Level 1
@NagibMahfuj who are "they"?
Jul 23, 2015
8
Level 2
How To Stay Undetected [OffTopic]
Hello Geeks, Just a curious question. How do they detected the site is using certain technologies? Like Laravel, Nginx etc. And how to make undetected because I don't like to tell people that the site is made with Laravel.
Here is the screenshot:
TIA
Level 2
2 likes
Level 10
This extension is really nice, found another treasure lol :))
Level 14
All the code is on Github so you can dig through it and work out how the detection works. At a very quick glance I can see they are looking for the 'laravel_session' cookie to determine if a site is running Laravel. https://github.com/AliasIO/Wappalyzer/blob/master/src/apps.json#L3149
You can change this cookie name in the config/session.php file
2 likes
Level 1
Also october_session if a site is using Laravel-based October CMS.
Level 65
That's why you change the default settings for cookie name :)
To be honest, I can still tell if a site is using a certain framework or CMS. You can tell from certain formatting and the _token is one give away. Also the error page when people don't change it (404/403 etc).
Level 52
Server data is retrieved from the HTTP response too.
Level 1
Yes, there are several methods to 'sniff' a technology behind an app. That's why I asked OP to clarify what he meant by 'they'. And as @robgeorgeuk could testify, it was then fairly easy to discover how exactly Wappalyzer does it.
Please or to participate in this conversation.