wafw00f

What it is

A Python utility that sends crafted requests and matches response patterns to known WAF products. Knowing the WAF helps testers choose safer, more relevant follow-up checks.

What it helps with

- Identifying the WAF product in front of a web app
- Confirming whether a site is protected before deeper tests
- Scripting fingerprint checks across many hosts
- Feeding WAF context into later scanner configuration

Who it's for

Recon and application security testers working on sites they are authorized to assess.

Worth knowing

Fingerprinting sends active probes, so only use it on targets in scope. It installs as a Python package.

Does it bypass the WAF?
No, it only tries to identify the product.

What should I run next?
In our view WhatWeb broadens technology fingerprinting, and Nuclei or ZAP handle deeper testing.