[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-7690":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":17,"stars7d":18,"stars30d":19,"stars90d":16,"forks30d":16,"starsTrendScore":20,"compositeScore":21,"rankGlobal":10,"rankLanguage":10,"license":22,"archived":23,"fork":23,"defaultBranch":24,"hasWiki":25,"hasPages":23,"topics":26,"createdAt":10,"pushedAt":10,"updatedAt":47,"readmeContent":48,"aiSummary":49,"trendingCount":16,"starSnapshotCount":16,"syncStatus":50,"lastSyncTime":51,"discoverSource":52},7690,"WhatWeb","urbanadventurer\u002FWhatWeb","urbanadventurer","Next generation web scanner","https:\u002F\u002Fwww.morningstarsecurity.com\u002Fresearch\u002Fwhatweb",null,"Ruby",6632,992,170,41,0,3,14,63,13,39.99,"GNU General Public License v2.0",false,"master",true,[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46],"application-security","appsec","hacking","hacking-tools","kali-linux","network-security","owasp","penetration-test","penetration-testing","penetration-testing-tools","pentest","pentesting","pentesting-tools","recon","ruby","scanner","security","security-tools","web","web-hacking","2026-06-12 02:01:43","[![License](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Flicense-GPLv2-brightgreen.svg)](https:\u002F\u002Fraw.githubusercontent.com\u002Furbanadventurer\u002Fwhatweb\u002Fmaster\u002FLICENSE) ![Stable Release](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fstable_release-0.6.4-blue.svg) ![WhatWeb Plugins](https:\u002F\u002Fimg.shields.io\u002Fbadge\u002Fplugins-1824-brightgreen.svg) [![Repositories](https:\u002F\u002Frepology.org\u002Fbadge\u002Ftiny-repos\u002Fwhatweb.svg)](https:\u002F\u002Frepology.org\u002Fproject\u002Fwhatweb\u002Fversions)\n\n![logo](https:\u002F\u002Fgithub.com\u002Fuser-attachments\u002Fassets\u002F57950281-dec2-4132-a166-6387331bfd34 \"WhatWeb Logo\")\n\n# WhatWeb - Next generation web scanner\nDeveloped by Andrew Horton [urbanadventurer](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002F) and Brendan Coles [bcoles](https:\u002F\u002Fgithub.com\u002Fbcoles\u002F)\n\nLatest Release: v0.6.4. April 3, 2026\n\nLicense: GPLv2\n\nThis product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002F\n\nWiki: https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Fwiki\u002F\n\nIf you have any questions, comments or concerns regarding WhatWeb, please consult the documentation prior to contacting one of the developers. Your feedback is always welcome. \n\n##  Contents\n\n* About WhatWeb\n* Example Usage\n* Usage \n* Logging & Output\n* Plugins\n* Aggression\n* Performance & Stability\n* Optional Dependencies\n* Writing Plugins\n* Updates & Additional Information\n* Release History\n* Credits\n\n## About WhatWeb\n\nWhatWeb identifies websites. Its goal is to answer the question, \"What is that Website?\". WhatWeb recognises web technologies including content management systems (CMS), blogging platforms, statistic\u002Fanalytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognise something different. WhatWeb also identifies version numbers, email addresses, account IDs, web framework modules, SQL errors, and more.\n\nWhatWeb can be stealthy and fast, or thorough but slow. WhatWeb supports an aggression level to control the trade off between speed and reliability. When you visit a website in your browser, the transaction includes many hints of what web technologies are powering that website. Sometimes a single webpage visit contains enough information to identify a website but when it does not, WhatWeb can interrogate the website further. The default level of aggression, called 'stealthy', is the fastest and requires only one HTTP request of a website. This is suitable for scanning public websites. More aggressive modes were developed for use in penetration tests.