Detecting Web Application Firewalls (WAF)

We need to understand if there is also an inline web application firewall that we should be aware of. BackTrack addresses this need by providing WAFW00F, a tool that will attempt to detect most commonly used web application firewalls. This script was created by Sandro Gauci and Wendel G. Henrique and it can be downloaded from the project site download section at http://code.google.com/p/waffit/.

Invoke the command from your BackTrack terminal using the following commands:

# cd /pentest/web/waffit/
# ./wafw00f.py
                            ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/  
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/    
                                <   
                                 ...'
                                 
    WAFW00F - Web Application Firewall Detection Tool
    
    By Sandro Gauci && Wendel G. Henrique...