WAF规则测试(绕过)工具 - tsakwaf 0.9.1

tsakwaf 是一款针对web应用防火墙(WAF)的瑞士军刀，它的主要目的是支持web应用程序渗透测试人员的日常工作。

tasfwaf  有一些独有的特点，它能够识别不同的web应用防火墙并能够检测WAF的能力。

tsakwaf 基于perl编写，可以识别一些被支持的WAF并且能够生成绕过WAF过滤规则的代码。
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
工具下载：http://www.ernw.de/download/tsakwaf/tsakwaf-0.9.1.tar.gz

tsakwaf is the Swiss Army Knife for Web Application Firewalls. The main purpose of tsakwaf is to support the daily work of a web application pentester. The tool is, amongst other features, capable of fingerprinting different Web Application Firewalls and can be used to test the detection capabilities of a WAF. It is based on perl and supports fingerprinting of some supported WAFs and code generation methods to circumvent filter rules.