WhatWeb
Command-line web scanner that fingerprints the technologies running on a website.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About WhatWeb
WhatWeb identifies what a website is built with, recognizing content management systems, web servers, analytics packages, JavaScript libraries and many other technologies. It uses a large set of plugins that examine responses to report versions, email addresses, account IDs and other details, with adjustable aggression levels to balance speed against thoroughness.
It is a Ruby command-line tool commonly used during reconnaissance in security assessments. It is intended only for testing systems you are authorized to assess.
Strengths
- Fingerprints hundreds of web technologies via plugins
- Adjustable aggression levels
- Actively maintained
Limitations
- Command-line only
- Intended only for authorized testing
Details
- Pricing
- FreeFree and open source under GPLv2.
- License
- GPL-2.0
- Developer
- Andrew Horton and Brendan Coles
- Platforms
- Windows, macOS, Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Fingerprinting website technologies during recon
- Categories
- Network tools, Security tools, Website testing
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to WhatWeb
Compare allSoftware that can replace WhatWeb for an important use case, and what changes if you switch.
HackerTarget WhatWeb Scan
An online scan that runs WhatWeb and Wappalyzer to fingerprint the technologies behind a website.
HackerTarget WhatWeb Scan runs WhatWeb and Wappalyzer from the browser with no local install, but is a closed hosted service with heavier use on paid plans.
Netcraft Site Report
A free web lookup that shows the hosting, server software and technologies behind any website.
Netcraft Site Report is a free web lookup showing hosting, server software, history and certificates, under a fair use policy instead of a local open-source tool.
Cloudflare Radar URL Scanner
Free Cloudflare web tool that scans a URL and reports its technologies, security and performance details.
Cloudflare Radar URL Scanner is a free proprietary web service reporting technologies plus security and performance, checking one public URL at a time.
Similar software
Related functionality, not necessarily a direct replacement.
wafw00f
Command-line tool that identifies and fingerprints web application firewalls in front of a site.
Nikto
Web server scanner for risky files, outdated software and misconfigurations.
Nuclei
A fast vulnerability scanner driven by YAML templates contributed by thousands of security researchers.
dirsearch
Web path scanner for discovering hidden directories and files.
Gobuster
Check candidate web paths and network names during security testing.
