Web Application Firewall WAF Fingerprinting wafw00f wafw00f <URL> Input known bad payload to understand WAF response *Input known good payload to understand standard response