whatweb
Web technology fingerprinting and identification
TLDR
Scan website
SYNOPSIS
whatweb [-v] [-a level] [--log-verbose file] urls
DESCRIPTION
whatweb is a web scanner that identifies technologies used by websites, including content management systems, web frameworks, server software, JavaScript libraries, and analytics platforms. It sends requests to target URLs and analyzes responses to fingerprint the specific products and versions in use.
The tool uses a plugin-based architecture with over 1,800 plugins for recognizing different technologies. Four aggression levels control scanning intensity, from passive analysis of a single page request to aggressive testing that makes additional requests to probe for specific technologies.
Output can be formatted as JSON, XML, verbose text, or SQL for database storage. Multiple URLs can be scanned in a single run, and the tool supports authentication, custom headers, and proxy configuration for testing behind login pages or through intermediary servers.
PARAMETERS
-v
Verbose output.-a LEVEL
Aggression (1-4).--log-verbose FILE
Verbose log.--log-json FILE
JSON output.-q
Quiet mode.--user-agent UA
Custom UA.
CAVEATS
Authorized use only. May be detected. Ruby required.
HISTORY
WhatWeb was created for web reconnaissance, identifying technologies and features on websites.
SEE ALSO
wappalyzer(1), nmap(1), nikto(1)
