A Ruby script that fingerprints remote applications and third-party scripts to identify their versions for security assessment.
Fingerprinter is a Ruby-based security tool that fingerprints remote web applications and scripts to determine their exact versions. It solves the problem of identifying outdated or vulnerable software by comparing file hashes and metadata against a curated database, enabling security assessments and vulnerability management.
Security researchers, penetration testers, and system administrators who need to audit web applications for known vulnerabilities and version-specific exposures.
Developers choose Fingerprinter for its extensive database of application fingerprints, multiple detection modes, and integration with security resources like CVE databases, making it a focused tool for version discovery in security workflows.
CMS/LMS/Library etc Versions Fingerprinter
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports a wide range of popular CMS, LMS, and scripts including WordPress, Drupal, and Laravel, with over 20 applications listed in the README, some with experimental support.
Offers unique, full, and passive fingerprinting options to optimize for speed, completeness, or stealth, as demonstrated in the basic usage examples for different scenarios.
Links detected versions to CVE databases and security advisories, providing immediate vulnerability assessment tools directly referenced in the README for each supported app.
Allows updating, searching, and listing of fingerprints with commands like --update and --search-hash, enabling custom maintenance and research as detailed in the options section.
Some applications like Magento and Moodle are marked as experimental in the README, indicating potentially unreliable or incomplete fingerprints that may lead to false negatives.
Requires manual database updates using the --update option with local directories, which can be cumbersome and error-prone for keeping pace with rapidly evolving software versions.
Relies solely on hash-based fingerprinting, so custom modifications or unsupported apps—like those in the 'Unsupported Apps' section—cannot be detected, reducing effectiveness in diverse environments.