Repository navigation
Releases: Lu1sDV/wafmeow
Release list
wafmeow v3.0.2
wafmeow v3.0.2
wafw00f's fingerprints. Go speed. Pipeline-native.
A Go CLI and library with 172 catalogue identities, saved-evidence matching, and structured output for pipelines.
Source: 7948f35fb43c103000ed560063b51ff4ac3419b8. Compiler: go1.27.3.
Migration from wafw00f · Evidence API · Security policy.
All 5 native archives passed required CI, native package tests, extracted-archive offline smoke and binary vulnerability scans. See manifest.json for exact source, compiler, binary and archive hashes; SHA256SUMS also covers the manifest and generated Homebrew formula. Stable delivery updates Lu1sDV/homebrew-tap after its audit and test pass; check the release workflow's Homebrew job before installing this version through the tap.
Homebrew rename: Existing Lu1sDV/tap/wafme0w installations do not migrate through brew upgrade. After the new formula is published, install and verify wafmeow before removing the old package.
Synthetic demo captures are examples, not detection-accuracy evidence. Use network scanning only where authorized.
Version-specific changes: https://github.com/Lu1sDV/wafmeow/releases/tag/v3.0.2 (generated changes below).
What's Changed
Full Changelog: v3.0.1...v3.0.2
Contributors
Assets 11
wafmeow v3.0.1
wafmeow v3.0.1
wafw00f's fingerprints. Go speed. Pipeline-native.
A Go CLI and library with 172 catalogue identities, saved-evidence matching, and structured output for pipelines.
Source: 70d33356e7c7b4998f4dce01ee300703c229ef1d. Compiler: go1.27.3.
Migration from wafw00f · Evidence API · Security policy.
All 5 native archives passed required CI, native package tests, extracted-archive offline smoke and binary vulnerability scans. See manifest.json for exact source, compiler, binary and archive hashes; SHA256SUMS also covers the manifest and generated Homebrew formula. Stable delivery updates Lu1sDV/homebrew-tap after its audit and test pass; check the release workflow's Homebrew job before installing this version through the tap.
Homebrew rename: Existing Lu1sDV/tap/wafme0w installations do not migrate through brew upgrade. After the new formula is published, install and verify wafmeow before removing the old package.
Synthetic demo captures are examples, not detection-accuracy evidence. Use network scanning only where authorized.
Version-specific changes: https://github.com/Lu1sDV/wafmeow/releases/tag/v3.0.1 (generated changes below).
What's Changed
Full Changelog: v3.0.0...v3.0.1
Contributors
Assets 11
wafmeow v3.0.0
wafmeow v3.0.0
wafw00f's fingerprints. Go speed. Pipeline-native.
A Go CLI and library with 172 catalogue identities, saved-evidence matching, and structured output for pipelines.
Source: b41e7d862be23ef71e8dc461558e17828ac32220. Compiler: go1.27.3.
Migration from wafw00f · Evidence API · Security policy.
All 5 native archives passed required CI, native package tests, extracted-archive offline smoke and binary vulnerability scans. See manifest.json for exact source, compiler, binary and archive hashes; SHA256SUMS also covers the manifest and generated Homebrew formula. Stable delivery updates Lu1sDV/homebrew-tap after its audit and test pass; check the release workflow's Homebrew job before installing this version through the tap.
Homebrew rename: Existing Lu1sDV/tap/wafme0w installations do not migrate through brew upgrade. After the new formula is published, install and verify wafmeow before removing the old package.
Synthetic demo captures are examples, not detection-accuracy evidence. Use network scanning only where authorized.
Version-specific changes: https://github.com/Lu1sDV/wafmeow/releases/tag/v3.0.0 (generated changes below).
What's Changed
- perf: reuse HTTP/1 connections between probe requests by @Lu1sDV in #16
- ci: avoid duplicate PR runs and bound workflow steps by @Lu1sDV in #18
- refactor!: rename wafmeow by @Lu1sDV in #17
- fix: preserve evidence and browser export boundaries by @Lu1sDV in #20
- probe: consolidate active probes into a central polyglot (8 requests) by @Lu1sDV in #21
- test: pin combined-probe generic attribution and clean controls by @Lu1sDV in #22
- fix: align pkSecurity rules and strengthen fingerprint regression gates by @Lu1sDV in #19
- Revise benchmark section in README.md by @Lu1sDV in #24
- refactor: make scan modes explicit with --fast and --deep by @Lu1sDV in #25
- Benchmarks: publish 600-target VPS comparison by @Lu1sDV in #23
- Change baseline option to fast in README commands by @Lu1sDV in #26
- cli: improve help, examples and recovery diagnostics by @Lu1sDV in #27
- chore!: migrate WAFMeow Go module to v3 by @Lu1sDV in #29
- ci: verify terminal UX and harden release checks by @Lu1sDV in #28
Full Changelog: v2.0.1...v3.0.0
Contributors
Assets 11
wafme0w v2.0.1
wafme0w v2.0.1
wafw00f's fingerprints. Go speed. Pipeline-native.
