Skip to content

Fix Huawei WAF detection rule: server header returns elb in most cases#12022

Merged
ritikchaddha merged 1 commit into
projectdiscovery:mainfrom
serdarbsgn:fix/huawei-waf-detection
May 1, 2025
Merged

Fix Huawei WAF detection rule: server header returns elb in most cases#12022
ritikchaddha merged 1 commit into
projectdiscovery:mainfrom
serdarbsgn:fix/huawei-waf-detection

Conversation

@serdarbsgn
Copy link
Copy Markdown
Contributor

Template / PR Information

Huawei WAF detection template didn't detect an app behind CloudWAF, problem relates to response header not returning Server: CloudWAF, but Server: elb in the cases I've tried, so changed that alongside with the (?) typo in - '(?)content="CloudWAF"' regex to (?i) too.

  • Updated http/technologies/waf-detect/huaweicloud patterns
  • References: used https://consumer.huawei.com/tr/ (yes /tr/ is behind CloudWAF while original site isn't) to test CloudWAF pattern alongside some others, this correctly detects CloudWAF while older version didn't.

I've validated this template locally?

  • [ x] YES
  • NO

@GeorginaReeder
Copy link
Copy Markdown

Thanks for your contribution @serdarbsgn , we appreciate it!

As a token of appreciation for your valuable contribution, you can grab some cool PD Stickers from here http://nux.gg/stickers.

We also have a Discord server, which you’re more than welcome to join. It's a great place to connect with fellow contributors and stay updated with the latest developments!

@DhiyaneshGeek DhiyaneshGeek self-assigned this Apr 30, 2025
@DhiyaneshGeek DhiyaneshGeek added good first issue Good for newcomers Done Ready to merge labels Apr 30, 2025
@ritikchaddha ritikchaddha merged commit 7d67ee7 into projectdiscovery:main May 1, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Done Ready to merge good first issue Good for newcomers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants