whatwaf 1.11.2

Heuristic web application firewall (WAF) detector.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

use crate::detectors::Detector;
use crate::utils::checks::MatchMode;
use crate::utils::http::HttpResponse;
use once_cell::sync::Lazy;
use regex::Regex;

pub struct NexusGuard;

static BODY: Lazy<Vec<Regex>> = Lazy::new(|| {
    vec![Regex::new(r"(?i)(?:https?://)?(?:speresources\.)?nexusguard\.com\.wafpage").unwrap()]
});

impl Detector for NexusGuard {
    fn name(&self) -> &'static str {
        "NexusGuard"
    }

    fn detect(&self, resp: &HttpResponse) -> bool {
        resp.has_header(&["x-nxg", "x-nxg-waf"], MatchMode::Any)
            || resp.body_matches(&BODY, MatchMode::Any)
    }
}

inventory::submit! {
    &NexusGuard as &dyn Detector
}