A Go CLI and library with 172 catalogue identities, saved-evidence matching, and structured output for pipelines.
Source: 14a0899ece2044492746b18b7837f0159a431b66. Compiler: go1.27.3.
Migration from wafw00f · v2 evidence API · Security policy.
All 5 native archives passed required CI, native package tests, extracted-archive offline smoke and binary vulnerability scans. See manifest.json for exact source, compiler, binary and archive hashes; SHA256SUMS also covers the manifest and generated Homebrew formula. Stable delivery updates Lu1sDV/homebrew-tap after its audit and test pass; check the release workflow's Homebrew job before installing this version through the tap. Synthetic demo captures are examples, not detection-accuracy evidence. Use network scanning only where authorized.
Version-specific changes: https://github.com/Lu1sDV/wafme0w/releases/tag/v2.0.1 (generated changes below).
What's Changed
- ci: authenticate GHCR attestation with the default docker config by @Lu1sDV in #9
- release: omit redundant Homebrew formula version by @Lu1sDV in #10
- docs: document the Homebrew tap and the GHCR attestation fix by @Lu1sDV in #11
- docs: record optional acquisition backend ADR by @Lu1sDV in #12
- docs: simplify benchmarks and include WAF detection results by @Lu1sDV in #13
- cli: colour and order probe diagnostics on stderr by @Lu1sDV in #14
- ci: deliver releases from one manual action by @Lu1sDV in #15
Full Changelog: v2.0.0...v2.0.1
Contributors
Assets 11
wafme0w v2.0.0
wafme0w v2.0.0
wafw00f's fingerprints. Go speed. Pipeline-native.
A Go CLI and library with 172 catalogue identities, saved-evidence matching, and structured output for pipelines.
Source: 5a1866d6e5021fddf5972d4a6d3c020ff08538b1. Compiler: go1.27.3.
Migration from wafw00f · v2 evidence API · Security policy.
All 5 native archives passed required CI, native package tests, extracted-archive offline smoke and binary vulnerability scans. See manifest.json for exact source, compiler, binary and archive hashes; SHA256SUMS also covers the manifest and generated Homebrew formula. The formula is a release asset for an operator-managed tap; no public Homebrew tap is implied. Synthetic demo captures are examples, not detection-accuracy evidence. Use network scanning only where authorized.
Version-specific changes: https://github.com/Lu1sDV/wafme0w/releases/tag/v2.0.0 (generated changes below).
What's Changed
- Harden acquisition shutdown and container distribution by @Lu1sDV in #4
- docs: expand Go library usage and shutdown guidance by @Lu1sDV in #5
- Fix release blockers and prepare v2 launch by @Lu1sDV in #6
- docs: remove installation paragraph above README demo by @Lu1sDV in #7
- docs: publish 2,000-target live comparison by @Lu1sDV in #8
New Contributors
Full Changelog: v1.0.0...v2.0.0
Contributors
Assets 11
wafme0w v1.0.0
wafme0w v1.0.0
Blazingfast, lightweight WAF detector.
AI-assisted development, not runtime detection: wafme0w uses static fingerprints, not an AI model or a hosted AI service.
This release follows the v1 compatibility baseline: result schema 1 (with the optional browser field), the CSV column layout, CLI flags and exit codes, and the documented Go library API. New in v1.0.0: optional local headless Chromium navigation and viewport screenshots on Linux. Upgrading from a pre-1.0 release involves breaking Go library and structured-output changes; review the current library API and result records before upgrading integrations.
Each archive includes the native CLI binary, LICENSE.md and assets/demo/captures.jsonl. Native package tests and binary help/version/offline-evidence smoke checks run on Linux x64, macOS ARM64 and Windows x64 before publication. SHA256SUMS covers all three archives. The binary reports its embedded build/VCS identity, which need not equal the release tag.
Demo captures are synthetic examples, not observations of deployed WAFs or evidence of detection accuracy. Use network scanning only where authorized.
wafme0w v0.3.1
wafme0w v0.3.1: pre-1.0 relaunch
Blazingfast, lightweight and AI Assisted WAF detector.
AI assisted development, not runtime detection: wafme0w uses static fingerprints, not an AI model or a hosted AI service.
This pre-1.0 relaunch includes breaking Go library and structured-output changes from older versions. Review the current library API and result records before upgrading integrations; do not assume old callers or output parsers remain compatible.
- README: installation, CLI and Go library
- Offline CLI demo
- Synthetic demo captures
- Incomplete is not negative
- Literal matching without changing semantics
Each archive includes the native CLI binary, LICENSE.md and assets/demo/captures.jsonl. Native package tests and binary help/version/offline-evidence smoke checks run on Linux x64, macOS ARM64 and Windows x64 before publication. SHA256SUMS covers all three archives. The binary reports its embedded build/VCS identity, which need not equal the release tag.
Demo captures are synthetic examples, not observations of deployed WAFs or evidence of detection accuracy. Use network scanning only where authorized.