Whatweb


whatweb -a 3 www.wired.com - for aggressive scan

In Kali Linux, "WhatWeb" is a reconnaissance tool used for web fingerprinting. It's designed to identify and fingerprint web applications and their technologies by examining various aspects of their responses. Here's how it works:

  1. Fingerprinting: WhatWeb analyzes the HTTP responses received from web servers and identifies specific technologies, frameworks, CMS (Content Management Systems), server software, and other components used in the target web application.

  2. Passive Scanning: WhatWeb performs passive scanning, meaning it doesn't actively send requests to the target but rather analyzes the responses received while browsing the web application.

  3. Detection Techniques: It uses a combination of techniques such as analyzing HTTP headers, HTML and JavaScript code, specific URLs, error messages, and other patterns to infer information about the web application's technology stack.

  4. Database: WhatWeb maintains a database of known signatures for various web technologies, which it uses for comparison during the fingerprinting process.

  5. Output: The tool provides detailed output, listing the identified technologies and providing additional information about each one, such as version numbers and any vulnerabilities associated with them.

  6. Usage: To use WhatWeb in Kali Linux, you typically open a terminal window and execute the WhatWeb command followed by the URL of the target web application. You can also specify various options and flags to customize the scanning process.


#recconaissance #footprinting #informationgathering #informationgatheringtools #webscanner

Comments

Popular posts from this blog

Linux Commands part - 2