whatweb是backtrack下的一款Web识别工具，位于
Applications-->BackTrack-->Information Gathing-->Web Application Analysis-->CMS identification-->whatweb
初次使用，我们需在终端下输入
update-alternatives --config ruby
切换为ruby，再输入编号0
root@bt:/pentest/enumeration/web/whatweb# update-alternatives --config ruby
There are 2 choices for the alternative ruby (providing /usr/bin/ruby). Selection Path Priority Status
------------------------------------------------------------
0 /usr/bin/ruby1.8 500 auto mode
1 /usr/bin/ruby1.8 500 manual mode
* 2 /usr/bin/ruby1.9.2 400 manual mode
Press enter to keep the current choice[*], or type selection number: 0
update-alternatives: using /usr/bin/ruby1.8 to provide /usr/bin/ruby (ruby) in auto mode.
现在我用whatweb看些自己blog的信息：
root@bt:/pentest/enumeration/web/whatweb# ./whatweb www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]
也可以加参数再看下：
root@bt:/pentest/enumeration/web/whatweb# ./whatweb -v www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
www.evilxr.com/ [200]
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]
URL : http://www.evilxr.com
Status : 200
ASP.NET --------------------------------------------------------------------
Description: ASP.NET is a free web framework that enables great Web
applications. Used by millions of developers, it runs some
of the biggest sites in the world. - homepage:
http://www.asp.net/ HTML5 ----------------------------------------------------------------------
Description: HTML version 5, detected by the doctype declaration HTTPServer -----------------------------------------------------------------
Description: HTTP server header string
String : Microsoft-IIS/6.0 (from server string) IP -------------------------------------------------------------------------
Description: IP address of the target, if available.
String : 192.126.119.48 JQuery ---------------------------------------------------------------------
Description: Javascript library
Version : 1.11.0 MetaGenerator --------------------------------------------------------------
Description: This plugin identifies meta generator tags and extracts its
value.
String : WordPress 3.9.1 Microsoft-IIS --------------------------------------------------------------
Description: Microsoft Internet Information Services (IIS) for Windows
Server is a flexible, secure and easy-to-manage Web server
for hosting anything on the Web. From media streaming to
web application hosting, IIS's scalable and open
architecture is ready to handle the most demanding tasks. -
homepage: http://www.iis.net/
Version : 6.0 Mobile-Website -------------------------------------------------------------
Description: This plugin detects websites designed for mobile devices. PHP ------------------------------------------------------------------------
Description: PHP is a widely-used general-purpose scripting language
that is especially suited for Web development and can be
embedded into HTML. - homepage: http://www.php.net/
Version : 5.2.17 Title ----------------------------------------------------------------------
Description: The HTML page title
String : Evilxr: Just for fun. (from page title) UncommonHeaders ------------------------------------------------------------
Description: Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-pingback (from headers) WordPress ------------------------------------------------------------------
Description: WordPress is an opensource blogging system commonly used as
a CMS. Homepage: http://www.wordpress.org/
Version : 3.9.1 X-Powered-By ---------------------------------------------------------------
Description: X-Powered-By HTTP header
String : ASP.NET, PHP/5.2.17 (from x-powered-by string) x-pingback -----------------------------------------------------------------
Description: A pingback is one of three types of linkbacks, methods for
Web authors to request notification when somebody links to
one of their documents. This enables authors to keep track
of who is linking to, or referring to their articles. Some
weblog software, such as Movable Type, Serendipity,
WordPress and Telligent Community, support automatic
pingbacks
String : ,http://www.evilxr.com/xmlrpc.php