backtrack下whatweb的使用

whatweb是backtrack下的一款Web识别工具，位于

Applications-->BackTrack-->Information Gathing-->Web Application Analysis-->CMS identification-->whatweb

　　

初次使用，我们需在终端下输入

update-alternatives --config ruby

　　切换为ruby，再输入编号0

root@bt:/pentest/enumeration/web/whatweb# update-alternatives --config ruby
There are 2 choices for the alternative ruby (providing /usr/bin/ruby).

  Selection    Path                Priority   Status
------------------------------------------------------------
  0            /usr/bin/ruby1.8     500       auto mode
  1            /usr/bin/ruby1.8     500       manual mode
* 2            /usr/bin/ruby1.9.2   400       manual mode　

Press enter to keep the current choice[*], or type selection number: 0
update-alternatives: using /usr/bin/ruby1.8 to provide /usr/bin/ruby (ruby) in auto mode.

　　现在我用whatweb看些自己blog的信息：

root@bt:/pentest/enumeration/web/whatweb# ./whatweb www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]

　　也可以加参数再看下：

root@bt:/pentest/enumeration/web/whatweb# ./whatweb -v www.evilxr.com
Could not load SystemTimer >= v1.2.0. Falling back to timeout.rb. SystemTimer is STRONGLY recommended for timeouts in Ruby 1.8.7. See http://ph7spot.com/blog/system-timer-1-2-release for details.
www.evilxr.com/ [200]
http://www.evilxr.com [200] WordPress[3.9.1], MetaGenerator[WordPress 3.9.1], HTTPServer[Microsoft-IIS/6.0], x-pingback[,http://www.evilxr.com/xmlrpc.php], ASP.NET, UncommonHeaders[x-pingback], HTML5, IP[192.126.119.48], JQuery[1.11.0], Mobile-Website, PHP[5.2.17], X-Powered-By[ASP.NET, PHP/5.2.17], Microsoft-IIS[6.0], Title[Evilxr: Just for fun.]
URL    : http://www.evilxr.com
Status : 200
   ASP.NET --------------------------------------------------------------------
	Description: ASP.NET is a free web framework that enables great Web
	             applications. Used by millions of developers, it runs some
	             of the biggest sites in the world. - homepage:
	             http://www.asp.net/ 

   HTML5 ----------------------------------------------------------------------
	Description: HTML version 5, detected by the doctype declaration 

   HTTPServer -----------------------------------------------------------------
	Description: HTTP server header string
	String     : Microsoft-IIS/6.0 (from server string)

   IP -------------------------------------------------------------------------
	Description: IP address of the target, if available.
	String     : 192.126.119.48

   JQuery ---------------------------------------------------------------------
	Description: Javascript library
	Version    : 1.11.0

   MetaGenerator --------------------------------------------------------------
	Description: This plugin identifies meta generator tags and extracts its
	             value.
	String     : WordPress 3.9.1

   Microsoft-IIS --------------------------------------------------------------
	Description: Microsoft Internet Information Services (IIS) for Windows
	             Server is a flexible, secure and easy-to-manage Web server
	             for hosting anything on the Web. From media streaming to
	             web application hosting, IIS's scalable and open
	             architecture is ready to handle the most demanding tasks. -
	             homepage: http://www.iis.net/
	Version    : 6.0

   Mobile-Website -------------------------------------------------------------
	Description: This plugin detects websites designed for mobile devices. 

   PHP ------------------------------------------------------------------------
	Description: PHP is a widely-used general-purpose scripting language
	             that is especially suited for Web development and can be
	             embedded into HTML. - homepage: http://www.php.net/
	Version    : 5.2.17

   Title ----------------------------------------------------------------------
	Description: The HTML page title
	String     : Evilxr: Just for fun. (from page title)

   UncommonHeaders ------------------------------------------------------------
	Description: Uncommon HTTP server headers. The blacklist includes all
	             the standard headers and many non standard but common ones.
	             Interesting but fairly common headers should have their own
	             plugins, eg. x-powered-by, server and x-aspnet-version.
	             Info about headers can be found at www.http-stats.com
	String     : x-pingback (from headers)

   WordPress ------------------------------------------------------------------
	Description: WordPress is an opensource blogging system commonly used as
	             a CMS. Homepage: http://www.wordpress.org/
	Version    : 3.9.1

   X-Powered-By ---------------------------------------------------------------
	Description: X-Powered-By HTTP header
	String     : ASP.NET, PHP/5.2.17 (from x-powered-by string)

   x-pingback -----------------------------------------------------------------
	Description: A pingback is one of three types of linkbacks, methods for
	             Web authors to request notification when somebody links to
	             one of their documents. This enables authors to keep track
	             of who is linking to, or referring to their articles. Some
	             weblog software, such as Movable Type, Serendipity,
	             WordPress and Telligent Community, support automatic
	             pingbacks
	String     : ,http://www.evilxr.com/xmlrpc.php