search

EnableSecurity / wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
https://www.enablesecurity.com/
BSD 3-Clause "New" or "Revised" License
5.17k stars 924 forks source link

HTTPSConnectionPool port 443 conduct to Read timed out - response time from the server is too low? #191

Closed carboncrystal closed 2 months ago

carboncrystal commented 10 months ago

Describe the bug Some websites are seen as down by wafw00f, but this websites are up.

To Reproduce wafw00f https://www.tesla.com RESULT IN: [*] Checking https://www.tesla.com ERROR:wafw00f:Something went wrong HTTPSConnectionPool(host='www.tesla.com', port=443): Read timed out. (read timeout=7) ERROR:wafw00f:Site www.tesla.com appears to be down

Expected behavior tesla.com is not down, but wafw00f see it is down.

Desktop (please complete the following information):

Debug output wafw00f https://www.tesla.com -vv

[*] Checking https://www.tesla.com
INFO:wafw00f:starting wafw00f on https://www.tesla.com
ERROR:wafw00f:Something went wrong HTTPSConnectionPool(host='www.tesla.com', port=443): Read timed out. (read timeout=7)
ERROR:wafw00f:Site www.tesla.com appears to be down

Additional context I think wafw00f needs to be adapted to the new urllib3 changes. Does wafw00f have a PoolManager? Maybe PoolManager will automatically handle HTTPSConnectionPool objects and these kind of errors will be a thing of the past.

0xInfection commented 2 months ago

hmm, I think this particular case is weird, I cannot even make a query with curl -- it times out. no matter what i do, user-agents / cookies, etc, I cannot connect to the host. feel free to reopen, if you do find a workaround.