NAME

       WAFW00F - Identify and fingerprint Web Application Firewall products

SYNOPSIS

       wafw00f url1 [url2 [url3 ... ]]

DESCRIPTION

       The Web Application Firewall Identification and Fingerprinting Tool.

       To do its magic, WAFW00F does the following:
              Sends  a normal HTTP request and analyses the response; this identifies a number of WAF solutions.
              If that is not successful, it sends a number of (potentially malicious)  HTTP  requests  and  uses
              simple logic to deduce which WAF it is.  If that is also not successful, it analyses the responses
              previously returned and uses another simple algorithm to guess if a WAF or  security  solution  is
              active>

OPTIONS

       -h, --help
              Show available options.

       -v, --verbose
              Enable verbosity - multiple -v options increase verbosity.

       -a, --findall
              Find all WAFs, do not stop testing on the first one.

       -r, --noredirect
              Do not follow redirections given by 3xx responses.

       -t WAF, --test=WAF
              Test for one specific WAF product.

       -o OUTPUT, --output=OUTPUT
              Write  output  to  csv,  json  or  text file depending on file extension. For stdout, specify - as
              filename.

       -i INPUT, --input=INPUT
              Read targets from a file. Input format can be csv, json or text. For csv and json, a `url`  column
              name or element is required.

       -l, --list
              List all the WAFs that WAFW00F is able to detect.

       -p PROXY, --proxy=PROXY
              Use an HTTP proxy to perform requests, example: http://hostname:8080, socks5://hostname:1080.

       -V, --version
              Print out the version.

       -H FILE, --headers=FILE
              Pass custom headers, for example to overwrite the default user-agent string.

AUTHORS

       Sandro Gauci (@SandroGauci)
       Pinaki Mondal (@0xInfection)

REPORTING BUGS

       You       can       report      bugs      at      the      project      homepage      issue      tracker:
       <https://github.com/EnableSecurity/wafw00f/issues/>.

COPYRIGHT

       Copyright      (C)      2009-2022       WAFW00F       Developers.       License:       BSD       3-Clause
       <https://opensource.org/licenses/BSD-3-Clause>.
       This  is free software: you are free to modify and distribute under the terms as permitted by the license
       provided alongwith.

SEE ALSO

       Full documentation is available at: <https://github.com/EnableSecurity/wafw00f/wiki/>.