\n\nMost WhatWeb plugins are thorough and recognise a range of cues from subtle to obvious. For example, most WordPress websites can be identified by the meta HTML tag, e.g. '\u003Cmeta name=\"generator\" content=\"WordPress 2.6.5\">', but a minority of WordPress websites remove this identifying tag but this does not thwart WhatWeb. The WordPress WhatWeb plugin has over 15 tests, which include checking the favicon, default installation files, login pages, and checking for \"\u002Fwp-content\u002F\" within relative links.\n\n\n### Features\n* Over 1800 plugins\n* Control the trade off between speed\u002Fstealth and reliability\n* Performance tuning. Control how many websites to scan concurrently with automatic output optimization.\n* Multiple log formats: Brief (greppable), Verbose (human readable), XML, JSON, MagicTree, RubyObject, MongoDB, ElasticSearch, SQL.\n* Proxy support including TOR\n* Custom HTTP headers\n* Basic HTTP authentication\n* Control over webpage redirection\n* IP address ranges\n* Fuzzy matching\n* Result certainty awareness\n* Custom plugins defined on the command line\n* IDN (International Domain Name) support\n* Dual-protocol scanning for simple hostnames (automatically tests both HTTP and HTTPS)\n\n## Example Usage\n\nUsing WhatWeb to scan reddit.com.\n\n```\n$ .\u002Fwhatweb reddit.com\nhttp:\u002F\u002Freddit.com [301 Moved Permanently] Country[UNITED STATES][US], HTTPServer[snooserv], IP[151.101.65.140], RedirectLocation[https:\u002F\u002Fwww.reddit.com\u002F], UncommonHeaders[retry-after,x-served-by,x-cache-hits,x-timer], Via-Proxy[1.1 varnish]\nhttps:\u002F\u002Fwww.reddit.com\u002F [200 OK] Cookies[edgebucket,eu_cookie_v2,loid,rabt,rseor3,session_tracker,token], Country[UNITED STATES][US], Email[banner@2x.png,snoo-home@2x.png], Frame, HTML5, HTTPServer[snooserv], HttpOnly[token], IP[151.101.37.140], Open-Graph-Protocol[website], Script[text\u002Fjavascript], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], Title[reddit: the front page of the internet], UncommonHeaders[fastly-restarts,x-served-by,x-cache-hits,x-timer], Via-Proxy[1.1 varnish], X-Frame-Options[SAMEORIGIN]\n```\n\n## Usage\n```\n\n.$$$     $.                                   .$$$     $.         \n$$$$     $$. .$$$  $$$ .$$$$$$.  .$$$$$$$$$$. $$$$     $$. .$$$$$$$. .$$$$$$. \n$ $$     $$$ $ $$  $$$ $ $$$$$$. $$$$$ $$$$$$ $ $$     $$$ $ $$   $$ $ $$$$$$.\n$ `$     $$$ $ `$  $$$ $ `$  $$$ $$' $ `$ `$$ $ `$     $$$ $ `$      $ `$  $$$'\n$. $     $$$ $. $$$$$$ $. $$$$$$ `$  $. $  :' $. $     $$$ $. $$$$   $. $$$$$.\n$::$  .  $$$ $::$  $$$ $::$  $$$     $::$     $::$  .  $$$ $::$      $::$  $$$$\n$;;$ $$$ $$$ $;;$  $$$ $;;$  $$$     $;;$     $;;$ $$$ $$$ $;;$      $;;$  $$$$\n$$$$$$ $$$$$ $$$$  $$$ $$$$  $$$     $$$$     $$$$$$ $$$$$ $$$$$$$$$ $$$$$$$$$'\n\nWhatWeb - Next generation web scanner version 0.6.4.\nDeveloped by Andrew Horton (urbanadventurer) and Brendan Coles (bcoles)\nHomepage: https:\u002F\u002Fmorningstarsecurity.com\u002Fresearch\u002Fwhatweb\n\nUsage: whatweb [options] \u003CURLs>\n\nTARGET SELECTION:\n  \u003CTARGETs>             Enter URLs, hostnames, IP addresses, filenames or\n                        IP ranges in CIDR, x.x.x-x, or x.x.x.x-x.x.x.x\n                        format.\n  --input-file=FILE, -i Read targets from a file. You can pipe\n                        hostnames or URLs directly with -i \u002Fdev\u002Fstdin.\n\nTARGET MODIFICATION:\n  --url-prefix          Add a prefix to target URLs.\n  --url-suffix          Add a suffix to target URLs.