wafrift-detect 0.2.13

WAF detection from response headers and body, response fingerprint drift analysis.
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
[[waf]]
name = "Shield Security"
vendor = "One Dollar Plugin"
confidence_threshold = 0.3
evasions = ["CaseAlternation", "SqlCommentInsertion", "DoubleUrlEncode", "ContentTypeSwitch"]
source = "WAFW00F:shieldsecurity"
[[waf.signature]]
  body_regex = "You were blocked by the Shield"
  weight = 0.4
[[waf.signature]]
  body_regex = "remaining transgression\\(s\\) against this site"
  weight = 0.4
[[waf.signature]]
  body_regex = "Something in the URL.{0,5}?Form or Cookie data wasn\\'t appropriate"
  weight = 0.4