Ekultek / WhatWaf

Detect and bypass web application firewalls and protection systems
Other
2.55k stars 434 forks source link

Unknown Firewall (3ea2edb81) #1520

Closed WhatWaf-Firewalls closed 1 year ago

WhatWaf-Firewalls commented 2 years ago

WhatWaf version: 2.0.3 Running context: ./whatwaf --url ******************************** Fingerprint:

<!--
GET http://celia.consumer.huawei.com HTTP/1.1
Status code: 418
Server: CloudWAF
Date: Fri, 01 Apr 2022 00:12:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Set-Cookie: HWWAFSESID=46a2176033e40620e2; path=/, HWWAFSESTIME=1648771938396; path=/
-->
<!DOCTYPE html>
<html style="height:100%;width:100%"><head><meta content="text/html; charset=utf-8" http-equiv="Content-Type"/><meta content="CloudWAF" http-equiv="Server"/><title id="title">访问被拦截!</title><script>function bindall() {var requestid = "01-10-139-20220401081222-4ebbe595";if(requestid === null || requestid === ""){return;}document.getElementById("d").innerText = requestid;}</script></head><body onload="bindall()" style="height:100%;width:100%;margin:0px;font-family:Microsoft yahei"><div><style type="text/css"> .select {float: right;margin: 10px 20px 0 0;height: 32px;line-height: 20px;font-size: 14px;width: 80px;}</style><select class="select" name="language" onchange="changeLanguage(this.options[this.options.selectedIndex].value)"><option id="option-zh" onclick="changeLanguageZh()" value="zh">中文</option><option id="option-en" onclick="changeLanguageEn()" value="en">English</option></select><div style="clear: both;"></div></div><div style="min-height:13.125rem;height:17%;width:100%"><div style="margin-top:3.75rem;margin-left:18.4375rem;height:52.38;width:83.04%;"><svg style="width: 3.125rem;height: 3.125rem" viewbox="0 0 50 50" xmlns="http://www.w3.org/2000/svg"><path d="M25,0A25,25,0,1,0,50,25,25,25,0,0,0,25,0Zm1.6,37.16H22.85V33.41H26.6Zm0-6.63H22.85L22.35,13H27.1Z" fill="#e84e4c"></path></svg><font style="font-family:MicrosoftYaHei;font-size:4.375rem;color:#e94d4c;margin-left: 0.75rem;font-weight: bold;">418</font></div><div style="margin-left:18.4375rem;height:47.62%;width:83.04%;"><font id="a" style="font-family:MicrosoftYaHei;font-size:1.875rem;color:#999999;word-wrap:break-word;">您的请求疑似攻击行为!</font><p style="font-family:MicrosoftYaHei;font-size:0.9rem;color:#999999;word-wrap:break-word;"><span id="c">事件ID:</span><span id="d" style="color:#499df2">False alarm ID</span></p></div></div><div style="height:15.625rem;width:100%;min-width:105rem;"><div style="margin-left:18.4375rem;float:left;width:50rem"><p id="b" style="margin-top:10px">如果您是站长,您可以前往WAF控制台进行误报屏蔽设置,让您的访问不再被拦截</p></div></div></body><script>function changeLanguage(value) {if (value === 'zh') {changeLanguageZh();} else if (value === 'en') {changeLanguageEn();} else {changeLanguageZh();}}function changeLanguageZh() {document.getElementById("title").innerHTML = "访问被拦截!";document.getElementById("a").innerHTML = "您的请求疑似攻击行为!";document.getElementById("b").innerHTML = "如果您是站长,您可以前往WAF控制台进行误报屏蔽设置,让您的访问不再被拦截";document.getElementById("c").innerHTML = "事件ID:";}function changeLanguageEn() {document.getElementById("title").innerHTML = "The access is blocked.";document.getElementById("a").innerHTML = "Sorry, your request has been intercepted because it appears to be an attack.";document.getElementById("b").innerHTML = "If you are the webmaster, configure related parameters on the WAF console to allow your requests.";document.getElementById("c").innerHTML = "Event ID:";}var language = navigator.language || navigator.browserLanguage;if (language.indexOf('zh') > -1) {changeLanguageZh();document.getElementById("option-zh").setAttribute("selected", true);} else if (language.indexOf('en') > -1) {changeLanguageEn();document.getElementById("option-en").setAttribute("selected", true);} else {changeLanguageZh();document.getElementById("option-zh").setAttribute("selected", true);}</script></html>