Mathieu Dessus has create a patch for WAFWOOF, a tool that identifies WAFs remotely using fingerpriting to identify Imperva SecureSphere. As far as I understand the patch simply checks that the HTTP response version is 1.0. I am not sure and would appreciate any comment on why this would identify a SecureSphere.
You can find the patch here.
Subscribe:
Xiom is the place to find information about Web Application Firewalls (WAFs) including reviews, analysis, announcements and research. Tune to the RSS channel to get every bit of information or subscribe to the newsletter to receive only in depth articles.
Xiom also leasd and hosts the Web Hacking Incidents Database, a Web Application Security Consortium project aimed at maintaining a list of web applications related security incidents.
Xiom is a community web site lead by Ofer Shezaf.
See my blog post.
- Amichai Shulman