Ekultek / WhatWaf

Detect and bypass web application firewalls and protection systems
Other
2.67k stars 449 forks source link

Unknown Firewall (4a355319b) #1060

Open WhatWaf-Firewalls opened 3 years ago

WhatWaf-Firewalls commented 3 years ago

WhatWaf version: 2.0.3 Running context: ./whatwaf -u ********************************** Fingerprint:

<!--
GET http://www.dpcredcrossbazaar.com HTTP/1.1
Status code: 418
Server: CloudWAF
Date: Wed, 17 Mar 2021 04:44:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Set-Cookie: HWWAFSESID=0ed0079f686f9eeef3; path=/, HWWAFSESTIME=1615956294842; path=/
-->
<!DOCTYPE html>
<html style="height:100%;width:100%"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"/><meta content="CloudWAF" http-equiv="Server"/><title id="title">访问被拦截!</title><script>function bindall() {var requestid = "01-60-18-20210317114454-a5610ac4";if(requestid==null || requestid == ""){return;}document.getElementById("d").innerText = requestid;}</script></head><body onload="bindall()" style="height:100%;width:100%;margin:0px;font-family:Microsoft yahei"><div><style type="text/css">  .button{float:right;margin-right:2rem;text-decoration:none;background:white;color:#e94d4c;padding: 5px 15px 5px 15px;font-size:1rem;font-family: 微软雅黑,宋体,Arial,Helvetica,Verdana,sans-serif;font-weight:bold;border-radius:0rem;border: none;-webkit-transition:all linear 0.30s;-moz-transition:all linear 0.30s;}.button:hover{text-decoration:none;background:#e94d4c;color:#f2f2f2;}</style><input class="button" onclick="changeLanguageZh()" type="button" value="中文"/><input class="button" onclick="changeLanguageEn()" type="button" value="English"/></div><div style="min-height:13.125rem;height:17%;width:100%"><div style="margin-top:3.75rem;margin-left:18.4375rem;height:52.38;width:83.04%;"><svg style="width: 3.125rem;height: 3.125rem" viewbox="0 0 50 50" xmlns="http://www.w3.org/2000/svg"><path d="M25,0A25,25,0,1,0,50,25,25,25,0,0,0,25,0Zm1.6,37.16H22.85V33.41H26.6Zm0-6.63H22.85L22.35,13H27.1Z" fill="#e84e4c"></path></svg><font style="font-family:MicrosoftYaHei;font-size:4.375rem;color:#e94d4c;margin-left: 0.75rem;font-weight: bold;">418</font></div><div style="margin-left:18.4375rem;height:47.62%;width:83.04%;"><font id="a" style="font-family:MicrosoftYaHei;font-size:1.875rem;color:#999999;word-wrap:break-word;">您的请求疑似攻击行为!</font><p style="font-family:MicrosoftYaHei;font-size:0.9rem;color:#999999;word-wrap:break-word;"><span id="c">事件ID:</span><span id="d" style="color:#499df2">False alarm ID</span></p></div></div><div style="height:15.625rem;width:100%;min-width:105rem;"><div style="margin-left:18.4375rem;float:left;width:50rem"><p id="b" style="margin-top:10px">如果您是站长,您可以前往WAF控制台进行误报屏蔽设置,让您的访问不再被拦截</p></div></div></body><script>function changeLanguageZh() {document.getElementById("title").innerHTML = "访问被拦截!";document.getElementById("a").innerHTML = "您的请求疑似攻击行为!";document.getElementById("b").innerHTML = "如果您是站长,您可以前往WAF控制台进行误报屏蔽设置,让您的访问不再被拦截";document.getElementById("c").innerHTML = "事件ID:";}function changeLanguageEn() {document.getElementById("title").innerHTML = "The access is blocked.";document.getElementById("a").innerHTML = "Sorry, your request has been intercepted because it appears to be an attack.";document.getElementById("b").innerHTML = "If you are the webmaster, configure related parameters on the WAF console to allow your requests.";document.getElementById("c").innerHTML = "Event ID:";}var language = navigator.language || navigator.browserLanguage;if (language.indexOf('zh') > -1) {changeLanguageZh();} else if (language.indexOf('en') > -1) {changeLanguageEn();} else{changeLanguageZh();}</script></html>
VergeDX commented 1 year ago

https://support.huaweicloud.com/intl/en-us/bestpractice-waf/waf_06_0004.html