WhatWeb: Web technology identification scanner
Ruby web scanner that identifies technologies and frameworks using 1800+ detection plugins.
Learn more about WhatWeb
WhatWeb is a reconnaissance tool that analyzes HTTP responses, HTML content, and server headers to fingerprint web technologies. It operates through a plugin-based architecture where each plugin contains multiple detection methods ranging from simple header checks to complex pattern matching. The scanner supports configurable aggression levels that control the trade-off between stealth and detection accuracy, from single-request passive scanning to comprehensive multi-request analysis. It outputs results in multiple formats including JSON, XML, and SQL for integration with security testing workflows.
Plugin Architecture
Uses over 1800 specialized plugins for technology detection, each containing multiple identification methods from subtle cues to obvious markers.
Aggression Levels
Configurable scanning intensity from stealthy single-request mode to aggressive multi-request analysis for penetration testing scenarios.
Multiple Output Formats
Supports various output formats including JSON, XML, MongoDB, and ElasticSearch for integration with different security tools and databases.
Improved cookie handling with new management options and HTTPS proxy fixes
- –Improved scalable and performant cookie handling so that cookies are retained between redirects
- –Added --no-cookies option to disable cookie handling
- –Added --cookie-jar option to save cookies to a file
- –Fixed error with HTTPS connections when using a proxy server
- –Fix typo in plugin-tutorial-7.rb
Tor .onion domain scanning support through HTTP proxy
- –Added support for scanning .onion (Tor) domains when using HTTP proxy
- –Bypasses DNS resolution for .onion domains to enable scanning through Tor proxy
- –Allows scanning of Tor hidden services without DNS resolution errors
- –Compatible with custom/internal TLDs
- –Fixed uninitialized constant error. Requires 'set' gem for specific Ruby versions
SSL/TLS security improvements with comprehensive cipher suite support
- –Updated version from 0.5.5 to 0.6.1
- –Improved SSL/TLS security with comprehensive cipher suite support (TLSv1, TLSv1.1, TLSv1.2, SSLv3, SSLv2)
- –Added SSLATTRIBUTES constant for verifymode
- –Replaced dynamic SSL parameter collection with explicit SSLContext configuration
- –Set verifymode to VERIFYNONE for maximum compatibility
Related Repositories
Discover similar tools and frameworks used by developers
Sigma
YAML-based detection rules with SIEM query conversion.
DVWA
PHP/MariaDB training platform for web security exploitation practice.
Mobile-Security-Framework-MobSF
Automated pen-testing for Android, iOS, and Windows applications.
Subfinder
Passive subdomain discovery via DNS resolution and validation.
OSINT-Framework
Structured web catalog of free OSINT tools.