whatwaf 1.11.2

Heuristic web application firewall (WAF) detector.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

use once_cell::sync::Lazy;
use regex::Regex;

use crate::detectors::Detector;
use crate::utils::checks::MatchMode;
use crate::utils::http::HttpResponse;

pub struct DDoSGuard;

static HEADERS: Lazy<Vec<Regex>> = Lazy::new(|| vec![Regex::new(r"__ddg\d+_").unwrap()]);

impl Detector for DDoSGuard {
    fn name(&self) -> &'static str {
        "DDoS-Guard"
    }

    fn detect(&self, resp: &HttpResponse) -> bool {
        resp.header_has("server", &["ddos-guard"], MatchMode::Any)
            || resp.header_matches("set-cookie", &HEADERS, MatchMode::Any)
    }
}

inventory::submit! {
    &DDoSGuard as &dyn Detector
}