CMS Detection

Identify the content management system, web framework, server software, and technology stack of every live host. Know which stack you're attacking before you attack it — a WordPress site needs different tests than a Laravel API or a Spring Boot microservice. Multi-CMS detection covers WordPress, Drupal, Joomla, Magento, Shopify, Wix, Squarespace, Laravel, Django, Express, Spring Boot, and more.

When to Use

• You have a list of alive hosts and need to categorize them by technology.
• WordPress-specific tests produced false positives (the site uses Drupal).
• Need to identify which CMS version is running to match against known CVEs.
• A host returns generic 200 on all paths — technology detection tells you what it actually runs.
• Want to find sites running outdated versions of popular CMS platforms.

Prerequisites

• terminal with httpx, whatweb, wappalyzer, and curl.
• A list of alive subdomains from skill_view(name='visual-recon') or skill_view(name='subdomain-enumeration').

Quick Detection