waf-detect

What this skill does

Detects whether a WAF (Web Application Firewall) is present in front of a target URL using the wafw00f tool or manual curl fingerprinting, and identifies the specific WAF product — Cloudflare, AWS WAF, Akamai, F5 BIG-IP, and others.

When to use

• Before formulating a WAF bypass strategy during the initial reconnaissance phase of a pentest or bug bounty engagement
• When verifying that your own service's WAF is functioning correctly
• When suspecting a WAF as the cause of false positives or false negatives from a scanner

Prerequisites

• Python 3 and pip required (for wafw00f installation)
• curl required (manual fallback method)
• HTTP/HTTPS access to the target URL

Inputs