WhatWeb
Identify web technologies behind a site.
KaliParrotlow
pkg: whatweb
WhatWeb fingerprints CMS, frameworks, servers, analytics and libraries from HTTP responses and page content.
Syntax
whatweb [-a level] {url}
Example
whatweb -a 3 https://example.com
Aggressively (-a 3) fingerprints technologies, versions and plugins on the site.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
whatweb
Usage examples
whatweb https://target.tld
Passive technology fingerprint.
whatweb -a 3 https://target.tld
Aggressive version detection.
Advantages
- Fast tech/version fingerprinting
- Adjustable aggression levels
- Plugin-extensible
Disadvantages
- Aggressive mode sends extra requests
- Heuristics can misidentify
- Version detection not guaranteed
Tags
#web#fingerprint
Official docs: WhatWeb ↗
Related commands
Frequently asked questions
What is WhatWeb used for?
WhatWeb fingerprints CMS, frameworks, servers, analytics and libraries from HTTP responses and page content.
What is an example WhatWeb command?
A common example is: whatweb -a 3 https://example.com — Aggressively (-a 3) fingerprints technologies, versions and plugins on the site.
Is WhatWeb part of Kali Linux?
Yes. WhatWeb ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install whatweb.
What category of security tool is WhatWeb?
WhatWeb is a Information Gathering tool with a low-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.