WhatWeb

With over 1800 plugins, WhatWeb can detect a vast range of web technologies, versions, and details like email addresses, making it highly thorough for reconnaissance. The plugins use multiple methods including text strings, regular expressions, and MD5 hashes.

Users can balance speed and stealth with aggression levels from 1 (stealthy, one request) to 4 (heavy, many requests), allowing tailored scans for public websites or penetration tests. This flexibility is highlighted in the Aggression section of the README.

WhatWeb supports multiple log formats like JSON, XML, MongoDB, and ElasticSearch, enabling easy integration with other tools and databases for analysis. The README lists various --log-* options for different use cases.

The tool offers controls for concurrent threads, timeouts, and output buffering, with auto-optimization based on thread count for efficient large-scale scans. The Performance & Stability section details --max-threads and --output-buffer-size settings.