comes pre-installed in Kali linux.

https://github.com/EnableSecurity/wafw00f

To get a list of firewalls it can detect

wafw00f -l

To identify the WAF or proxy

wafw00f site.com

• For hackersploit.org - a proxy exists
• For zonetransfer.me - No WAF or proxy exists
• For hackertube.net - WAF is identified but from the wrong provider its actually from Sucuri.

To enumerate all possible instances of a WAF

wafw00f <https://site.com> -a

• We got the correct firewall for hackertube.net