Waffit (wafwoof) - Web Application Firewall Detection Tool | Backtrack 5 R3 | Tutorial

Waffit (wafwoof) - Web Application Firewall Detection Tool | Backtrack 5 R3

Introduction

WAFW00F allows to identify and fingerprint WAF products protecting a website. This tool was written by Sandro Gauci && Wendel G. Henrique.

Features:-

• This tool can only detect limited numbers of firewalls, listed below.
  1. Profense
  2. NetContinuum
  3. Barracuda
  4. HyperGuard
  5. BinarySec
  6. Teros
  7. F5 Trafficshield
  8. F5 ASM
  9. Airlock
  10. Citrix NetScaler
  11. ModSecurity
  12. DenyALL
  13. dotDefender
  14. webApp.secure
  15. BIG-IP
  16. URLScan
  17. WebKnight
  18. SecureIIS
  19. Imperva

Procedure

How to open it:-

• To open it goto, Backtrack >> Information Gathering >> Web Application Analysis >> IDS IPS Identification >> waffit or you can also open it through Terminal by opening this directory cd /pentest/web/waffi.

How to use it:-

• To use it, run this command ./wafw00f.py <url> 

Verbose mode usage:-

• To use it in verbose mode, run this command ./wafw00f.py <url> -v.

There are few more options available for this tool, you can see it by running this command ./wafw00f.py -h.

I hope this article have helped you.

Feel Free To Leave A Comment If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!