tsakwaf 是一款针对web应用防火墙(WAF)的瑞士军刀,它的主要目的是支持web应用程序渗透测试人员的日常工作。
tasfwaf 有一些独有的特点,它能够识别不同的web应用防火墙并能够检测WAF的能力。
tsakwaf 基于perl编写,可以识别一些被支持的WAF并且能够生成绕过WAF过滤规则的代码。
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
工具下载:http://www.ernw.de/download/tsakwaf/tsakwaf-0.9.1.tar.gz
tsakwaf is the Swiss Army Knife for Web Application Firewalls. The main purpose of tsakwaf is to support the daily work of a web application pentester. The tool is, amongst other features, capable of fingerprinting different Web Application Firewalls and can be used to test the detection capabilities of a WAF. It is based on perl and supports fingerprinting of some supported WAFs and code generation methods to circumvent filter rules.