wafw00f
Fingerprints whether a WAF sits in front and which product it is.
It sends deliberately dirty requests and studies how the site answers (status codes, headers, cookies, block pages) to work out whether an application firewall sits in front and which vendor it is. Knowing this before fuzzing changes the plan: with a WAF in the way you must slow down, change the user agent and expect blocks that are not real 404s.
Family Web discovery & fuzzing
Flags -a -v -l
Concepts Web Content Discovery (Directory Fuzzing)
Cheatsheet Discovery & fuzzing
Installation
pipx install wafw00fUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.