WhatWeb - Website Identification Tool | Backtrack

WhatWeb - Website Identification Tool | Backtrack

Introduction

According to their website, WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1000 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more.

Features:

• Over 1000 plugins
• Control the trade off between speed/stealth and reliability
• Plugins include example URLs
• Performance tuning. Control how many websites to scan concurrently.
• Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB, SQL.
• Proxy support including TOR
• Custom HTTP headers
• Basic HTTP authentication
• Control over webpage redirection
• Nmap-style IP ranges
• Fuzzy matching
• Result certainty awareness
• Custom plugins defined on the command line

Procedure

How to open it:-

• To open it goto, Backtrack >> Information Gathering >> Web Application Analysis >> CMS Identification >> whatweb or you can also open it through Terminal by opening this directory cd /pentest/enumeration/web/whatweb.

Simple Usage:-

• ./whatweb <url>

AGGRESSION LEVEL Mode Usage:-

• There are four types of Aggression Level
  
  
  1. Passive
  2. Polite
  3. Aggressive
  4. Heavy
     
• To use Aggression Levels, run this command ./whatweb -a <level no., default is 1> <url>

 


Verbose Mode Usage:-

• To use verbose mode, run this command ./whatweb -v <url>

Observation

In this tutorial, we have learned some usages of whatweb tool and also why this tool used for.

Feel Free To Leave A Comment If Our Article has Helped You, Support Us By Making A Small Contribution, Thank You!