\n  --url-pattern         Insert the targets into a URL. Requires --input-file,\n                        eg. www.example.com\u002F%insert%\u002Frobots.txt \n\nAGGRESSION:\n  The aggression level controls the trade-off between speed\u002Fstealth and\n  reliability.\n  --aggression, -a=LEVEL Set the aggression level. Default: 1.\n  Aggression levels are:\n  1. Stealthy   Makes one HTTP request per target. Also follows redirects.\n  3. Aggressive If a level 1 plugin is matched, additional requests will be\n      made.\n  4. Heavy      Makes a lot of HTTP requests per target. Aggressive tests from\n      all plugins are used for all URLs.\n\nHTTP OPTIONS:\n  --user-agent, -U=AGENT Identify as AGENT instead of WhatWeb\u002F0.6.3.\n  --header, -H          Add an HTTP header. eg \"Foo:Bar\". Specifying a default\n                        header will replace it. Specifying an empty value, eg.\n                        \"User-Agent:\" will remove the header.\n  --follow-redirect=WHEN Control when to follow redirects. WHEN may be `never',\n                        `http-only', `meta-only', `same-site', or `always'.\n                        Default: always.\n  --max-redirects=NUM   Maximum number of contiguous redirects. Default: 10.\n\nAUTHENTICATION:\n  --user, -u=\u003Cuser:password> HTTP basic authentication.\n  --cookie, -c=COOKIES  Provide cookies, e.g. 'name=value; name2=value2'.\n  --cookiejar=FILE      Read cookies from a file.\n  --no-cookies          Disable automatic cookie handling (improves performance \n                        with high thread counts).\n\n### Cookie Handling\n\nWhatWeb automatically handles cookies across redirects by default. This improves fingerprinting accuracy on sites requiring session management.\n\n- `--cookie, -c=COOKIES`  - Set initial cookies manually\n- `--cookie-jar=FILE`  - Load cookies from file  \n- `--no-cookies`  - Disable automatic cookie handling\n\n**Performance Note:** With high thread counts (>100), cookie handling may impact performance. Use `--no-cookies` for maximum speed on large scans.\n\nPROXY:\n  --proxy           \u003Chostname[:port]> Set proxy hostname and port.\n                    Default: 8080.\n  --proxy-user      \u003Cusername:password> Set proxy user and password.\n\nPLUGINS:\n  --list-plugins, -l            List all plugins.\n  --info-plugins, -I=[SEARCH]   List all plugins with detailed information.\n                                Optionally search with keywords in a comma\n                                delimited list.\n  --search-plugins=STRING       Search plugins for a keyword.\n  --plugins, -p=LIST  Select plugins. LIST is a comma delimited set of \n                      selected plugins. Default is all.\n                      Each element can be a directory, file or plugin name and\n                      can optionally have a modifier, eg. + or -\n                      Examples: +\u002Ftmp\u002Fmoo.rb,+\u002Ftmp\u002Ffoo.rb\n                      title,md5,+.\u002Fplugins-disabled\u002F\n                      .\u002Fplugins-disabled,-md5\n                      -p + is a shortcut for -p +plugins-disabled.\n\n  --grep, -g=STRING|REGEXP      Search for STRING or a Regular Expression. Shows \n                                only the results that match.\n                                Examples: --grep \"hello\"\n                                --grep \"\u002Fhe[l]*o\u002F\"\n  --custom-plugin=DEFINITION  Define a custom plugin named Custom-Plugin,\n                        Examples: \":text=>'powered by abc'\"\n                        \":version=>\u002Fpowered[ ]?by ab[0-9]\u002F\"\n                        \":ghdb=>'intitle:abc \\\"powered by abc\\\"'\"\n                        \":md5=>'8666257030b94d3bdb46e05945f60b42'\"\n  --dorks=PLUGIN        List Google dorks for the selected plugin.\n\nOUTPUT:\n  --verbose, -v         Verbose output includes plugin descriptions. Use twice\n                        for debugging.\n  --colour,--color=WHEN control whether colour is used. WHEN may be `never',\n                        `always', or `auto'.\n  --quiet, -q           Do not display brief logging to STDOUT.\n  --no-errors           Suppress error messages.\n\nLOGGING:\n  --log-brief=FILE        Log brief, one-line output.\n  --log-verbose=FILE      Log verbose output.\n  --log-errors=FILE       Log errors.\n  --log-xml=FILE          Log XML format.\n  --log-json=FILE         Log JSON format.\n  --log-sql=FILE          Log SQL INSERT statements.\n  --log-sql-create=FILE   Create SQL database tables.\n  --log-json-verbose=FILE Log JSON Verbose format.\n  --log-magictree=FILE    Log MagicTree XML format.\n  --log-object=FILE       Log Ruby object inspection format.\n  --log-mongo-database    Name of the MongoDB database.\n  --log-mongo-collection  Name of the MongoDB collection. Default: whatweb.\n  --log-mongo-host        MongoDB hostname or IP address. Default: 0.0.0.0.\n  --log-mongo-username    MongoDB username. Default: nil.\n  --log-mongo-password    MongoDB password. Default: nil.  \n  --log-elastic-index     Name of the index to store results. Default: whatweb \n  --log-elastic-host      Host:port of the elastic http interface. Default: 127.0.0.1:9200\n  \nPERFORMANCE & STABILITY:\n  --max-threads, -t       Number of simultaneous threads. Default: 25.\n  --open-timeout          Time in seconds. Default: 15.\n  --read-timeout          Time in seconds. Default: 30.\n  --wait=SECONDS          Wait SECONDS between connections.\n                          This is useful when using a single thread.\n\nHELP & MISCELLANEOUS:\n  --short-help            Short usage help.\n  --help, -h              Complete usage help.\n  --debug                 Raise errors in plugins.\n  --version               Display version information. (WhatWeb 0.6.4).\n\nEXAMPLE USAGE:\n* Scan example.com.\n  .\u002Fwhatweb example.com\n* Scan reddit.com slashdot.org with verbose plugin descriptions.\n  .\u002Fwhatweb -v reddit.com slashdot.org\n* An aggressive scan of wired.com detects the exact version of WordPress.\n  .\u002Fwhatweb -a 3 www.wired.com\n* Scan the local network quickly and suppress errors.\n  whatweb --no-errors 192.168.0.0\u002F24\n* Scan the local network for https websites.\n  whatweb --no-errors --url-prefix https:\u002F\u002F 192.168.0.0\u002F24\n* Scan for crossdomain policies in the Alexa Top 1000.\n  .\u002Fwhatweb -i plugin-development\u002Falexa-top-100.txt \\\n  --url-suffix \u002Fcrossdomain.xml -p crossdomain_xml\n\n```\n\n## Logging & Output\n\nThe following types of logging are supported:\n* --log-brief=FILE    Brief, one-line, greppable format\n* --log-verbose=FILE  Verbose\n* --log-xml=FILE    XML format. XSL stylesheet is provided\n* --log-json=FILE   JSON format\n* --log-json-verbose=FILE JSON verbose format\n* --log-magictree=FILE  MagicTree XML format\n* --log-object=FILE Ruby object inspection format\n* --log-mongo-database  Name of the MongoDB database\n* --log-mongo-collection  Name of the MongoDB collection. Default: whatweb\n* --log-mongo-host  MongoDB hostname or IP address. Default: 0.0.0.0\n* --log-mongo-username  MongoDB username. Default: nil\n* --log-mongo-password  MongoDB password. Default: nil\n* --log-elastic-index   Name of the index to store results. Default: whatweb \n* --log-elastic-host    Host:port of the elastic http interface. Default: 127.0.0.1:9200\n* --log-errors=FILE Log errors. This is usually printed to the screen in red.\n\nYou can output to multiple logs simultaneously by specifying multiple command line logging options. Advanced users who want SQL output should read the source code to see unsupported features.\n\n## Plugins\n\nMatches are made with:\n* Text strings (case sensitive)\n* Regular expressions\n* Google Hack Database queries (limited set of keywords)\n* MD5 hashes\n* URL recognition\n* HTML tag patterns\n* Custom ruby code for passive and aggressive operations\n\nTo list the plugins supported:\n\n    $ .\u002Fwhatweb -l\n\n### WhatWeb Plugin List\n\n    Plugin Name - Description\n    --------------------------------------------------------------------------------\n    1024-CMS - 1024 is one of a few CMS's leading the way with the implementation...\n    360-Web-Manager - 360-Web-Manager\n    3COM-NBX - 3COM NBX phone system. The NBX NetSet utility is a web interface i...\n    3dcart - 3dcart - The 3dcart Shopping Cart Software is a complete ecommerce s...\n    4D - 4D web application deployment server\n    4images - 4images is a powerful web-based image gallery management system. Fe...\n    ... (truncated)\n\n### Search Plugins\nTo view more detail about a plugin or search plugins for a keyword:\n\n    $ .\u002Fwhatweb -I phpBB\n\n    WhatWeb Detailed Plugin List\n    Searching for phpBB\n    ================================================================================\n    Plugin:         phpBB\n    --------------------------------------------------------------------------------\n    Description:    phpBB is a free forum \n    Website:        http:\u002F\u002Fphpbb.org\u002F\n    \n    Author:         Andrew Horton\n    Version:        0.3\n    \n    Features:       [Yes]  Pattern Matching (7)\n                    [Yes]  Version detection from pattern matching\n                    [Yes]  Function for passive matches\n                    [Yes]  Function for aggressive matches\n                    [Yes]  Google Dorks (1)\n    \n    Google Dorks:\n    [1] \"Powered by phpBB\"\n    ================================================================================\n\n### Plugin Selection\nAll plugins are loaded by default.\n\nPlugins can be selected by directories, files or plugin names as a comma delimited list with the -p or --plugin command line option.\n\nEach list item may have a modifier: + adds to the full set, - removes from the full set and no modifier overrides the defaults.\n\n### Examples\n\n* --plugins +plugins-disabled,-foobar\n* --plugins +\u002Ftmp\u002Fmoo.rb\n* --plugins foobar (only select foobar)\n* -p title,md5,+.\u002Fplugins-disabled\u002F\n* -p .\u002Fplugins-disabled,-md5\n\nThe --dorks \u003Cplugin name> command line option returns google dorks for the selected plugin. For example, --dorks wordpress returns \"is proudly powered by WordPress\"\n\nThe --grep, -g command line option searches the target page for the selected string and returns a match in a plugin called Grep if it is found.\n\n\n## Aggression\n\nWhatWeb features several levels of aggression. By default the aggression level is set to 1 (stealthy) which sends a single HTTP GET request and also follows redirects.\n\n    --aggression, -a\n    \n      1. Stealthy Makes one HTTP request per target. Also follows redirects.\n        2. Unused\n        3. Aggressive Can make a handful of HTTP requests per target. This triggers\n            aggressive plugins for targets only when those plugins are\n            identified with a level 1 request first.