WhatWeb Is a Must Have Free Web Scanner App for Web Security Professionals
WhatWeb is a web technology identification and scanner tool that answers the question, "What is that Website?" It recognizes over 1800 web technologies, including CMS, analytics packages, and JavaScript libraries.
WhatWeb operates with adjustable aggression levels, allowing users to balance speed and reliability.
The default 'stealthy' mode uses only one HTTP request, suitable for public website scanning. More thorough plugins utilize various cues to identify technologies, ensuring accuracy even when common identifiers are removed.
WordPress Nightmare
For instance, its WordPress plugin employs multiple tests to confirm identification.
Features
- Over 1800 plugins
- Control the trade off between speed/stealth and reliability
- Performance tuning. Control how many websites to scan concurrently.
- Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB, ElasticSearch, SQL.
- Proxy support including TOR
- Custom HTTP headers
- Basic HTTP authentication
- Control over webpage redirection
- IP address ranges
- Fuzzy matching
- Result certainty awareness
- Custom plugins defined on the command line
- IDN (International Domain Name) support
License
GPL-2.0