mirrors/Awesome-WAF
1
0
Fork 0
mirror of https://github.com/0xInfection/Awesome-WAF.git synced 2024-12-22 21:53:33 +07:00
Code Issues Packages Projects Releases Wiki Activity

Added more fingerprints for 360 waf

Browse Source
This commit is contained in:
Infected Drake 2019-07-21 19:12:52 +05:30 committed by GitHub
parent 3eb39820d3
commit b80a57869b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@ -91,13 +91,15 @@ Wanna fingerprint WAFs? Lets see how.
<li><b>Detection Methodology:</b></li> <li><b>Detection Methodology:</b></li>
<ul> <ul>
<li>Returns status code <code>493</code> upon unusual requests.</li> <li>Returns status code <code>493</code> upon unusual requests.</li>
<li>On viewing source-code of error page, you will find reference to <code>wzws-waf-cgi/</code> directory.</li> <li>Blockpage may contain reference to <code>wzws-waf-cgi/</code> directory.</li>
<li>Blocked response page source contains: <li>Blocked response page source may contain:
<ul> <ul>
<li>Reference to <code>wangshan.360.cn</code> URL.</li> <li>Reference to <code>wangshan.360.cn</code> URL.</li>
<li><code>Sorry! Your access has been intercepted because your links may threaten website security.</code> text snippet.</li> <li><code>Sorry! Your access has been intercepted because your links may threaten website security.</code> text snippet.</li>
</ul> </ul>
<li>Response headers contain <code>X-Powered-By-360WZB</code> Header.</li> <li>Response headers may contain <code>X-Powered-By-360WZB</code> header.</li>
<li>Blocked response headers contain unique header <code>WZWS-Ray</code>.</li>
<li><code>Server</code> header may contain value <code>qianxin-waf</code>.</li>
</ul> </ul>
</ul> </ul>
</td> </td>