Technology Detection
The Technology Detection add-on uses various patterns and finger prints to detect the technologies used by applications.
Funciona de forma muy similar a los complementos del navegador Wappalyzer con las siguientes excepciones:
- No utiliza las "Variables JavaScript Globales" debido a que son difíciles de probar sin un navegador "completo"
- It does not not show the confidence - this is still todo
- It does not match technologies on the basis of DOM properties as some properties are set by JavaScript in the browser after the response has passed through ZAP
- Permite ver la "evidencia" utilizada para detectar las tecnologias
La pestaña Tecnología
Esta pestaña muestra todas las tecnologías detectadas en el sitio seleccionado.
Hacer clic derecho en una tecnología mostrara un menú "Mostrar evidencia" debajo del cual están todos los regexes utilizados para detectarlo.
Selecting a regex will switch to the 'Search' tab and search through the history for that regex. Note: If multiple rows are selected
the menu will not be displayed.
Beside the site selection drop down is a button (with a Globe icon) which controls whether or not the Technology tab's display is linked to the selection in the Sites Tree.
Next is an Export button which can be used to export a CSV (comma separated values) file based on the
table information currently being displayed.
The toolbar also includes:
- An enable/disable toggle button which controls whether the technology detection passive scan rule is functioning or not. This enabled state is persisted between ZAP sessions.
- A button (with a gear icon) which will open the add-on's Options panel when clicked.
Reporting
Technology data is available to reports via the
TechJobResultData class.
External Links
| |
Enthec Webappanalyzer |
This project is a continuation of the iconic Wappalyzer that went private in August 2023. |
| |
https://www.wappalyzer.com/ |
The Wappalyzer Homepage |
| |
https://github.com/wappalyzer/wappalyzer |
As of early August 2023 the Wappalyzer Repository is no longer public. |