CmdID

CmdID / Commands

whatwaf

Detect and bypass web application firewalls and protection systems. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Detect protection on a single URL, optionally use verbose output

whatwaf --url https://example.com --verboseIdentify

Detect protection on a list of URLs in parallel from a file (one URL per line)

whatwaf --threads number --list path/to/fileIdentify

Send requests through a proxy and use custom payload list from a file (one payload per line)

whatwaf --proxy http://127.0.0.1:8080 --pl path/to/file --url https://example.comIdentify

Send requests through Tor (Tor must be installed) using custom payloads (comma-separated)

whatwaf --tor --payloads 'payload1,payload2,...' --url https://example.comIdentify

Use a random user-agent, set throttling and timeout, send a POST request, and force HTTPS connection

whatwaf --ra --throttle seconds --timeout seconds --post --force-ssl --url http://example.comIdentify

List all WAFs that can be detected

whatwaf --wafsIdentify

List all available tamper scripts

whatwaf --tampersIdentify