Analysis updated 2026-05-18
Scan a target website to see what CMS, framework, and server it runs before a bug bounty engagement.
Check a CTF or HackTheBox target for exposed admin panels and known services.
Audit your own site's security headers and SSL configuration from the command line.
Generate a JSON report of the technologies detected across multiple targets for a security review.
| alhamrizvi-cloud/inoue | 1lystore/awaek | 47cid/wp2shell-lab | |
|---|---|---|---|
| Stars | 13 | 13 | 13 |
| Language | Python | Python | Python |
| Setup difficulty | easy | moderate | moderate |
| Complexity | 2/5 | 2/5 | 4/5 |
| Audience | developer | vibe coder | researcher |
Figures from each repo's GitHub metadata at analysis time.
Inoue is a command line tool for figuring out what software and services a website is built on. Point it at a domain or a URL and it inspects HTTP headers, cookies, the page's HTML, script tags, meta tags, and common URL paths to guess which web server, programming language, framework, content management system, analytics tool, payment provider, or admin panel is in use. The project describes its catalog as covering more than 600 different services, from ordinary things like WordPress or Nginx to more specialized targets such as cloud consoles, VPN portals, industrial control interfaces, and internet connected devices with their own web interface. It is aimed at people doing security reconnaissance, bug bounty work, capture the flag competitions, or general review of what is exposed on a network. Beyond basic fingerprinting, Inoue can optionally inspect SSL and TLS certificates, look up DNS records such as A, MX, NS, TXT, and CNAME, and check whether common security headers like HSTS or a content security policy are present. It can scan several targets at the same time using multiple worker threads, and results can be printed to the terminal with color and confidence levels, or saved as structured JSON for other tools to consume. Installing it means cloning the repository and installing its Python dependencies with pip. Running a scan is a single command against a hostname, with flags to turn on verbose output, show the evidence behind each detection, skip DNS or SSL checks, or use presets like a fast scan or a full reconnaissance scan. The project also documents how to add new detection signatures yourself, by editing a Python file that maps a technology name to the headers, cookies, HTML patterns, or paths that identify it. The tool is released under the MIT license.
A fast command line tool that fingerprints the technology stack behind a website using headers, cookies, HTML, and DNS.
Mainly Python. The stack also includes Python.
Free to use, modify, and distribute for any purpose, including commercial use, as long as the license notice is kept.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
Verify against the repo before relying on details.