whatwaf

all

Detect and bypass web application firewalls and protection systems.

Options (5)

-u, --urlboolean

Detect protection on a single URL, optionally use verbose output

Example: whatwaf {{[-u|--url]}} {{https://example.com}} --verbose

-t, --threadsboolean

Detect protection on a list of URLs in parallel from a file (one URL per line)

Example: whatwaf {{[-t|--threads]}} {{number}} {{[-l|--list]}} {{path/to/file}}

-l, --listboolean

Detect protection on a list of URLs in parallel from a file (one URL per line)

Example: whatwaf {{[-t|--threads]}} {{number}} {{[-l|--list]}} {{path/to/file}}

-p, --payloadsboolean

Send requests through Tor (Tor must be installed) using custom payloads (comma-separated)

Example: whatwaf --tor {{[-p|--payloads]}} '{{payload1,payload2,...}}' {{[-u|--url]}} {{https://example.com}}

-P, --postboolean

Use a random user-agent, set throttling and timeout, send a POST request, and force HTTPS connection

Example:

whatwaf --ra --throttle {{seconds}} --timeout {{seconds}} {{[-P|--post]}} --force-ssl {{[-u|--url]}} {{http://example.com}}

Detect protection on a single URL, optionally use verbose output

whatwaf [-u|--url] https://example.com --verbose

Detect protection on a list of URLs in parallel from a file (one URL per line)

whatwaf [-t|--threads] number [-l|--list] path/to/file

Send requests through a proxy and use custom payload list from a file (one payload per line)

whatwaf --proxy http://127.0.0.1:8080 --pl path/to/file [-u|--url] https://example.com

Send requests through Tor (Tor must be installed) using custom payloads (comma-separated)

whatwaf --tor [-p|--payloads] 'payload1,payload2,...' [-u|--url] https://example.com

Use a random user-agent, set throttling and timeout, send a POST request, and force HTTPS connection

whatwaf --ra --throttle seconds --timeout seconds [-P|--post] --force-ssl [-u|--url] http://example.com

List all WAFs that can be detected

whatwaf --wafs

List all available tamper scripts

whatwaf --tampers