urbanadventurer / WhatWeb

Next generation web scanner
https://www.morningstarsecurity.com/research/whatweb
GNU General Public License v2.0
5.46k stars 900 forks source link

ERROR Opening: https://*.com - end of file reached #376

Closed hktalent closed 2 years ago

hktalent commented 2 years ago

$ whatweb --url-prefix https:// 51pwn.com ERROR Opening: https://51pwn.com - end of file reached

but, here is ok

image
bcoles commented 2 years ago

51pwn.com is probably blocking the whatweb user agent.

./whatweb --user-agent "Mozilla/5.0" --url-prefix https:// 51pwn.com
https://51pwn.com [200 OK] Bootstrap, Country[UNITED STATES][US], HTML5, IP[199.180.115.7], JQuery, PoweredBy[M], Script[text/javascript], Strict-Transport-Security[max-age=15552000; includeSubDomains], Title[51pwn,exploit-poc], UncommonHeaders[x-dns-prefetch-control,x-download-options,x-content-type-options,referrer-policy], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
./whatweb --url-prefix https:// 51pwn.com
ERROR Opening: https://51pwn.com - end of file reached

Use of --url-prefix is unrelated.

./whatweb --user-agent "Mozilla/5.0" https://51pwn.com
https://51pwn.com [200 OK] Bootstrap, Country[UNITED STATES][US], HTML5, IP[199.180.115.7], JQuery, PoweredBy[M], Script[text/javascript], Strict-Transport-Security[max-age=15552000; includeSubDomains], Title[51pwn,exploit-poc], UncommonHeaders[x-dns-prefetch-control,x-download-options,x-content-type-options,referrer-policy], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
./whatweb https://51pwn.com
ERROR Opening: https://51pwn.com - end of file reached
hktalent commented 2 years ago

@bcoles thanks but,However, the components used are not fully enumerated

bcoles commented 2 years ago

the components used are not fully enumerated

WhatWeb plugins use various signatures for identifying web applications, hardware, JavaScript libraries, etc. If there's no WhatWeb plugin to detect something then it won't be detected.

wappalyzer focuses more on JavaScript components than WhatWeb, and the existing WhatWeb plugins for JavaScript libraries have not been updated in a long time.

hktalent commented 2 years ago

@bcoles I was curious how he recognized nodejs webserver。 http://wappalyzer.com/