wappy
A tool to discover technologies in web applications from your terminal. It uses the wap library, that is a python implementation of the great Wappalyzer browser extension. In fact, it uses the rules defined in the file technologies.json of the Wappalyzer repository.
Note that results could not be exactly the same as the Wappalyzer extension. This is because part of the information collected by wappy comes from the raw html, before being modified by javascript, as would be the case in a browser.
Setup
To install dependencies and update technologies.json file:
git clone https://github.com/blackarrowsec/wappy
cd wappy/
make
python3 wappy.py -hTo update technologies.json file:
make uptechsUsage
As input, you should provide urls, and wappy will make a request and identify technologies based on the response.
To get technologies from url:
$ python3 wappy.py https://twitter.com
https://twitter.com/ Express
https://twitter.com/ Node.jsTo get technologies from several urls you can provide a file or send urls for stdin:
$ cat urls.txt | python3 wappy.py
$ python3 wappy.py urls.txt
https://www.google.com/ Google Web Server
https://twitter.com/ Express
https://twitter.com/ Node.js
https://www.reddit.com/ Varnish
https://www.reddit.com/ Reddit
https://www.reddit.com/ PythonIn json format:
$ python3 wappy.py urls.txt -j
[{"name": "Google Web Server", "url": "https://www.google.com/"}, {"name": "Express", "url": "https://twitter.com/"}, {"name": "Node.js", "url": "https://twitter.com/"}, {"name": "Reddit", "url": "https://www.reddit.com/"}, {"name": "Python", "url": "https://www.reddit.com/"}, {"name": "Varnish", "url": "https://www.reddit.com/"}]Show version (-b), categories (-k) and confidence (-c) with ;
as delimiter (-d):
$ python3 wappy.py https://python.org -kbc -d ';'
https://www.python.org/;jQuery;1.8.2;100;JavaScript libraries
https://www.python.org/;Varnish;;100;Caching
https://www.python.org/;Modernizr;;100;JavaScript libraries
https://www.python.org/;Nginx;;100;Web servers,Reverse proxiesIn json format:
$ python3 wappy.py https://python.org -kbc -j
[{"name": "Modernizr", "url": "https://www.python.org/", "version": "", "confidence": 100, "categories": ["JavaScript libraries"]}, {"name": "jQuery", "url": "https://www.python.org/", "version": "1.8.2", "confidence": 100, "categories": ["JavaScript libraries"]}, {"name": "Varnish", "url": "https://www.python.org/", "version": "", "confidence": 100, "categories": ["Caching"]}, {"name": "Nginx", "url": "https://www.python.org/", "version": "", "confidence": 100, "categories": ["Web servers", "Reverse proxies"]}]Adding new technologies
If you want that wappy detects a new technology, you can add your rules to the technologies.json file and load it with wappy.
Please, consider to do a pull request to Wappalyzer repo and share your rules with the community. Follow the rules in Adding a new technology.
Please do not submit pull requests related to technologies.json, since this repository is not related with Wappalyzer.
Author
Eloy Pérez (@Zer1t0) [ www.blackarrow.net - www.tarlogic.com ]
License
All the code included in this project is licensed under the terms of the GNU GPLv3 license.
