Cyber Security Forum (X-code) - PT. Teknologi Server Indonesia

wafid

Wafid identify and fingerprint Web Application Firewall (WAF) products.

Wafid sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions.If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks.

WAFid can identify these WAFs:

- 360

- Safedog

- NetContinuum

- Anquanbao

- Baidu Yunjiasu

- Knownsec KS-WAF

- BIG-IP

- Barracuda

- BinarySEC

- BlockDos

- Cisco ACE

- CloudFlare

- NetScaler

- FortiWeb

- jiasule

- Newdefend

- Palo Alto

- Safe3WAF

- Profense

- West263CDN

- WebKnight

- Wallarm

- USP Secure Entry Server

- Sucuri WAF

- Radware AppWall

- PowerCDN

- Naxsi

- Mission Control Application Shield

- IBM WebSphere DataPower

- Edgecast

- Applicure dotDefender

- Comodo WAF

- ChinaCache-CDN

- NSFocus

Download : https://github.com/CSecGroup/wafid