Plugins tainted by others about wafw00f

[sandrogauci]

Hi @d-j-c .. apologies for the late response. I'm not 100% sure that I understand what you are seeing. Some logs would be helpful. Feel free to email me privately - [email protected].

I have a feeling however, that what you need is to prioritize your aws plugin ahead of those that are currently matching. This is done by editing wafdetectionsprio.py. The first ones should always be the ones that match with a non-attack request (kindof passively).

For testing purposes, you should make use of the --find-all option, unless you are already doing so:

    parser.add_option('-a', '--findall', action='store_true', dest='findall', default=False,
                      help='Find all WAFs, do not stop testing on the first one')

The default behavior is to stop testing after the first one matches so as to avoid sending unnecessary requests.

Does this answer your question? Looking forward to your new plugin.