WAF Header'ları · WAF Headers
| Header | Değer / Value | Açıklama / Description |
|---|---|---|
| True-Client-IP | 216.73.216.126 |
Kullanıcının gerçek IP adresi
User's real IP address
|
| True-Client-Port | 21247 |
Kullanıcının kaynak (source) portu
User's source port
|
| X-Forwarded-For | 216.73.216.126, 216.73.216.126 |
Proxy zincirindeki tüm IP adresleri
IP address chain through proxies
|
| X-Forwarded-Proto | https |
Client'ın WAF'a bağlandığı protokol (http/https)
Protocol used by the client to connect to WAF
|
| X-Forwarded-Scheme | https |
X-Forwarded-Proto ile aynı; alternatif header
Same as X-Forwarded-Proto; alternative header
|
| X-Forwarded-Host | wafdemo.enes.wtf |
Client'ın istediği orijinal Host değeri
Original Host value requested by the client
|
| X-Forwarded-Port | 21247 |
Client'ın bağlandığı orijinal port
Original port the client connected to
|
| X-Real-IP | 216.73.216.126 |
Gerçek IP adresi (Nginx uyumluluğu için)
Real IP address (Nginx compatibility)
|
| Forwarded | for=216.73.216.126;proto=https;host=wafdemo.enes.wtf |
RFC 7239 standart formatında yönlendirme bilgisi
Forwarding info per RFC 7239 standard
|
Demo Endpoint'ler · Demo Endpoints
curl Örnekleri · curl Examples
Header'ları JSON olarak al · Get all headers as JSON
curl -v https://wafdemo.enes.wtf/api/headers
HTTP → HTTPS yönlendirme testi · HTTP to HTTPS redirect test
curl -v http://wafdemo.enes.wtf/
JS Challenge endpoint
curl -v https://wafdemo.enes.wtf/upload
# JS Challenge aktifse WAF bu isteği engeller · WAF blocks curl when JS Challenge is active
# JS Challenge aktifse WAF bu isteği engeller · WAF blocks curl when JS Challenge is active
CAPTCHA endpoint
curl -v https://wafdemo.enes.wtf/secure
# CAPTCHA aktifse WAF bu isteği engeller · WAF blocks curl when CAPTCHA is active
# CAPTCHA aktifse WAF bu isteği engeller · WAF blocks curl when CAPTCHA is active
WAF header'larını manuel göndererek doğrudan test · Test directly with manual WAF headers
curl -v \
-H "True-Client-IP: 1.2.3.4" \
-H "X-Forwarded-Proto: https" \
-H "X-Forwarded-Host: wafdemo.enes.wtf" \
http://localhost:8080/api/headers
# WAF olmadan, backend'e doğrudan header gönderir · Send headers directly to backend without WAF
-H "True-Client-IP: 1.2.3.4" \
-H "X-Forwarded-Proto: https" \
-H "X-Forwarded-Host: wafdemo.enes.wtf" \
http://localhost:8080/api/headers
# WAF olmadan, backend'e doğrudan header gönderir · Send headers directly to backend without WAF
Healthcheck
curl https://wafdemo.enes.wtf/health