Security·4,771 discussions

Inventory of technologies used in a webapp / website

Is there software that will report all the software / libraries / dbms etc. and versions plus the services running on a given website? As a use case, I would like to be able to detect if a webapp is using Apache and whether LOG4J is active and what version is running. Obviously, this is a specific and there will be other services / API etc, running so it is whether there is a simple way to create the inventory of assets used so when a security issue is raise we can quickly check if a site is affected. Apologies if this is a stupid question to you but hopefully you can see what I am trying to achieve.

Topic

No. Here’s why.

In reply to Inventory of technologies used in a webapp / website

Because the web site only gives your browser or scrapper HTML, CSS and maybe JavaScript code, you can never find out what’s behind the scenes.

As to LOG4J there are now tools to test your site for that so I’ll stop here as I would be duplicating the web on that subject.

[Author]

Replies