WhatWeb - Website Identification Tool | Backtrack

http://m14hackersworld.blogspot.com

WhatWeb - Website Identification Tool | Backtrack

WhatWeb - Website Identification Tool | Backtrack

Introduction

According to their website, WhatWeb identifies websites. Its goal is to answer the question, "What is that Website?". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.
WhatWeb has over 1000 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more.

Features:

1. Over 1000 plugins
2. Control the trade off between speed/stealth and reliability
3. Plugins include example URLs
4. Performance tuning. Control how many websites to scan concurrently.
5. Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB, SQL.
6. Proxy support including TOR
7. Custom HTTP headers
8. Basic HTTP authentication
9. Control over webpage redirection
10. Nmap-style IP ranges
11. Fuzzy matching
12. Result certainty awareness
13. Custom plugins defined on the command line

Procedure

How to open it:-

To open it goto, Backtrack >> Information Gathering >> Web Application Analysis >> CMS Identification >> whatweb or you can also open it through Terminal by opening this directory
cd /pentest/enumeration/web/whatweb.

Simple Usage:-
./whatweb

AGGRESSION LEVEL Mode Usage:-
There are four types of Aggression Level

1. Passive
2. Polite
3. Aggressive
4. Heavy

To use Aggression Levels,run  this command ./whatweb -a

Verbose Mode Usage:-

To use verbose mode, run this command ./whatweb -v

Observation

In this tutorial, we have learned some usages of whatweb tool and also why this tool used for.