cdncheck icon indicating copy to clipboard operation
cdncheck copied to clipboard

Function to detect if given IP/CIDR is WAF

Open ehsandeep opened this issue 3 years ago • 0 comments

This project started with base idea to detect if given IP/CIDR belongs to known CIDR ranges or not and further used with other ProjectDiscovery project to build additional feature on the top of it, for example, in naabu to avoid full port scanning if given IP is CDN, while having CDN information itself is useful information for the reconnaissance purpose but it might not be necessary that all the CDN should be excluded from the port scan, and there are also WAF which definitely needs to be excluded from the scan, for example: https://github.com/projectdiscovery/naabu/issues/341, this can be easily extended to adding WAF ranges into CDN, but to avoid further confusion and extend the list more, it's required to differentiate between WAF (CDNs) and Generic CDNs, as a results, we need to create another function, similar to isCdn to detect isWaf which can be further utilized by other tools as needed.

Additional context: https://github.com/projectdiscovery/cdncheck/discussions/7

This differentiation will allow to be provide more flexible data, where WAF ranges can be utilized to exclude from extended port scan, and generic CDN ranges can be used for information gathering / display purpose.

ehsandeep avatar Jun 06 '22 15:06 ehsandeep