Skip to content

cardosource/myodReaktor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

myodReaktor é um detector WAFs (Web Application Firewalls) que aplica técnica de fingerprinting análise probabilística multifatorial,combinando verificação de header HTTP e HTTP/2, SSL incluindo análise de DOM e status de bloqueio, tem uma implementação de algoritmos intercambiáveis definindo contrato único que permite substituição dinâmica e se adaptando a resposta original.

saida da checkagem:

python myodReaktor.py -u https://xXx.com/id=11

 _____ _   _  ___   ___   ___   ___  ____ _   _ _____ ____  ______
 | | |  \_/  |   | |   \ |___/ |___ |___| |__/    |   |   | |____/
 | | |   |   |___| |___/ |   \_|___ |   | |  \_   |   |___| |    \_
 myodReaktor.py <url>                        :::WAF Detector Stealth



   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
   ---------------        ---------------        ---------------     
Checking connection |  Analyzing response |    Finalizing analysis

::: ============================================================ :::

{
  "target": "https://xXx.com/id=11",
  "timestamp": "2025-04-13T16:10:51.874664",
  "html_analysis": {
    "detected_wafs": [
      {
        "waf": "Sucuri Firewall",
        "company": "Sucuri",
        "evidence": "Regex: sucuri|cloudproxy|sucuri\\/cloudproxy"
      },
      {
        "waf": "GoDaddy WAF",
        "company": "GoDaddy",
        "evidence": "Regex: godaddy|secureserver\\.net|wpaas"
      }
    ]
  },
  "stealth_analysis": {
    "waf_detected": true,
    "waf_name": "Sucuri Firewall",
    "confidence": 0.8999999999999999,
    "evidence": "Header 'server' + Header 'x-sucuri-id' + Header 'x-sucuri-cache' | SSL Certificate match: Inc.",
    "blocked": false,
    "status_code": 200,
    "timestamp": "2025-04-13T16:10:51.874126",
    "protocol_analysis": {
      "http_version": "1.1",
      "http2_detected": false,
      "http2_evidence": null,
      "http2_confidence": 0
    }
  },
  "ssl_analysis": {
    "valid": true,
    "issuer": "GoDaddy.com, Inc.",
    "subject": "xXx.com.lb",
    "expiration": "xxxxxxxx",
    "issued": "x-x-x-x-x",
    "serial_number": "x-x-x-x-x",
    "signature_algorithm": "sha256WithRSAEncryption",
    "version": 2,
    "fingerprint": "x3:x3:x4:x4:x13",
    "protocol": "TLSv1.3",
    "cipher": "TLS_AES_256_GCM_SHA384"
  }
}


About

WAF Detector

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages