Which tool scans and identifies web technologies such as CMS, analytics, and JavaScript libraries on a site?

Which tool scans and identifies web technologies such as CMS, analytics, and JavaScript libraries on a site?

• A. Vega
• B. Gobuster
• C. Intercepting Traffic from Browser Extensions
• D. WhatWeb

Answer: (D)

Identifying what technologies a site uses through fingerprinting its responses and assets is the key idea here. WhatWeb is built specifically for that purpose: it scans a site and fingerprints the technologies it runs by matching patterns in HTTP headers, HTML source, cookies, and the linked scripts and resources. WhatWeb checks for CMS platforms, analytics providers, and JavaScript libraries by comparing what it sees against a large database of signatures. This lets you learn if a site is WordPress, Drupal, or Joomla; whether Google Analytics or other analytics services are in use; and which libraries like jQuery or React are loaded, sometimes even revealing version families. Other options are geared toward different tasks. Vega focuses on vulnerability scanning of web apps, Gobuster is mainly a brute-force tool to discover hidden directories and files, and intercepting traffic from browser extensions is a technique for observing or altering traffic rather than automatically identifying the tech stack.

Identifying what technologies a site uses through fingerprinting its responses and assets is the key idea here. WhatWeb is built specifically for that purpose: it scans a site and fingerprints the technologies it runs by matching patterns in HTTP headers, HTML source, cookies, and the linked scripts and resources.

WhatWeb checks for CMS platforms, analytics providers, and JavaScript libraries by comparing what it sees against a large database of signatures. This lets you learn if a site is WordPress, Drupal, or Joomla; whether Google Analytics or other analytics services are in use; and which libraries like jQuery or React are loaded, sometimes even revealing version families.

Other options are geared toward different tasks. Vega focuses on vulnerability scanning of web apps, Gobuster is mainly a brute-force tool to discover hidden directories and files, and intercepting traffic from browser extensions is a technique for observing or altering traffic rather than automatically identifying the tech stack.