Nmap Development mailing list archives

Re: [NSE] http-waf-fingerprint.nse


From: Hani Benhabiles <kroosec () gmail com>
Date: Thu, 07 Jun 2012 20:48:15 +0100

On 06/07/2012 08:46 PM, Hani Benhabiles wrote:
Hi list,

description = [[
Tries to detect a Web Application Firewall and its type and version.

This works by sending a number of requests and looking in the responses for known behavior and fingerprints
such as Server header, cookies and headers values.
]]

---
-- @args http-drupal-modules.root The base path. Defaults to <code>/</code>.
--
-- @usage
-- nmap --script=http-waf-fingerprint <targets>
--
--@output
--PORT   STATE SERVICE REASON
--80/tcp open  http    syn-ack
--| http-waf-fingerprint:
--|   Detected firewalls
--|_    BinarySec version 3.2.2


Cheers,
Hani.

Script is attached to this email.
You can alternatively get it from here:
https://svn.nmap.org/nmap-exp/kroosec/scripts/http-waf-fingerprint.nse

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

Attachment: http-waf-fingerprint.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread: