Knowledgebase
External Penetration Test
1. Enumeration
1. Passive
Web Technology

Web Technology

Wappalyzer

Wappalyzer is both a website and a browser extension that will quickly identify all technologies in-use on a website.

Website: https://www.wappalyzer.com/

FireFox Extension: https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/

GoWitness

GoWitness is a website screenshot utility written in GoLang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process the results.

This is also really useful after active enumeration, directory fuzzing, to see if we can identify any interesting web pages or login portals.

Tool: https://github.com/sensepost/gowitness

Wiki: https://github.com/sensepost/gowitness/wiki

Usage: https://github.com/sensepost/gowitness/wiki/Usage

Run:

./gowitness file -f targs.txt --fullpage

Server:

./gowitness server

DNS TXT Records

TXT records often leak information about what types of technologies the organisation is using. This can then be used for further targeted attacks and enumeration.

nslookup -type=TXT target.com