cms-detection

1# CMS Detection
2 
3Identify the content management system, web framework, server software, and technology stack of every live host. Know which stack you're attacking before you attack it — a WordPress site needs different tests than a Laravel API or a Spring Boot microservice. Multi-CMS detection covers WordPress, Drupal, Joomla, Magento, Shopify, Wix, Squarespace, Laravel, Django, Express, Spring Boot, and more.
4 
5## When to Use
6 
7- You have a list of alive hosts and need to categorize them by technology.
8- WordPress-specific tests produced false positives (the site uses Drupal).
9- Need to identify which CMS version is running to match against known CVEs.
10- A host returns generic 200 on all paths — technology detection tells you what it actually runs.
11- Want to find sites running outdated versions of popular CMS platforms.
12 
13## Prerequisites
14 
15- `terminal` with httpx, whatweb, wappalyzer, and curl.
16- A list of alive subdomains from `skill_view(name='visual-recon')` or `skill_view(name='subdomain-enumeration')`.
17 
18## How to Run
19 
20```bash
21# Fastest: httpx with built-in tech detection
22cat alive_subs.txt | httpx -silent -tech-detect -o tech_detect.txt
23 
24# Deep: whatweb with aggressive checks
25whatweb -i alive_subs.txt -a 3 -t 50 --log-brief=cms_results.txt
26```
27 
28## Quick Detection
29 
30```bash
31# Fastest: httpx with built-in tech detection
32cat alive_subs.txt | httpx -silent -tech-detect -o tech_detect.txt
33 
34# Deep: whatweb with aggressive checks
35…