Wafw00f

Latest version: v2.3.1

Safety actively analyzes 707299 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

2.3.1

Minor sub-release with the following fixes:
- setup.py installs wafw00f binary twice by blshkv in https://github.com/EnableSecurity/wafw00f/pull/223

2.3.0

What's New?
- We dropped support for Python 2 completely.
- PIP 24.3 compatibility.
- Couple of new interesting WAFs detections!

2.2.0

This release brings the following features to the repository:
- New features like docker support and output format fixes.
- Several new bug fixes and stability to the existing code.
- Few new WAF detections.

2.1.0

This update brings input and output file features to WafW00f! So now we have:

- Input from JSON, CSV and TXT files to specify which URLs to scan by making use of the `-i` flag
- Output to JSON, CSV, TXT files by making use of the `-o` flag
- Clean standard output when passing `-o -` as a flag to wafw00f
- New WAF detections included

2.0.0

![](https://i.imgur.com/wF8QHMV.png)

Here are some of the highlights from this release:
- Entire code infrastructure of WAFW00F refactored and engine rewritten.
- WAFW00F can now detect 150+ WAFs (largest detection database till now).
- Every WAF plugin now has multiple methods for fingerprinting & detection.
- Improvement to the generic WAF detection modules.
- Major changes and improvements in the existing fingerprints.
- Fantastic newer ASCII art with beautiful ANSI colors.

1.0.0

![Detect all the WAFs!](https://resources.enablesecurity.com/resources/detect-all-the-wafs.jpeg)

- version bumped to 1.0.0 after 10 years that this tool has been available
- number of WAFs being detected bumped to 112 thanks to 0xInfection
- many WAF plugins now have multiple methods of detection
- fixed a number of reported issues and bugs identified during testing and analysis
- general improvement of attack methods
- removed some old checks that were not accurate
- new ASCII art with amazing ANSI colors

This update was possible thanks to 0xInfection 's new WAF detections, polishing of existent ones, fixes of a number of bugs and the ASCII art of course!

Page 1 of 2

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.