simple-waf-scanner 0.1.6

Production-ready WAF scanner with OWASP Top 10:2025 Web & LLM support. 360+ payloads including LLM/GenAI testing (prompt injection, jailbreaks, system prompt leakage). HTTP/2, 11+ WAF fingerprints, 13 evasion techniques.
Documentation
2026-02-03T08:36:46.034215Z  INFO simple_waf_scanner::scanner: Loading default embedded payloads
2026-02-03T08:36:46.034719Z  INFO simple_waf_scanner::payloads: Loaded 13 default payloads
2026-02-03T08:36:46.034810Z  INFO simple_waf_scanner::fingerprints: Loaded 11 WAF signatures
2026-02-03T08:36:46.034857Z  INFO scan{target=https://api.order4u.cloud}: simple_waf_scanner::scanner: Starting WAF scan on https://api.order4u.cloud
2026-02-03T08:36:46.229664Z  INFO scan{target=https://api.order4u.cloud}: simple_waf_scanner::fingerprints: Detected WAF: Cloudflare
2026-02-03T08:36:46.229840Z  INFO scan{target=https://api.order4u.cloud}: simple_waf_scanner::scanner: Detected WAF: Cloudflare
2026-02-03T08:36:46.229894Z  INFO scan{target=https://api.order4u.cloud}: simple_waf_scanner::scanner: Testing 13 payloads
2026-02-03T08:37:03.020449Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.024652Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.028002Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.030537Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.066144Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.068216Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.068465Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.075769Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.142533Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.155452Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.155574Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.156209Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.158749Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.158911Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.202343Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.202408Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.202428Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.219289Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.273681Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.279057Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.281047Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.282368Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.283654Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.283671Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.332124Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.336307Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.336442Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.352924Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.406700Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.407444Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.410460Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.414887Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.414966Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.417343Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.467838Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.474107Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.474195Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.484841Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.536778Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.537620Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.541118Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.541120Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.543572Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.553215Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.604409Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.604552Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.604600Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.612130Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.662932Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.666287Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.668800Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.670468Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.670708Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.689909Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.746167Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.746235Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.746393Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.746407Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.789973Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.791694Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.793131Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.796361Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.798250Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.817660Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.873624Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.874158Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.875190Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.875671Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.919268Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.919381Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.920541Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.921794Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.922779Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:03.944945Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.001596Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.001650Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.002171Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.004505Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.042572Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.048355Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.048586Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.050191Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.052121Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.066449Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.123473Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.130242Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.130284Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.136225Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.176492Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.176553Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.176555Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.176582Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.176588Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.196908Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.250099Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.251469Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.272022Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.281812Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.299408Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.313910Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.314009Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.314015Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.314019Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.334779Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.382675Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.385241Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.426324Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.426341Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.435954Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.441610Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.445273Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.455709Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.456308Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.473208Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.515559Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.519819Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.567772Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.567845Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.575995Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.577524Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.577585Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.592068Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.592080Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.602891Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.648146Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.651490Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.694134Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.695981Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.703982Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.714195Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.714932Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.717987Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.721837Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.734821Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.780260Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.783474Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.821657Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.823482Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.833396Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.836785Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.846796Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.848261Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.857920Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.864087Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.907164Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.913360Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.952667Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.953561Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.960799Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.961775Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.966412Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.974679Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.989581Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:04.992372Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.034632Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.042748Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.080556Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.080586Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.082330Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.090897Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:05.095918Z  WARN simple_waf_scanner::scanner: Unknown matcher type: response_status
2026-02-03T08:37:07.440901Z  INFO scan{target=https://api.order4u.cloud}: simple_waf_scanner::scanner: Scan complete. Found 0 successful bypasses in 21.41s
{
  "target": "https://api.order4u.cloud",
  "timestamp": "2026-02-03T08:36:46.229889+00:00",
  "waf_detected": "Cloudflare",
  "findings": [],
  "summary": {
    "total_payloads": 13,
    "successful_bypasses": 0,
    "techniques_effective": 0,
    "duration_secs": 21.406966625
  }
}