From b350fadc9594dc7c5ecc4d6c853399f5b5467067 Mon Sep 17 00:00:00 2001
From: virusdefender <virusdefender@outlook.com>
Date: Fri, 12 Apr 2019 19:17:00 +0800
Subject: [PATCH] add SafeLine waf detection

---
 waf/safeline.py | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 waf/safeline.py

diff --git a/waf/safeline.py b/waf/safeline.py
new file mode 100644
index 000000000..ee111ce1f
--- /dev/null
+++ b/waf/safeline.py
@@ -0,0 +1,20 @@
+#!/usr/bin/env python2
+
+"""
+Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
+See the file 'LICENSE' for copying permission
+"""
+import re
+
+from lib.core.settings import WAF_ATTACK_VECTORS
+
+__product__ = "SafeLine Next Gen Web Application Firewall (SafeLine)"
+
+def detect(get_page):
+    for vector in WAF_ATTACK_VECTORS:
+        page, headers, code = get_page(get=vector)
+        page = page or ''
+        if code >= 400 and re.search(r"<!-- event_id: \w{32} -->", page) is not None and 'SafeLine' in page:
+            return True
+
+    return False