\n      4. Heavy  Makes a lot of HTTP requests per target. Aggressive tests from\n            all plugins are used for all URLs.\n\nLevel 3 aggressive plugins will guess more URLs and perform actions that are potentially unsuitable without permission. WhatWeb currently does not support any intrusion\u002Fexploit level tests in plugins.\n\n### An example of the different results between level 1 and level 3:\n\nA level 1, stealthy scan identifies that smartor.is-root.com\u002Fforum\u002F uses phpBB version 2:\n\n    $ .\u002Fwhatweb smartor.is-root.com\u002Fforum\u002F\n    http:\u002F\u002Fsmartor.is-root.com\u002Fforum\u002F [200] PasswordField[password], HTTPServer[Apache\u002F2.2.15], PoweredBy[phpBB], Apache[2.2.15], IP[88.198.177.36], phpBB[2], PHP[5.2.13], X-Powered-By[PHP\u002F5.2.13], Cookies[phpbb2mysql_data,phpbb2mysql_sid], Title[Smartors Mods Forums - Reloaded], Country[GERMANY][DE]\n\nA level 3, aggressive scan triggers additional tests in the phpBB plugin which identifies that the website uses phpBB version 2.0.20 or higher:\n\n    $ .\u002Fwhatweb -p plugins\u002Fphpbb.rb -a 3 smartor.is-root.com\u002Fforum\u002F\n    http:\u002F\u002Fsmartor.is-root.com\u002Fforum\u002F [200] phpBB[2,>2.0.20]\n\nNote the use of the -p argument to select only the phpBB plugin. It is advisable, but not mandatory, to select a specific plugin when attempting to fingerprint software versions in aggressive mode. This approach is far more stealthy as it will limit the number of requests.\n\nWhatWeb has no caching so if you use aggressive plugins on redirecting URLs you may fetch the same files multiple times.\n\n\n## Performance & Stability\n\nWhatWeb features several options to increase performance and stability.\n\n*  --max-threads, -t     Number of simultaneous threads. Default: 25.\n*  --open-timeout        Time in seconds. Default: 15\n*  --read-timeout        Time in seconds. Default: 30\n*  --wait=SECONDS        Wait SECONDS between connections\n                        This is useful when using a single thread.\n*  --output-sync         Force immediate output flushing to screen and logs for \n                        real-time monitoring (slower with high thread counts).\n*  --output-buffer-size=SIZE  Set output buffer size for screen and log output. \n                        0=unbuffered, default=auto based on thread count.\n\nThe --wait and --max-threads commands can be used to assist in IDS evasion.\n\n### Output Performance Optimization\n\nWhatWeb automatically optimizes output performance for both screen output and log files based on thread count:\n\n* **Low thread counts (1-5)**: \n  - **Sync**: Enabled (immediate flushing)\n  - **Buffer size**: 1 (minimal buffering for real-time output)\n  - **Use case**: Interactive scanning, real-time monitoring\n\n* **Medium thread counts (6-50)**: \n  - **Sync**: Disabled (async I\u002FO)\n  - **Buffer size**: 10 (small buffer for balanced performance)\n  - **Use case**: Standard batch scanning including default (25 threads)\n\n* **High thread counts (51+)**: \n  - **Sync**: Disabled (async I\u002FO)\n  - **Buffer size**: 25 (larger buffer to minimize I\u002FO contention)\n  - **Use case**: High-volume scanning, large target lists (100+ threads)\n\nYou can override these defaults for both screen output and log files:\n\n```bash\n# Force real-time output to screen and logs (slower but immediate)\n.\u002Fwhatweb --output-sync -t 100 --log-brief=results.txt targets.txt\n\n# Custom buffer size for high-volume logging\n.\u002Fwhatweb --output-buffer-size=50 -t 100 --log-verbose=detailed.log targets.txt\n\n# Disable buffering entirely for immediate file writes\n.