domains / families / security / cms-detection

cms-detection

separate

Identify CMS, frameworks, and server technology stacks on live hosts.

When to use

• You have a list of alive hosts and need to categorize them by technology.
• WordPress-specific tests produced false positives (the site uses Drupal).
• Need to identify which CMS version is running to match against known CVEs.
• A host returns generic 200 on all paths — technology detection tells you what it actually runs.
• Want to find sites running outdated versions of popular CMS platforms.

When not to use

• attacking the identified stack
• subdomain enumeration
• visual reconnaissance

Skill page

Source