WebTech- Identify Technologies Used on Websites - Written in Python
WebTech is a Python software that can identify web technologies by visiting a given website, parsing a single response file or replaying a request described in a text file. This way you can have reproducible results and minimize the requests you need to make to a target website.
The RECON phase in a Penetration Test is one among the most important ones. By being able to detect which software runs on the target it’s easier to search for vulnerabilities in a specific module or version.
WebTech scans websites and detect software and versions in use and can report data in a structured format like JSON or in a grepable text for later analysis.
CLI InstallationWebTech is available on pip:
pip install webtech
It can be also installed via setup.py:
python setup.py install --user
Burp IntegrationDownload Jython 2.7.0 standalone and install it into Burp.
In "Extender" > "Options" > "Python Environment":
- Select the Jython jar location
Finally, in "Extender" > "Extension":
- Click "Add"
- Select "py" or "Python" as extension format
- Select the Burp-WebTech.py file in this folder
UsageScan a website:
$ webtech -u https://example.com/
Target URL: https://example.com
$ webtech -u file://response.txt
Full usage:$ webtech -h
-h, --help show this help message and exit
-u URLS, --urls=URLS url(s) to scan
url(s) list file to scan
use this user agent
use a random user agent
custom database file
--oj, --json output json-encoded report
--og, --grep output grepable report
--udb, --update-db force update of remote db files
Post a Comment
Note: only a member of this blog may post a comment.