urbanadventurer/WhatWeb

Features

• Application Fingerprinters - Identifies the software stack powering a website by matching HTTP responses against a library of over 1800 signatures.
• Web Technology Signature Matchers - Matches HTTP responses against over 1800 signatures to identify CMS platforms, libraries, and servers.
• Scan Aggression Levels - Controls the trade-off between scan speed and thoroughness by adjusting request depth per target.
• HTTP Response Fingerprint Extractors - Extracts software versions, user accounts, and hardware metadata from HTTP headers and page content.
• Text Pattern Matching - Searches for literal strings or regular expressions in HTML and HTTP headers to identify technologies.
• Passive and Aggressive Modes - Provides both passive analysis of existing responses and aggressive probing of additional URLs for verification.
• Hybrid Analysis Scanners - Identifies technologies through HTTP header analysis alone or by probing additional URLs for deeper verification.
• Security Reconnaissance Tools - Probes websites to enumerate software versions, user accounts, and misconfigurations for vulnerability assessment.
• Detection Plugin Interfaces - Supports custom detection rules using text patterns, regular expressions, MD5 hashes, and Google dork queries for extensible scanning.
• Metadata Scanners - Probes websites to detect software versions, user accounts, and technical metadata from HTTP headers and page markup.
• Web Server Fingerprinting - Recognizes web server software by analyzing HTTP response headers and known server fingerprints.
• Web Application Fingerprinters - Scans HTTP responses to detect known CMS platforms, forums, and other web applications by matching fingerprints.
• Web Technology Detection - Identifies web technologies by analyzing HTTP headers and page content without sending additional requests.
• Version Number Extractors - Extracts version numbers from matched patterns and returns them as part of plugin output.
• Concurrent Target Managers - Enables parallel scanning of many websites simultaneously with adjustable concurrency and timeouts.
• Device and Hardware Identification - Matches HTTP headers and server banners against known signatures to recognize routers, webcams, and embedded devices.
• Obscured Platform Detectors - Uses multiple tests per technology, such as checking favicons and file paths, to identify hidden platforms.
• Scan Result Exporters - Outputs scan findings to JSON, XML, SQL, MongoDB, and Elasticsearch for integration with analysis pipelines.
• Scan Log Exporters - Outputs scan results to JSON, XML, SQL, MongoDB, and Elasticsearch for integration with analysis pipelines.
• Scan Configurations - Adjusts the number of HTTP requests per target to balance speed and thoroughness during scans.
• Aggression Level Selectors - Adjusts scan aggression levels to balance speed and thoroughness from a single request to deep probing.
• Web Version Extractors - Reads version information from headers, meta tags, and file paths to report exact software versions.
• Probing Plugins - Ships aggressive plugins that fetch extra URLs and check file hashes to confirm software identity.
• Scan Result Exporters - Exports scan results to JSON, XML, SQL, or Elasticsearch for integration with analysis pipelines.
• Scanning Performance Tuning - Tunes concurrency, timeouts, and output buffering to optimize scan speed and stability.
• Concurrent Target Scanners - Scans many websites concurrently with adjustable thread counts and timeouts for large-scale reconnaissance.
• Embedded Web Interface Fingerprinters - Recognizes the web interfaces of routers, cameras, and other embedded devices by matching unique fingerprints.
• Google Dorking Techniques - Uses Google Hacking Database query strings as signatures to identify web applications during scans.
• Tor Routing - Channels all HTTP traffic through a proxy server, including TOR, for anonymity during scans.
• Scan Filtering Tools - Limits scan results to targets matching custom text strings, regular expressions, or specific plugins.
• Embedded Third-Party Service Detectors - Detects embedded third-party services such as analytics, JavaScript libraries, CAPTCHAs, video players, and widgets.
• Ad-Hoc Detection Rules - Allows defining custom detection rules directly on the command line using text patterns or hashes.
• Username Extractors - Returns detected usernames from matched patterns as part of plugin output.
• Module Name Extractors - Returns detected module or component names alongside the main system identification.
• Web Metadata Extractors - Retrieves version numbers, email addresses, account IDs, and SQL errors from website responses and markup.
• Module Name Capturers - Captures module names from matched patterns and returns them as the plugin's module field.
• Content Hash Matchers - Identifies systems by computing MD5 hashes of URL content and comparing to known values.
• Multi-Format Exporters - Exports scan findings to JSON, XML, SQL, MongoDB, and Elasticsearch for external tool integration.
• Open Source Intelligence - Fingerprinting tool for identifying website technologies.
• Fingerprinting Tools - Tool for identifying web application frameworks and versions.
• Technology Fingerprinting - Next-generation web technology scanner.
• Network and Web Reconnaissance - Fingerprints web applications and servers.
• Security And Privacy - Website fingerprinter.
• Security Tools - Next-generation web scanner for fingerprinting
• Technology Fingerprinting - Identifies web technologies and CMS platforms on target websites.
• Web Application Analysis - Scanner for identifying web technologies and CMS versions.

Star history