handbook/tools/1.Information-Gathering/2.Active-Reconnaissance/Whatweb.md
2024-08-31 01:07:22 +02:00

1.3 KiB

What is WhatWeb?

WhatWeb is an open-source tool used for fingerprinting web technologies utilized by a website. It analyzes the HTTP headers, HTML content, and other aspects of a web page to identify the software and frameworks being used, such as CMS platforms, server types, JavaScript libraries, and more.

Common Use and Commands:

WhatWeb is commonly used by security professionals and web developers to gather information about a target website's technology stack. To utilize WhatWeb, follow these steps:

whatweb [OPTIONS] TARGET_URL

Common options include:

  • -v: Verbose mode, providing more detailed output.
  • -a: Aggressive mode, increasing the intensity of detection.
  • -i: Ignore IP addresses in URLs.
  • -l: Limit requests to a specific URL or directory.

Example:

whatweb -v example.com

Output may include:

  • Detected CMS platforms (e.g., WordPress, Joomla).
  • Server information (e.g., Apache, Nginx).
  • JavaScript libraries and frameworks.
  • Security headers and configurations.

More Information:

For additional details on WhatWeb and its usage, users can refer to the tool's documentation or visit the official website. Additionally, the source code for WhatWeb is available on GitHub: https://github.com/urbanadventurer/WhatWeb.