LinuxCommandLibrary

whatweb

Web technology fingerprinting and identification

TLDR

Scan website

$ whatweb [https://example.com]
copy
Verbose output
$ whatweb -v [url]
copy
Aggressive scan
$ whatweb -a [3] [url]
copy
Output to file
$ whatweb --log-verbose=[output.txt] [url]
copy
Multiple URLs
$ whatweb [url1] [url2]
copy
JSON output
$ whatweb --log-json=[output.json] [url]
copy

SYNOPSIS

whatweb [-v] [-a level] [--log-verbose file] urls

DESCRIPTION

whatweb is a web scanner that identifies technologies used by websites, including content management systems, web frameworks, server software, JavaScript libraries, and analytics platforms. It sends requests to target URLs and analyzes responses to fingerprint the specific products and versions in use.
The tool uses a plugin-based architecture with over 1,800 plugins for recognizing different technologies. Four aggression levels control scanning intensity, from passive analysis of a single page request to aggressive testing that makes additional requests to probe for specific technologies.
Output can be formatted as JSON, XML, verbose text, or SQL for database storage. Multiple URLs can be scanned in a single run, and the tool supports authentication, custom headers, and proxy configuration for testing behind login pages or through intermediary servers.

PARAMETERS

-v

Verbose output.
-a LEVEL
Aggression (1-4).
--log-verbose FILE
Verbose log.
--log-json FILE
JSON output.
-q
Quiet mode.
--user-agent UA
Custom UA.

CAVEATS

Authorized use only. May be detected. Ruby required.

HISTORY

WhatWeb was created for web reconnaissance, identifying technologies and features on websites.

SEE ALSO

wappalyzer(1), nmap(1), nikto(1)

> TERMINAL_GEAR

Curated for the Linux community

Copied to clipboard

> TERMINAL_GEAR

Curated for the Linux community