateway                  Cisco
  20.   ASP.NET Generic                  Microsoft
  21.   ASPA Firewall                    ASPA Engineering Co.
  22.   AWS Elastic Load Balancer        Amazon
  23.   AireeCDN                         Airee
  24.   Airlock                          Phion/Ergon
  25.   Alert Logic                      Alert Logic
  26.   AliYunDun                        Alibaba Cloud Computing
  27.   AnYu                             AnYu Technologies
  28.   Anquanbao                        Anquanbao
  29.   AppWall                          Radware
  30.   Approach                         Approach
  31.   Armor Defense                    Armor
  32.   ArvanCloud                       ArvanCloud
  33.   Astra                            Czar Securities
  34.   Azion Edge Firewall              Azion
  35.   Azure Application Gateway        Microsoft
  36.   Azure Front Door                 Microsoft
  37.   BIG-IP AP Manager                F5 Networks
  38.   BIG-IP AppSec Manager            F5 Networks
  39.   BIG-IP Local Traffic Manager     F5 Networks
  40.   Barikode                         Ethic Ninja
  41.   Barracuda                        Barracuda Networks
  42.   Bekchy                           Faydata Technologies Inc.
  43.   Beluga CDN                       Beluga
  44.   BinarySec                        BinarySec
  45.   BitNinja                         BitNinja
  46.   BlockDoS                         BlockDoS
  47.   Bluedon                          Bluedon IST
  48.   BulletProof Security Pro         AITpro Security
  49.   CacheFly CDN                     CacheFly
  50.   CacheWall                        Varnish
  51.   CdnNS Application Gateway        CdnNs/WdidcNet
  52.   ChinaCache Load Balancer         ChinaCache
  53.   Chuang Yu Shield                 Yunaq
  54.   Cloud Protector                  Rohde & Schwarz CyberSecurity
  55.   Cloudbric                        Penta Security
  56.   Cloudflare                       Cloudflare Inc.
  57.   Cloudfloor                       Cloudfloor DNS
  58.   Cloudfront                       Amazon
  59.   Comodo cWatch                    Comodo CyberSecurity
  60.   CrawlProtect                     Jean-Denis Brun
  61.   DDoS-GUARD                       DDOS-GUARD CORP.
  62.   DOSarrest                        DOSarrest Internet Security
  63.   DataPower                        IBM
  64.   DenyALL                          Rohde & Schwarz CyberSecurity
  65.   Distil                           Distil Networks
  66.   DotDefender                      Applicure Technologies
  67.   DynamicWeb Injection Check       DynamicWeb
  68.   Edgecast                         Verizon Digital Media
  69.   Eisoo Cloud Firewall             Eisoo
  70.   Envoy                            EnvoyProxy
  71.   Expression Engine                EllisLab
  72.   Fastly                           Fastly CDN
  73.   FirePass                         F5 Networks
  74.   FortiGate                        Fortinet
  75.   FortiGuard                       Fortinet
  76.   FortiWeb                         Fortinet
  77.   GoDaddy Website Protection       GoDaddy
  78.   Google Cloud App Armor           Google Cloud
  79.   Greywizard                       Grey Wizard
  80.   Huawei Cloud Firewall            Huawei
  81.   HyperGuard                       Art of Defense
  82.   ISA Server                       Microsoft
  83.   Imunify360                       CloudLinux
  84.   Incapsula                        Imperva Inc.
  85.   IndusGuard                       Indusface
  86.   Instart DX                       Instart Logic
  87.   Janusec Application Gateway      Janusec
  88.   Jiasule                          Jiasule
  89.   KS-WAF                           KnownSec
  90.   Kemp LoadMaster                  Progress Software
  91.   KeyCDN                           KeyCDN
  92.   Kona SiteDefender                Akamai
  93.   LimeLight CDN                    LimeLight
  94.   LiteSpeed                        LiteSpeed Technologies
  95.   Malcare                          Inactiv
  96.   MaxCDN                           MaxCDN
  97.   Mission Control Shield           Mission Control
  98.   ModSecurity                      SpiderLabs
  99.   NAXSI                            NBS Systems
  100.   NSFocus                          NSFocus Global Inc.
  101.   Nemesida                         PentestIt
  102.   NetContinuum                     Barracuda Networks
  103.   NetScaler AppFirewall            Citrix Systems
  104.   NevisProxy                       AdNovum
  105.   Newdefend                        NewDefend
  106.   NexusGuard Firewall              NexusGuard
  107.   NinjaFirewall                    NinTechNet
  108.   NullDDoS Protection              NullDDoS
  109.   OnMessage Shield                 BlackBaud
  110.   Open-Resty Lua Nginx             FLOSS
  111.   Oracle Cloud                     Oracle
  112.   PT Application Firewall          Positive Technologies
  113.   Palo Alto Next Gen Firewall      Palo Alto Networks
  114.   PentaWAF                         Global Network Services
  115.   PerimeterX                       PerimeterX
  116.   PowerCDN                         PowerCDN
  117.   Profense                         ArmorLogic
  118.   Puhui                            Puhui
  119.   Qcloud                           Tencent Cloud
  120.   Qiniu                            Qiniu CDN
  121.   Qrator                           Qrator
  122.   RSFirewall                       RSJoomla!
  123.   RayWAF                           WebRay Solutions
  124.   Reblaze                          Reblaze
  125.   RequestValidationMode            Microsoft
  126.   SEnginx                          Neusoft
  127.   Sabre Firewall                   Sabre
  128.   Safe3 Web Firewall               Safe3
  129.   Safedog                          SafeDog
  130.   Safeline                         Chaitin Tech.
  131.   SecKing                          SecKing
  132.   SecuPress WP Security            SecuPress
  133.   Secure Entry                     United Security Providers
  134.   SecureSphere                     Imperva Inc.
  135.   ServerDefender VP                Port80 Software
  136.   Shadow Daemon                    Zecure
  137.   Shield Security                  One Dollar Plugin
  138.   SiteGround                       SiteGround
  139.   SiteGuard                        Sakura Inc.
  140.   Sitelock                         TrueShield
  141.   SonicWall                        Dell
  142.   Squarespace                      Squarespace
  143.   SquidProxy IDS                   SquidProxy
  144.   StackPath                        StackPath
  145.   Sucuri CloudProxy                Sucuri Inc.
  146.   Tencent Cloud Firewall           Tencent Technologies
  147.   Teros                            Citrix Systems
  148.   Trafficshield                    F5 Networks
  149.   TransIP Web Firewall             TransIP
  150.   UEWaf                            UCloud
  151.   URLMaster SecurityCheck          iFinity/DotNetNuke
  152.   URLScan                          Microsoft
  153.   UTM Web Protection               Sophos
  154.   Variti                           Variti
  155.   Varnish                          OWASP
  156.   Viettel                          Cloudrity
  157.   VirusDie                         VirusDie LLC
  158.   WP Cerber Security               Cerber Tech
  159.   WTS-WAF                          WTS
  160.   Wallarm                          Wallarm Inc.
  161.   WatchGuard                       WatchGuard Technologies
  162.   WebARX                           WebARX Security Solutions
  163.   WebKnight                        AQTRONIX
  164.   WebLand                          WebLand
  165.   WebSEAL                          IBM
  166.   WebTotem                         WebTotem
  167.   West263 CDN                      West263CDN
  168.   Wordfence                        Defiant
  169.   XLabs Security WAF               XLabs
  170.   Xuanwudun                        Xuanwudun
  171.   YXLink                           YxLink Technologies
  172.   Yundun                           Yundun
  173.   Yunjiasu                         Baidu Cloud Computing
  174.   Yunsuo                           Yunsuo
  175.   ZScaler                          Accenture
  176.   Zenedge                          Zenedge
  177.   aeSecure                         aeSecure
  178.   eEye SecureIIS                   BeyondTrust
  179.   pkSecurity IDS                   pkSec
  180.   wpmudev WAF                      Incsub
  181.   Shieldon Firewall                Shieldon.io

