| Tool | Description | Features |
|---|---|---|
Wappalyzer |
Browser extension and online service for website technology profiling. | Identifies a wide range of web technologies, including CMSs, frameworks, analytics tools, and more. |
BuiltWith |
Web technology profiler that provides detailed reports on a website's technology stack. | Offers both free and paid plans with varying levels of detail. |
WhatWeb |
Command-line tool for website fingerprinting. | Uses a vast database of signatures to identify various web technologies. |
Nmap |
Versatile network scanner that can be used for various reconnaissance tasks, including service and OS fingerprinting. | Can be used with scripts (NSE) to perform more specialised fingerprinting. |
Netcraft |
Offers a range of web security services, including website fingerprinting and security reporting. | Provides detailed reports on a website's technology, hosting provider, and security posture. |
wafw00f |
Command-line tool specifically designed for identifying Web Application Firewalls (WAFs). | Helps determine if a WAF is present and, if so, its type and configuration. |
Banner Grabbing Using Curl:
Use curl to retrieve HTTP response headers, which often reveal the server banner.
curl -I http://example.com
Or:
curl --head http://example.com
To see all response headers (including the body):
curl -i http://example.com
To inspect only the Server header:
curl -s -I http://example.com | grep -i "Server"
Example output:
HTTP/1.1 200 OK
Server: Apache/2.4.58 (Ubuntu)
The Server header is the banner, which may reveal the web server software and version. Some servers hide or modify this information for security reasons.
wafw00f is a tool used to detect whether a website is protected by a Web Application Firewall (WAF) and, if possible, identify the WAF vendor.
To install wafw00f, you can use pip3:
shellsession
Moyinthehacker@htb[/htb]$ pip3 install git+https://github.com/EnableSecurity/wafw00f