\u002Fwhatweb --output-buffer-size=0 -t 10 --log-json=results.json targets.txt\n```\n\nThese optimizations apply to all output formats including brief, verbose, XML, JSON, and other log formats.\n\n#### Technical Details\n\n**Output Sync Behavior:**\n- **Enabled**: Each output line is immediately flushed to disk\u002Fscreen (slower but real-time)\n- **Disabled**: Output is buffered in memory before writing (faster but delayed)\n\n**Buffer Size Impact:**\n- **Size 1**: Minimal buffering, nearly immediate output\n- **Size 10**: Small buffer holds ~10 results before writing\n- **Size 25+**: Larger buffer reduces I\u002FO system calls for better performance\n- **Size 0**: Completely unbuffered (equivalent to sync enabled)\n\n### Profiling Support\n\nEnable performance profiling to identify bottlenecks:\n\n```bash\n# Basic profiling to stderr\nWHATWEB_PROFILE=1 .\u002Fwhatweb -t 25 targets.txt\n\n# Save profile to file\nWHATWEB_PROFILE=1 WHATWEB_PROFILE_FILE=profile.txt .\u002Fwhatweb -t 25 targets.txt\n```\n\n*Note: Profiling requires the `ruby-prof` gem: `gem install ruby-prof`*\n\nChanging the user-agent using the -U or --user-agent command line option will avoid the Snort IDS rule for WhatWeb.\n\nIf you are scanning ranges of IP addresses, it is much more efficient to use a port scanner like massscan to discover which have port 80 open before scanning with WhatWeb.\n\nCharacter set detection, with the Charset plugin dramatically decreases performance by requiring more CPU. This is required by JSON and MongoDB logging.\n\n\n## Optional Dependencies\n\nWhatWeb supports optional dependencies for MongoDB logging and character set detection. \n\nOptional dependencies is why the Gemfile is split into groups and WhatWeb does not come with a Gemfile.lock. Should you want a Gemfile.lock, it will be created when you run `bundle install`.\n\nYou can install them using Bundler groups:\n\n### MongoDB Support\n\nTo enable MongoDB logging:\n\n```bash\n# Install dependencies\nbundle install --with mongo\n\n# If you're using an older version of Bundler\nGEMFILE_GROUPS=\"default mongo\" bundle install\n```\n\n### Character Set Detection\n\nTo enable character set detection (required for JSON and MongoDB logging):\n\n```bash\n# Install dependencies\nbundle install --with rchardet\n\n# If you're using an older version of Bundler\nGEMFILE_GROUPS=\"default rchardet\" bundle install\n\n# Copy the charset plugin\ncp plugins-disabled\u002Fcharset.rb my-plugins\u002F\n```\n\n### All Optional Dependencies\n\nTo install all optional dependencies at once:\n\n```bash\n# Install all optional groups\nbundle install --with mongo rchardet\n\n# If you're using an older version of Bundler\nGEMFILE_GROUPS=\"default mongo rchardet\" bundle install\n```\n\nNote: Character set detection dramatically decreases performance by requiring more CPU. Only enable it if you need it.\n\n## Writing Plugins\n\nPlugins are easy to write. Start by going through the plugin tutorials in the *my-plugins\u002F* folder.\n\n* [Plugin Tutorials](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Ftree\u002Fmaster\u002Fmy-plugins).\n\nAn overview of the plugin tutorials is here. [plugin-tutorials.txt](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Ftree\u002Fmaster\u002Fplugin-development\u002Fplugin-tutorials.txt)\n\nAfter progressing through the tutorials read through the Development section of the [wiki](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Fwiki\u002F). \n\n* [Sources for Plugin Writing](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Fwiki\u002FSources-for-Plugin-Writing)\n* [How to Develop WhatWeb Plugins (not up to date)](https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Fwiki\u002FHow-to-develop-WhatWeb-plugins)\n\n## Updates & Additional Information\n\nThe WhatWeb development build features regular updates.