search

madeITBelgium / Wappalyzer

PHP Library that uncovers the technologies used on websites.
GNU General Public License v3.0
12 stars 7 forks source link

Header detection issues #2

Open daylightstudio opened 4 years ago

daylightstudio commented 4 years ago

I'm doing some testing on the pattern matching for the headers and it appears that the X-Powered-By can have multiple values: https://stackoverflow.com/questions/17266086/two-conflicting-x-powered-by-headers

Could the code be altered to include both of them? In my case, it would show the PHP version and the version of PLESK admin.

Also, the strtolower on the $headerName I believe is causing headers not to be matched correctly: https://github.com/madeITBelgium/Wappalyzer/blob/master/src/Wappalyzer.php#L386

madeITBelgium commented 4 years ago

Hi @daylightstudio I will check this out.

madeITBelgium commented 4 years ago

Your latest issue ($headerName) is already fixed, but not release I guess. https://github.com/madeITBelgium/Wappalyzer/commit/6d4620578296b96b83a0124e4f3dd4734d5fb9f9

At this moment I receive the headers in an array with key => value (https://github.com/madeITBelgium/Wappalyzer/blob/master/src/Wappalyzer.php#L78 ). I guess this makes it currently not possible to have double headers. I will check if I can get the raw data instead of the parsed headers from guzzle.