145  wafw00f(1) - Kailash Tool Reference

145.1 wafw00f

wafw00f - Identifies and fingerprints web application firewalls.

Layer CLASSIC
Category c-01-information-gathering
Safety class safe
Licence BSD-3-Clause
Upstream github.com/EnableSecurity/wafw00f

145.1.1 NAME

wafw00f - Identifies and fingerprints web application firewalls.

145.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

python3 -m pip install wafw00f
pip3 install wafw00f

145.1.3 DESCRIPTION (upstream)

WAFW00F — From Enable Security To do its magic, WAFW00F does the following: - Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. - If that is not successful, it sends a number of (potentially malicious) HTTP requests and uses simple logic to deduce which WAF it is. - If that is also not successful, it analyses the responses previously returned and uses another simple algorithm to guess if a WAF or security solution is actively responding to our attacks. For further details, check out the source code on our main repository. WAFW00F can detect a number of

145.1.4 SEE ALSO

ref: pin - verified 2026-10-14