WhatWeb - Website Identification Tool | Backtrack

WhatWeb - Website Identification Tool | Backtrack


According to their website, WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.
WhatWeb has over 1000 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more.


  1. Over 1000 plugins
  2. Control the trade off between speed/stealth and reliability
  3. Plugins include example URLs
  4. Performance tuning. Control how many websites to scan concurrently.
  5. Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB, SQL.
  6. Proxy support including TOR
  7. Custom HTTP headers
  8. Basic HTTP authentication
  9. Control over webpage redirection
  10. Nmap-style IP ranges
  11. Fuzzy matching
  12. Result certainty awareness
  13. Custom plugins defined on the command line


How to open it:-

To open it goto, Backtrack >> Information Gathering >> Web Application Analysis >> CMS Identification >> whatweb or you can also open it through Terminal by opening this directory
cd /pentest/enumeration/web/whatweb.

Simple Usage:-

There are four types of Aggression Level

  1. Passive
  2. Polite
  3. Aggressive
  4. Heavy

To use Aggression Levels,run  this command ./whatweb -a

Verbose Mode Usage:-

To use verbose mode, run this command ./whatweb -v


In this tutorial, we have learned some usages of whatweb tool and also why this tool used for.

Post a Comment

  1. BlueHost is ultimately the best web-hosting company for any hosting plans you might require.


M14 Network Inc. | Hassnain Arts