WebApp Information Gatherer – WIG

Footprinting and information gathering, the first and most
important step of penetration testing. To become a successful ethical hacker
you need to implement every step and process of pentesting, not only implement but
to implement it efficiently. If we talk about web application penetration testing then it is very important to identify the software running behind a
target website, most of the websites are now based on CMS (content management
system) so we need to identify the name and version of the CMS.




These information are very helpful to identify the
vulnerabilities on a website, imagine if you know the software name with its
version then you can find the exploits available on Internet (how easy is to
hack into a website). But CMS identification requires some time and effort,
this is why developers have created automatic tools to do the job.

You might have heard about whatweb and blindelephant, yes
these tools are used to identify the CMS running on a website; whether it is
wordpress, Joomla and any other. Now at this stage I would like to share
another tool called WIG.

WebApp Information Gatherer

wig identifies a websites CMS by searching for
fingerprints of static files and extracting version numbers from known files.
OS identification is done by using the value of
the ‘server’ and ‘X-Powered-By’ in the response header. These values are
compared to a database of which package versions are include with different
operating systems.
There are currently three profiles:
1. Only send one request: wig only sends a request for ‘/’. All
fingerprints matching this url are tested.
2. Only send one request per plugin: The url used in most fingerprints is used
4. All fingerprints: All fingerprints are tested
Example of
WIG

# python3 wig.py www.example.com
CMS                 
Drupal CMS: [7.25, 7.24, 7.26, 7.23, 7.22]
Operating System    
Microsoft Windows Server: [2008 R2]
Server Info         
Microsoft-IIS: [7.5, 6.0]
______________________________________________________________
Time: 18.0 sec | Plugins: 65 | Urls: 324 | Fingerprints: 14178



Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

How to Become an Expert in Ethical Hacking

This article is mainly addressing the audience who wants to pursue their career in Cybersecurity as a professional that provides ethical hacking services, whether...

5 Cybersecurity Tips to Keep in Mind When Working From Home

  Due to the ongoing global health crisis, more and more people are being forced to work from their homes. In fact, Forbes estimates that about...

The Complete OSINT Tutorial to Find Personal Information About Anyone

This article mainly focuses on how to discover a person's digital footprint and gather personal data by using open-source intelligence (OSINT). So, in its...

How to find the password of hacked email addresses using OSINT

Open-source intelligence or OSINT is a potent technique, and it can give a lot of valuable information, if implemented correctly with the right strategy...