# EnableSecurity/wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Repository: https://github.com/EnableSecurity/wafw00f
Canonical: https://ross.abutalabs.com/products/wafw00f
Homepage: https://www.enablesecurity.com/
Language: Python
License: BSD-3-Clause
License Family: permissive
Topics: waf, fingerprint, waffit, web-application-firewall
Last push: 2026-04-19T12:47:41+00:00

## Health v2 (maintenance only)
Score: 79/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 78, release rhythm 68, longevity 100
- inputs: {"age_days": 4494, "days_push": 136, "days_rel": 219, "gap_med": 7, "n_releases_24m": 6}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 6528, forks 1055 (observed 2026-08-28T04:09:44.933389+00:00)

## What it is
WAFW00F is a Python command-line tool that identifies and fingerprints Web Application Firewall (WAF) products protecting a website. It sends normal and potentially malicious HTTP requests, then analyzes responses to deduce which WAF or security solution is in place.

## Use cases
- detect which WAF is protecting a website
- fingerprint web application firewall products during a pentest
- check if a site is behind Cloudflare or another security layer
- enumerate supported WAFs before testing evasion techniques
- identify security solutions responding to malicious HTTP requests
- reconnaissance of a target's web defenses

## When to choose
- you need to identify a website's WAF from the command line
- you are doing web application penetration testing reconnaissance
- you want a mature, widely-used open-source WAF detection tool with a large signature list

## When to avoid
- you need to bypass or evade a WAF rather than detect it
- you need a full vulnerability scanner rather than WAF fingerprinting
- you need a GUI-based security scanning suite

## Facets
- artifact type: cli-tool
- maturity: stable
- function: security, penetration-testing, http-client, cli
- domain: security, penetration-testing, web-development
- platform: python, cli, cross-platform, windows
- tags: waf-detection, fingerprinting, web-application-firewall, reconnaissance, pentesting, command-line, linux, macos

## Member repositories
- EnableSecurity/wafw00f (main) score 79

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:44.933389+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:44:09.190231+00:00, confidence not recorded.
  - readme: https://github.com/EnableSecurity/wafw00f (fetched 2026-08-28T04:09:44.933389+00:00, sha 2f9255e0e14e)
  - homepage: https://www.enablesecurity.com/ (fetched 2026-08-29T08:40:39.942721+00:00, sha 2644e4c149e7)
  - site_page: https://www.enablesecurity.com/about (fetched 2026-08-29T08:40:39.951618+00:00, sha 7df63bd5a452)
  - registry_pypi: https://pypi.org/pypi/wafw00f/json (fetched 2026-08-29T08:40:39.956981+00:00, sha 06e2c99fd9f1)
  - site_page: https://www.enablesecurity.com/sipvicious (fetched 2026-08-29T08:40:39.953517+00:00, sha 041876013773)
  - site_page: https://www.enablesecurity.com/consultancy (fetched 2026-08-29T08:40:39.955468+00:00, sha 2b0e78873c70)
- Data as of 2026-08-30T08:39:29.467469+00:00.