urbanadventurer/WhatWeb

Health v2 · maintenance only

Adoption not part of the score

6800 stars · 1007 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

WhatWeb is a command-line web scanner that identifies the technologies powering websites, including CMSs, web servers, JavaScript libraries, and analytics packages, using over 1800 plugins. It supports adjustable aggression levels, from fast stealthy single-request scans to thorough penetration-test modes, and detects version numbers, email addresses, and SQL errors.

Use cases

• identify what technologies a website is built with
• fingerprint CMS and web server versions during recon
• detect WordPress sites even with generator tags removed
• enumerate web technologies across many target URLs
• gather reconnaissance before a penetration test
• find exposed email addresses and SQL errors on a site

When to choose

• you need fast, scriptable web technology fingerprinting from the CLI
• you want a large plugin ecosystem covering CMSs, servers, and frameworks
• you are doing recon or appsec assessment on public websites
• you need a tool available in Kali Linux and other pentest toolkits

When to avoid

• you need a full vulnerability scanner rather than technology identification
• you want a GUI-driven scanning experience
• you need authenticated or deep crawling of web applications
• you require active exploitation capabilities

Facets

cli-tool · maturity stable

security penetration-testing http-client web-scraping security penetration-testing web-development developer-tools windows cli ruby web-fingerprinting recon technology-detection owasp kali-linux appsec linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="urbanadventurer/WhatWeb")