Ekultek / WhatWaf

Detect and bypass web application firewalls and protection systems
Other
2.63k stars 447 forks source link

Unknown Firewall (c69d25863) #1544

Closed WhatWaf-Firewalls closed 2 years ago

WhatWaf-Firewalls commented 2 years ago

WhatWaf version: 2.0.3 Running context: ./whatwaf -u ***************************** Fingerprint:

<!--
GET http://test-iptel.iisc.ac.in HTTP/1.1
Status code: 403
Date: Sun, 29 May 2022 19:21:22 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 478
Connection: close
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.34
-->
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">

<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /;CAT1_GALLERY_1 UNION ALL SELECT (SELECT CAST(CHAR(114)+CHAR(51)+CHAR(100)+CHAR(109)+CHAR(48)+CHAR(118)+CHAR(51)+CHAR(95)+CHAR(104)+CHAR(118)+CHAR(106)+CHAR(95)+CHAR(105)+CHAR(110)+CHAR(106)+CHAR(101)+CHAR(99)+CHAR(116)+CHAR(105)+CHAR(111)+CHAR(110) AS NVARCHAR(4000))),NULL--
on this server.</p>
</body></html>