\n\n* Check the development branches for unreleased updates.\n\nBrowse the wiki for more documentation and advanced usage techniques.\n\n* Wiki: https:\u002F\u002Fgithub.com\u002Furbanadventurer\u002FWhatWeb\u002Fwiki\u002F\n\n## Release History\n\n- Version 0.6.4 Released April 3, 2026\n- Version 0.6.3 Released October 18, 2025\n- Version 0.6.2 Released August 25, 2025\n- Version 0.6.1 Released July 30th, 2025\n- Version 0.5.4 Released December 14th, 2020\n- Version 0.5.3 Released October 1st, 2020\n- Version 0.5.2 Released June 9th, 2020\n- Version 0.5.1 Released February 25th, 2020\n- Version 0.5.0 Released June 9th, 2019\n- Version 0.4.9 Released November 23rd, 2017\n- Version 0.4.8-dev (Continuous release from 2012 to 2017)\n- Version 0.4.7 Released April 5th, 2011\n- Version 0.4.6 Released March 25th, 2011\n- Version 0.4.5 Released August 17th, 2010\n- Version 0.4.4 Released June 29th, 2010\n- Version 0.4.3 Released May 24th, 2010\n- Version 0.4.2 Released April 30th, 2010\n- Version 0.4.1 Released April 28th, 2010\n- Version 0.4   Released March 14th, 2010\n- Version 0.3   Released at Kiwicon III (kiwicon.org), November 2nd, 2009\n\n## Credits\n\n### Developers\n\n+ Andrew Horton (@urbanadventurer)\n+ Brendan Coles (@bcoles)\n\n### Contributors\n\nThank you to the following people who have contributed to WhatWeb. \n\n+ Emilio Casbas\n+ Louis Nyffenegger\n+ Patrik Wallström (@pawal)\n+ Caleb Anderson (@dirtyfilthy)\n+ Tonmoy Saikia\n+ Aung Khant (@yehgdotnet)\n+ Erik Inge Bolsø\n+ nk@dsigned.gr\n+ Steve Milner (@ashcrow)\n+ Michal Ambroz\n+ Gremwell\n+ Sagar Prakash Junnarkar (@sagarjunnarkar)\n+ GertBerger \n+ Quintin Poirier\n+ Eric Sesterhenn\n+ dengjw (@jawa)\n+ Pedro Worcel (@droop)\n+ Matthieu Keller (@maggick)\n+ Peter (2pvdl)\n+ Napz (@RootCon)\n+ @nilx042\n+ Fabian Affolter (@fabaff)\n+ Andrew Silvernail (@buff3r)\n+ Andre Ricardo (@andrericardo)\n+ nikosk\n+ Patrick Thomas (@coffeetocode)\n+ Guillaume Delcaour (@guikcd)\n+ Sean (@wiifm69)\n+ Matthieu Keller (@maggick)\n+ Raul (@raurodse)\n+ Andrew Petro (@apetro)\n+ Artem Taranyuk (@610)\n+ Matti Paksula (@matti)\n+ Tim Smith (@tas50)\n+ Sarthak Munshi (@saru95)\n+ @rdubourguais\n+ @SlivTaMere\n+ @Code0x58\n+ @iGeek098\n+ @andreas-becker\n+ @csalazar\n+ Igor Rzegocki (@ajgon)\n+ @juananpe\n+ @lins05\n+ @anozoozian\n+ Bhavin Senjaliya (@bhavin1223)\n+ Chad Brigance (@ChadBrigance)\n+ Daniel Maldonado\n+ Elias Dorneles (@eliasdorneles)\n+ Eugene Amirov\n+ Gregory Boddin (@gboddin)\n+ Guillaume Delacour\n+ Janosch Maier (@phylu)\n+ Max Davitt (@themaxdavitt)\n+ Naglis Jonaitis (@naglis)\n+ Shuai Lin\n+ Sigit Dewanto (@sigit)\n+ @wh1tenoise\n+ @golewski\n+ @Allactaga\n+ @elcodigok\n+ @SlivTaMere\n+ @rmaksimov\n+ Melvil Guillaume (@mguillau42)\n+ @LrsK\n+ @abenson\n+ @blshkv\n+ Weidsom Nascimento (@weidsom)\n+ Marcelo Gimenes (@cgimenes)\n+ @xambroz\n+ Baptiste Fontaine (@bfontaine)\n+ @definity\n+ @huntertl\n+ Michael Ippolito (@spookycave)\n+ @mkauschi\n+ @frapava98\n+ John de Kroon (@johndekroon)\n+ @mtisec\n+ Claude from Anthropic\n\n\nIt is difficult to keep track of all the people who have contributed to WhatWeb. If your name is missing then please let me know.\n\n","WhatWeb 是一款下一代的网站扫描工具，旨在识别网站所使用的技术栈。它能够检测出包括内容管理系统、博客平台、统计分析包、JavaScript 库、web 服务器及嵌入式设备在内的多种网络技术，并且能进一步识别版本号、电子邮件地址等信息。WhatWeb 拥有超过1800个插件，每个插件都能识别不同的特征。此外，该工具支持调整攻击性级别来平衡速度与准确性之间的关系，既可以在隐身模式下快速扫描公共网站，也能在更激进的设置下深入检查以满足渗透测试的需求。适合于网络安全评估、渗透测试以及任何需要了解目标网站技术架构的场景中使用。",2,"2026-06-11 03:13:50","top_language"]