urbanadventurer / WhatWeb

Next generation web scanner

Home Page:https://www.morningstarsecurity.com/research/whatweb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ERROR Opening: https://*.com - end of file reached

hktalent opened this issue · comments

commented

$ whatweb --url-prefix https:// 51pwn.com
ERROR Opening: https://51pwn.com - end of file reached

but, here is ok
image

51pwn.com is probably blocking the whatweb user agent.

./whatweb --user-agent "Mozilla/5.0" --url-prefix https:// 51pwn.com
https://51pwn.com [200 OK] Bootstrap, Country[UNITED STATES][US], HTML5, IP[199.180.115.7], JQuery, PoweredBy[M], Script[text/javascript], Strict-Transport-Security[max-age=15552000; includeSubDomains], Title[51pwn,exploit-poc], UncommonHeaders[x-dns-prefetch-control,x-download-options,x-content-type-options,referrer-policy], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
./whatweb --url-prefix https:// 51pwn.com
ERROR Opening: https://51pwn.com - end of file reached

Use of --url-prefix is unrelated.

./whatweb --user-agent "Mozilla/5.0" https://51pwn.com
https://51pwn.com [200 OK] Bootstrap, Country[UNITED STATES][US], HTML5, IP[199.180.115.7], JQuery, PoweredBy[M], Script[text/javascript], Strict-Transport-Security[max-age=15552000; includeSubDomains], Title[51pwn,exploit-poc], UncommonHeaders[x-dns-prefetch-control,x-download-options,x-content-type-options,referrer-policy], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
./whatweb https://51pwn.com
ERROR Opening: https://51pwn.com - end of file reached
commented

@bcoles thanks
but,However, the components used are not fully enumerated

the components used are not fully enumerated

WhatWeb plugins use various signatures for identifying web applications, hardware, JavaScript libraries, etc. If there's no WhatWeb plugin to detect something then it won't be detected.

wappalyzer focuses more on JavaScript components than WhatWeb, and the existing WhatWeb plugins for JavaScript libraries have not been updated in a long time.

commented

@bcoles I was curious how he recognized nodejs webserver。 http://wappalyzer.com/