Hello everyone. So in
this video we are going to see the comparison between
a very famous tool which is used to
identify vaph which is WAFF with nmap.
So the syntax of using the
Waf woof tool is very very simple. You just
have to type wolf and the Target that
you want to scan and we have already seen the
syntax of nmap Waf fingerprint
is nmap the target IP followed
by hyphen hyphen script equals to http -waffe
- fingerprint. This is the NEC
script.
So quickly see the comparison
between both the tools.
So it is the Practical time and let's quickly
jump on to the Practical and see
over here.
We identified this particular.
output wherein noodle.com was
running on cloudfare
Waf
But now what we are going to do is we are
going to scan our Target with waffle.
If you do not have installed you
can install it. It's very simple apt-get install
vafoo. If not from there.
You can always download the GitHub repository. It
is available on GitHub.
So, let's see a vafoo on noodle.com and
let's see what particular vaff does
this particular tool gives us. So it
is checking noodle.com and let's see and
wait for the output.
And perfect we have got the same result
and even this tool has
identified that that particular website is
running behind cloudflare.
So our both the results of both the tools match
and we have identified that
it is running behind cloudflare.
Let's run this particular tool on one
more website, which is Knox dot me and let's
identify that which particular valve is
running on this web application.
Here we have identified that it is running behind a sukuri
VAP.
So this is the way we can identify that
which particular valve are
running by detecting them like this.
As you can see hacker one is also running
behind cloudflare.
So I hope you understood in this video the comparison
of waffle for this end map
and the output is exactly the same.
Either you use waffles or nmap
you get the same results for the identification of
VAP.
I hope you guys understood. Thank you.