Whatweb — Веб-сканер нового поколения

17.09.2026 2 мин чтения kali сканирование и разведка

Что это

WhatWeb идентифицирует веб-сайты. Он распознает веб-технологии, включая системы управления контентом (CMS), платформы для блогов, пакеты статистики/аналитики, библиотеки JavaScript, веб-серверы и встроенные устройства.

Оригинал описания (EN)

WhatWeb identifies websites. It recognises web technologies including content management systems (CMS), blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices.

Пример использования

root@kali:~# whatweb -h


.$$$     $.                                   .$$$     $.
$$$$     $$. .$$$  $$$ .$$$$$$.  .$$$$$$$$$$. $$$$     $$. .$$$$$$$. .$$$$$$.
$ $$     $$$ $ $$  $$$ $ $$$$$$. $$$$$ $$$$$$ $ $$     $$$ $ $$   $$ $ $$$$$$.
$ $     $$$ $ $  $$$ $ $  $$$ $$' $ $ $$ $ $     $$$ $ $      $ $  $$$'
$. $     $$$ $. $$$$$$ $. $$$$$$ `$  $. $  :' $. $     $$$ $. $$$$   $. $$$$$.
$::$  .  $$$ $::$  $$$ $::$  $$$     $::$     $::$  .  $$$ $::$      $::$  $$$$
$;;$ $$$ $$$ $;;$  $$$ $;;$  $$$     $;;$     $;;$ $$$ $$$ $;;$      $;;$  $$$$
$$$$$$ $$$$$ $$$$  $$$ $$$$  $$$     $$$$     $$$$$$ $$$$$ $$$$$$$$$ $$$$$$$$$'


WhatWeb - Next generation web scanner version 0.6.4.
Developed by Andrew Horton (urbanadventurer) and Brendan Coles (bcoles).
Homepage: https://morningstarsecurity.com/research/whatweb


Usage: whatweb [options] <URLs>


TARGET SELECTION:
  <TARGETs>			Enter URLs, hostnames, IP addresses, filenames or
                  IP ranges in CIDR, x.x.x-x, or x.x.x.x-x.x.x.x
                  format.
  --input-file=FILE, -i		Read targets from a file. You can pipe
                hostnames or URLs directly with -i /dev/stdin.


TARGET MODIFICATION:
  --url-prefix			Add a prefix to target URLs.
  --url-suffix			Add a suffix to target URLs.
  --url-pattern			Insert the targets into a URL.
                e.g. example.com/%insert%/robots.txt


AGGRESSION:
The aggression level controls the trade-off between speed/stealth and
reliability.
  --aggression, -a=LEVEL	Set the aggression level. Default: 1.


    

  1. Stealthy			Makes one HTTP request per target and also
         follows redirects.
    2. 

  2. Aggressive			If a level 1 plugin is matched, additional
         requests will be made.
    3. 

  3. Heavy			Makes a lot of HTTP requests per target. URLs
         from all plugins are attempted.
    4. 



HTTP OPTIONS:
  --user-agent, -U=AGENT	Id

Пакеты и установка

whatweb

Веб-сканер нового поколения
Установка: sudo apt install whatweb

Официальная документация

https://www.kali.org/tools/whatweb/

Комментарии