您如何确定网站建立在什么技术之上?

2022-01-16 00:00:00 reverse-engineering frameworks html

我经常遇到一个外观漂亮或功能强大的网站，想知道使用什么技术来创建它.有哪些技术可以用来确定什么是特定网站是用什么构建的?

Quite often I come across a nice looking or functional website, and wonder what technology was used to create it. What techniques are available to figure out what a particular website was built with?

似乎很少有框架像网络编辑器那样包含任何类型的生成器元标记.是否有任何特定语言和/或框架的迹象?

Few frameworks seem to include any kind of generator meta tag like web editors do. Are there any tell-tale signs of particular languages and/or frameworks?

答案摘要

站点 URL 可能会背叛框架和/或编程语言，但不能依赖(例如 .asp 等文件扩展名).HTTP 响应标头、cookie、样式表和源注释也可能提供线索.

Site URLs may betray the framework and/or programming language but cannot be relied upon (e.g. file extensions such as .asp). HTTP response headers, cookies, stylesheets and source comments may also give clues.

一些很好的查询网站详细信息的工具(毫无疑问还有更多):

Some nice tools for querying site details (no doubt there are many more):

  • BuiltWith
  • 域工具
  • NetCraft
  • W3Techs
  • SimilarTech

Firefox 插件:

Firefox addons:

  • Wappalyzer - CMS、框架/库、电子商务、留言板等.
  • 域名详情 - IP、国家和网络服务器详情
  • 库检测器 - 正在使用的 Javascript 库
  • Wappalyzer - CMS, frameworks/libraries, e-commerce, message boards etc.
  • Domain Details - IP, country and webserver details
  • Library Detector - Javascript libraries in use

Chrome 扩展程序:

Chrome Extensions:

  • Wappalyzer
  • SimilarTech
  • PageXray

书签:

  • WTFramework - 显示使用中的 Javascript 框架
  • WTFramework - shows Javascript framework in use

推荐答案

你可以留意各种各样的东西，但它并不能真正让你确定网站背后的技术.通常，人们希望隐藏此类信息，因为暴露的信息越多，恶意方就越容易识别安全漏洞或拒绝服务漏洞.

There are all sorts of things you can look out for, but it doesn't really give you any certainty as to the technology behind a site. In general, information like that is something people will want to hide, as the more information that is exposed the easier it might be for malicious parties to identify security vulnerabilities or denial of service holes.

如果我有兴趣，我可能会按以下顺序查看:

If I was interested I'd probably look, in no particular order, at:

  • 网址和文件扩展名.
  • HTTP 响应标头
  • 注释源代码或标准 JS 库

顺便说一句，其他答案中提到的工具只是为您查看网站的上述一些属性，尽管是自动的，而且速度稍快.:)

Incidentally, the tools mentioned in other answers are only looking at some of the above properties of the site for you, albeit automatically, and slightly quicker. :)

相关文章