Next-generation web server fingerprinting tool that identifies CMS platforms, frameworks, and technologies.
whatweb {target} -v ๐ target โ url whatweb {target} -v Sandbox: execFile · Timeout: 120s
web.fingerprint web.discovery.technology web.recon.cms security.fingerprint.http | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
url | string | Yes | - | Target URL to fingerprint | -u |
verbose | boolean | No | - | Verbose output including all plugins (-v) | -v |
aggression | integer | No | 1 | Aggression level 1-5 (-a) | -a |
log-verbose | string | No | - | Log verbose output to file (-l) | -l |
output | string | No | - | Output file (-o) | -o |
user-agent | string | No | - | Custom User-Agent header (-U) | -U |
input-file | string | No | - | Read targets from file (-i) | -i |
threads | integer | No | 1 | Number of threads (-t) | -t |
proxy | string | No | - | Proxy URL (--proxy) | --proxy |
cookie | string | No | - | Cookie string (--cookie) | --cookie |
header | string | No | - | Custom HTTP header (--header) | --header |
plugins | string | No | - | List of plugins to run (--plugins) | --plugins |
quiet | boolean | No | - | Do not display brief banner (--quiet) | --quiet |
no-errors | boolean | No | - | Suppress error messages (--no-errors) | --no-errors |
color | boolean | No | - | Enable color output (--color) | --color |
h | boolean | No | - | Show this help | -h, --help |
q | boolean | No | - | Quick scan mode | -q, --quick |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
web.fingerprint.report | Technology fingerprint results | text/plain | - | verified |
Inputs
web.target.url Target URL to fingerprint
Outputs
web.fingerprint.results List of detected technologies
network_traffic Produces
web.fingerprint.resultsConsumes
web.target.url| Resource | Value |
|---|---|
| CPU | low |
| Memory | 64 MB |
| Network | low |
| Disk I/O | low |
Basic fingerprint scan
whatweb example.com Verbose output with all plugins
whatweb example.com -v Aggressive scan with level 3
whatweb example.com -a 3 Scan multiple targets from file
whatweb -i targets.txt Output results to file
whatweb example.com -o report.txt WhatWeb identifies websites by recognizing various content management systems, JavaScript libraries, web servers, and other technologies through HTTP response analysis.
# Simple fingerprint scan
whatweb example.com
# Verbose output with full plugin details
whatweb example.com -v
# Aggressive scan (level 3)
whatweb example.com -a 3
# Scan from file
whatweb -i targets.txt
| Level | Description |
|---|---|
| 1 | Passive: fast, minimal requests |
| 2 | Polite: moderate requests |
| 3 | Aggressive: active probing |
| 4 | Heavy: intensive scanning |
| 5 | Complete: all plugins at max depth |
# Verbose log to file
whatweb example.com -l verbose.log
# Colored output
whatweb example.com --color
# Quiet mode (no banner)
whatweb example.com --quiet