最近研究获取站点所用技术栈的方法，这里做一下记录备忘。
Wappalyzer
https://github.com/AliasIO/Wappalyzer
开源的浏览器插件，数据获取是在本地进行，数据和处理逻辑都可在插件的代码中可见。其积累的站点技术数据库和检测匹配模式为很多同类型的软件使用。
nodejs – Wappalyzer
https://www.npmjs.com/package/wappalyzer
Wappalyzer is a cross-platform utility that uncovers the technologies used on websites. It detects content management systems, eCommerce platforms, web servers, JavaScript frameworks, analytics tools and many more.
stacks-cli
https://github.com/WeiChiaChang/stacks-cli
In fact I know there’s already a pretty good Chrome extension called Wappalyzer, but I still wanna make a CLI tool for myself. There’s 2 major reasons why:
- I’ve already installed too many extensions so far.
- I’m a CLI lover, it’s just that simple.
Hello, I’m the author of stacks-cli,and yes just like you said, stacks-cli just another tool based on wappalyzer this npm module and was a side project of mine built in my spare time, but I think the most important core value of stacks-cli is that you can still have another options when choosing tools. I mean you can choose to install browser extension or just installing stacks-cli. For my situation, there’s two reasons, the first one is that I don’t wanna too many redundant extensions in my browser especially Chrome already ate too many RAM of my laptop. The other one is I’m a CLI lover, just that simple.
最近（2019年5月）被作者归档了，似已不再更新。
go – webanalyze
https://github.com/rverton/webanalyze
This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts.
$ webanalyze -host https://stackshare.io
2019/01/05 23:41:45 Scanning with 4 workers.
2019/01/05 23:41:46 [+] https://stackshare.io (1.025640074s):
2019/01/05 23:41:46 - jQuery, (JavaScript Libraries)
2019/01/05 23:41:46 - Cowboy, (Web Frameworks, Web Servers)
2019/01/05 23:41:46 - Erlang, (Programming Languages)
2019/01/05 23:41:46 - Ruby on Rails, (Web Frameworks)
2019/01/05 23:41:46 - Ruby, (Programming Languages)
WhatRuns
提供浏览器插件，其工作方式是后台积累数据，插件通过http请求获取站点数据。
开发者jijosunny于2017年在Ycombinator写道：
Copying my previous reply: Comparing with Wappalyzer and BuiltWith, here’s why we think we have something different (and maybe better):
- WhatRuns detects fonts, Wordpress plugins and themes (tens of thousands of them).
- Ability to follow sites (and know what techs websites started using/ditched).
- Very lightweight compared to our counterparts, and arguably better UI 😉
- More accurate data. BuiltWith can be very inaccurate as you might’ve already noticed. Wappalyzer is fairly accurate, but limited in technologies. WhatRuns is trying to be the best of both worlds.
https://gist.github.com/9b/f5fe434bf9965d673963884b56d93d9a
BuiltWith
对比
Whatruns vs Wappalyzer
- Whatruns seems to provide more detailed / thorough information compared to Wappalyzer
- You can follow some websites using Whatruns and get notified when there is a change
- Wappalyzer provides APIs but Whatruns doesn’t seem to have.
- Wappalyzer is available via npm too but not Whatruns
- Wappalyzer provides bookmarklet which is a JavaScript function that you can bookmark but not Whatruns
- Wappalyzer is open-source but Whatruns doesn’t seem to be.
- Both of them are available via Chrome and FireFox extensions.
参考资料
- How to figure out the technology stack of a #web page?
- Whatruns: Identify technologies used on any website
- Stacks-cli: Analyze a website’s stack from the terminal (github.com)
-- EOF --
本文最后修改于6年前 (2019-07-10)
(No Ratings Yet)
读取中...