Interactive Fingerprinting

Fingerprinting: Extracting technical details about the technologies powering a website or web app.

Objectives:

Targeted attacks
Identifying Misconfigurations
Prioritising targets
Building a comprehensive profile

Techniques

Banner grabbing: Extract version, software, etc.
Analysing HTTP Headers: Ex X-Powered-By
Probing for Specific reponses: Cerrtains errors are specific to certain versions
Analysing Page Content: copyright, etc

Tools

Tool	Description	Features
`Wappalyzer`	Browser extension and online service for website technology profiling.	Identifies a wide range of web technologies, including CMSs, frameworks, analytics tools, and more.
`BuiltWith`	Web technology profiler that provides detailed reports on a website's technology stack.	Offers both free and paid plans with varying levels of detail.
`WhatWeb`	Command-line tool for website fingerprinting.	Uses a vast database of signatures to identify various web technologies.
`Nmap`	Versatile network scanner that can be used for various reconnaissance tasks, including service and OS fingerprinting.	Can be used with scripts (NSE) to perform more specialised fingerprinting.
`Netcraft`	Offers a range of web security services, including website fingerprinting and security reporting.	Provides detailed reports on a website's technology, hosting provider, and security posture.
`wafw00f`	Command-line tool specifically designed for identifying Web Application Firewalls (WAFs).	Helps determine if a WAF is present and, if so, its type and configuration.

Commands