Hello everyone. So in this
video we are going to see how you can identify if
any web application is running a firewall,
which is a WAP web application
firewall.
So we all know whenever we
are doing bug bounty hunting or pen testing any
web application if there is a web application
firewall, it will block our payload
the malicious request that you
send.
So important is first you identify that there
is a waph onto that particular Target web server
before you brute start brute forcing your
payloads one by one.
So that you will not get blocked automatically
by the Waf so the
first thing is to identify if there is a waph we
can do this by nmap very easily.
So the syntax of doing this particular scan is nmap
the target IP address followed by
hyphen hyphen script equals to http -we
hyphen detect.
By this script you can easily detect if there
is a vaph onto the target web server.
you can always add hyphen V to see
the output in verbose mode the example of doing this
particular scan is given
over here, which is nmap the target
IP followed by the NEC script.
So it is the Practical time and let's see this
scan in action.
As you can see on the terminal.
I have given the command which is nmap the target
web server, which is noodle.com followed
by hyphen hyphen script equals to
http -waffe -
detect to identify and detect if there
is a firewall
and I have chosen this ports, which is Port 80 and Port
443 followed by hyphen V
to see the output in verbose mode.
So as you can see the nmap scan has started successfully and
we have also got the output.
wherein
nmap is able to identify that the website
is running behind IDs IPS or
a f
how nmap is able to identify because
As you can see over here and map has
sended a payload.
As you can see over here, the payload is script
alert document dot cookie scriptack close,
which is a xss payload. So basically
Nmap, has a set of payloads which it
sends onto the target web server and
sees the response if the
payload has been blocked then and map
identifies that there is the Waf
presence or any type of ideas IPS
protection, which is blocking our
simultaneous request from the end
map.
So I hope you guys understood this video. Thank you.