Hello, everyone.
So in the previous video we saw the presence
of a Waf onto any web
application.
But in this video we are going to fingerprint the
Waf to identify that which Waf
is running onto the server, is it
a cloud farewell?
It is a security ref or any other type
of Waf.
So the syntax of doing this scan is unmapped the
target IP address.
followed by hyphen hyphen script equals to http -waf
- fingerprint
You can scan a Target by simply giving an IP address and
specifying this particular NSE.
And you will be able to fingerprint the type of
Waf which is running onto the server.
You can always add hyphen V to see the output in
verbose mode and the example is given below.
So it is the Practical time and let's see how
you can run this scan and identify the
Waf which is running.
As you can see on the terminal.
we have identified that nodal.com is
behind some kind of protection and
a Waf
in this video we are going to identify that which
is that particular Waf
so
the command would be and map noodle.com
-script equals to
http -waffe hyphen fingerprint
this time instead of detect.
And we will press enter and the scan will
start.
As you can see the scan has completed successfully and we
have identified that the
vaph which is running onto this particular website is
cloudflare.
Hence, we have detected the type of WAFF
by running the WAFF fingerprint script.
So I hope you guys understood this video. Thank you.