backtrack下whatweb的使用

whatweb是backtrack下的一款Web识别工具，位于

Applications-->BackTrack-->Information Gathing-->Web Application Analysis-->CMS identification-->whatweb

　　

初次使用，我们需在终端下输入

update-alternatives --config ruby

　　切换为ruby，再输入编号0

root@bt:/pentest/enumeration/web/whatweb# update-alternatives --config ruby
There are 2 choices for the alternative ruby (providing /usr/bin/ruby).

  Selection    Path                Priority   Status
------------------------------------------------------------
  0            /usr/bin/ruby1.8     500       auto mode
  1            /usr/bin/ruby1.8     500       manual mode
* 2            /usr/bin/ruby1.9.2   400       manual mode　

Press enter to keep the current choice[*], or type selection number: 0
update-alternatives: using /usr/bin/ruby1.8 to provide /usr/bin/ruby (ruby) in auto mode.

　　现在我用whatweb看些自己blog的信息：

root@bt:/pentest/enumeration/web/whatweb# ./whatweb www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]

　　也可以加参数再看下：

root@bt:/pentest/enumeration/web/whatweb# ./whatweb -v www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
www.evilxr.com/ [200]
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]
URL    : http://www.evilxr.com
Status : 200
   ASP.NET --------------------------------------------------------------------
	Description: ASP.NET is a free web framework that enables great Web 
	             applications. Used by millions of developers, it runs some 
	             of the biggest sites in the world. - homepage: 
	             http://www.asp.net/ 

   HTML5 ----------------------------------------------------------------------
	Description: HTML version 5, detected by the doctype declaration 

   HTTPServer -----------------------------------------------------------------
	Description: HTTP server header string 
	String     : Microsoft-IIS/6.0 (from server string)

   IP -------------------------------------------------------------------------
	Description: IP address of the target, if available. 
	String     : 192.126.119.48

   JQuery ---------------------------------------------------------------------
	Description: Javascript library 
	Version    : 1.11.0

   MetaGenerator --------------------------------------------------------------
	Description: This plugin identifies meta generator tags and extracts its 
	             value. 
	String     : WordPress 3.9.1

   Microsoft-IIS --------------------------------------------------------------
	Description: Microsoft Internet Information Services (IIS) for Windows 
	             Server is a flexible, secure and easy-to-manage Web server 
	             for hosting anything on the Web. From media streaming to 
	             web application hosting, IIS's scalable and open 
	             architecture is ready to handle the most demanding tasks. - 
	             homepage: http://www.iis.net/ 
	Version    : 6.0

   Mobile-Website -------------------------------------------------------------
	Description: This plugin detects websites designed for mobile devices. 

   PHP ------------------------------------------------------------------------
	Description: PHP is a widely-used general-purpose scripting language 
	             that is especially suited for Web development and can be 
	             embedded into HTML. - homepage: http://www.php.net/ 
	Version    : 5.2.17

   Title ----------------------------------------------------------------------
	Description: The HTML page title 
	String     : Evilxr: Just for fun. (from page title)

   UncommonHeaders ------------------------------------------------------------
	Description: Uncommon HTTP server headers. The blacklist includes all 
	             the standard headers and many non standard but common ones. 
	             Interesting but fairly common headers should have their own 
	             plugins, eg. x-powered-by, server and x-aspnet-version. 
	             Info about headers can be found at www.http-stats.com 
	String     : x-pingback (from headers)

   WordPress ------------------------------------------------------------------
	Description: WordPress is an opensource blogging system commonly used as 
	             a CMS. Homepage: http://www.wordpress.org/ 
	Version    : 3.9.1

   X-Powered-By ---------------------------------------------------------------
	Description: X-Powered-By HTTP header 
	String     : ASP.NET, PHP/5.2.17 (from x-powered-by string)

   x-pingback -----------------------------------------------------------------
	Description: A pingback is one of three types of linkbacks, methods for 
	             Web authors to request notification when somebody links to 
	             one of their documents. This enables authors to keep track 
	             of who is linking to, or referring to their articles. Some 
	             weblog software, such as Movable Type, Serendipity, 
	             WordPress and Telligent Community, support automatic 
	             pingbacks 
	String     : ,http://www.evilxr.com/xmlrpc.php

　　

转载于:https://www.cnblogs.com/evilxr/p/3828372.html