WAFW00F: Web Application Firewall Fingerprinting

WAFW00F is a powerful tool designed to detect and identify Web Application Firewalls (WAFs).

How Does It Work?

1. Initial Request Analysis – Sends a standard HTTP request and analyzes the response 2. Advanced Detection – Sends crafted requests to trigger WAF-specific responses 3. Behavioral Analysis – Examines response patterns to infer WAF presence

Detectable WAFs

Cloudflare, AWS ELB, Imperva Incapsula, F5 BIG-IP, Azure Front Door, Palo Alto, FortiWeb, Sucuri, Wordfence, and many more.

Usage

# List all detectable WAFs
wafw00f -l

Scan a target
wafw00f https://example.org

Help
wafw00f --help