WAFW00FER is a simple bash script designed to check for the presence of Web Application Firewalls (WAFs) on a list of subdomains. It utilizes the wafw00f
tool to perform the detection.
- Detects and reports subdomains that have no WAF.
- Simple and easy to use.
- Ensure
wafw00f
is already installed (sudo apt install wafw00f
on Debian-based systems). - git clone the repo using this command (
git clone https://github.com/atharvak95/wafw00fer.git
) . - Make the script executable (
chmod +x wafw00fer.sh
) - Run the script (
./wafw00fer.sh
) and provide the path to yoursubdomains.txt
file. - The script will check each subdomain for the presence of a WAF and display subdomains without a WAF.