How do I use it?

First, install the tools as described here.

For help you can make use of the --help option. The basic usage is to pass
an URL as an argument. Example:

  1. $   wafw00f https://example.org
  3.                    ______
  4.                   /      \
  5.                  (  Woof! )
  6.                   \  ____/                      )
  7.                   ,,                           ) (_
  8.              .-. -    _______                 ( |__|
  9.             ()``; |==|_______)                .)|__|
  10.             / ('        /|\                  (  |__|
  11.         (  /  )        / | \                  . |__|
  12.          \(_)_))      /  |  \                   |__|
  14.                     ~ WAFW00F : v2.3.1 ~
  15.     The Web Application Firewall Fingerprinting Toolkit
  17. [*] Checking https://example.org
  18. [+] The site https://example.org is behind Edgecast (Verizon Digital Media) WAF.
  19. [~] Number of requests: 2

How do I install it?

Install from PyPI (recommended)

Run:

  1. python3 -m pip install wafw00f

or

  1. pip3 install wafw00f

Via Docker

It is also possible to run it within a docker container. Clone this repository first and build the Docker image using:

  1. docker build . -t wafw00f

Now you can run:

  1. docker run --rm -it wafw00f https://example.com

From source

NOTE: Be careful to not break your system packages while installing wafw00f. Use venv as and when required.

Clone the repository:

  1. git clone https://github.com/enablesecurity/wafw00f.git

Then:

  1. cd wafw00f/
  2. python3 -m pip install .

Or, by using pipx directly:

  1. pipx install git+https://github.com/EnableSecurity/wafw00f.git

Final Words

Questions? Pull up an issue on GitHub Issue Tracker or contact me.
Pull requests, ideas and issues are highly welcome.

Some useful links:

Presently being developed and maintained by: