search

rverton / webanalyze

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.
MIT License
955 stars 137 forks source link

Add version detection from Wappalyzers regular expressions #6

Closed rverton closed 7 years ago

rverton commented 7 years ago

Wappalyzer makes use of appended strings for version detection like here:

        "IIS": {
        "cats": [
            "22"
        ],
        "headers": {
            "Server": "IIS(?:/([\\d.]+))?\\;version:\\1"
        },
        "icon": "IIS.png",
        "implies": "Windows Server",
        "website": "http://www.iis.net"
    },

If split this "additiona field" starting from a ;, we can also parse this information.

rverton commented 7 years ago

Basic version detection added in 6b035b248504f2dd1d5e74878400f2de2ef31062. Not all version methods are added (like the ternary operator), but this should work for most versions. Wappalyzer implementation can be found here: https://github.com/AliasIO/Wappalyzer/blob/master/src/wappalyzer.js#L68