During a web application assessment, a penetration tester notices that several probes return generic 403 responses and that requests containing SQL-like syntax are dropped inconsistently. Before continuing active testing, the tester wants to identify whether a web application firewall is present and, if so, which product it is, so evasion techniques can be planned. Which tool is BEST suited to fingerprint the protective technology in front of the web application?