CmdID

CmdID / Commands

wafw00f

Identify and fingerprint Web Application Firewall (WAF) products protecting a website. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Check if a website is using any WAF

wafw00f https://www.example.comIdentify

Test for all detectable WAFs without stopping at the first match

wafw00f --findall https://www.example.comIdentify

Pass requests through a proxy (such as BurpSuite)

wafw00f --proxy http://localhost:8080 https://www.example.comIdentify

Test for a specific WAF product (run wafw00f --list to get list of all supported WAFs)

wafw00f --test Cloudflare https://www.example.comIdentify

Pass custom headers from a file

wafw00f --headers path/to/headers.txt https://www.example.comIdentify

Read target inputs from a file and show verbose output (multiple v for more verbosity)

wafw00f --input path/to/urls.txt -vvIdentify

List all WAFs that can be detected

wafw00f --listIdentify