Sunday, October 28, 2018

wafw00f website - web application firewall attack commands

wafw00f website

WafW00f is a very useful Python script, capable of detecting the web application firewall (WAF). This tool is particularly useful when a penetration tester wants to inspect the target application server, and might get a fallback with certain vulnerability assessment techniques, for which the web application is actively protected by a firewall. Therefore, detecting the firewall sitting in between the application server and the Internet traffic not only improves a testing strategy, but also presents exceptional challenges for the penetration tester to develop advanced evasion techniques.

No comments:

Post a Comment

Zero Trust for Users Masterclass: The Playbook for M&A Day-1 Secure Access

  Zero Trust for Users Masterclass: The Playbook for M&A Day-1 Secure Access dsd           Overview The image is a screenshot from a pre...