WhatWaf- Detect and bypass web application firewalls and protection systems

 WhatWaf- Detect and bypass web application firewalls and protection systems :)

🔰Overview:

WhatWaf is an advanced web application security detection tool that aims to give you an answer to the question, “Does a web server use WAF, and which one?” WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass (or two) for said firewall, on the specified target.

🔰Install & Usages:

$ sudo apt update

$ sudo apt install python3-pip

$ git clone https://github.com/ekultek/whatwaf

$ ls

$ cd whatwaf

$ ls

$ sudo pip3 install -r requirements.txt

$ sudo python3 ./whatwaf --update

$ sudo ./whatwaf --help

OR-

$ sudo python3 ./whatwaf --help

$ sudo python3 ./whatwaf --wafs 

$ sudo python3 ./whatwaf -u https://www.apple.com

$ sudo python3 ./whatwaf -l /home/kali/sites.txt

$ sudo python3 ./whatwaf -u https://apple.com --skip

$ sudo python3 ./whatwaf -u https://apple.com --skip --ra

$ sudo python3 ./whatwaf -u https://apple.com --skip --pa 'Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.700.3 Safari/534.24'

$ sudo python3 ./whatwaf -u https://apple.com --skip --proxy=socks5://127.0.0.1:9050

$ sudo systemctl start tor

$ sudo systemctl status tor

$ sudo python3 ./whatwaf --check-tor

$ sudo python3 ./whatwaf -u https://wise.com --tor

$ sudo python3 ./whatwaf -u https://wise.com --tor -W

$ sudo python3 ./whatwaf -u https://wise.com --skip --tor

$ sudo python3 ./whatwaf -u https://www.edureka.co/blog/how-to-run-a-php-program-in-xampp/ --force-ssl

l

Connect:

🔗https://www.facebook.com/profile.php?id=100090199510403&mibextid=ZbWKwL

Closing:

Thanks for watching this video.

Sources-

🔗https://viccyberspaces.blogspot.com/?m=1

#whatwaf #osint #informationgathering #penetration #pentest #websecurity #kalilinux #cybersecurity #ethicalhacking #hacking #Anonymous #viccyberspaces #vic #security #offensivesecurity #