skills.rest
Wyl-cmd
Wyl-cmdCOMMUNITY
Explore all skills by this author →
GitHub

cms-detection

Identify CMS platforms, frameworks, and server technology stacks on live hosts.

6|Updated Jan 31, 2026
Search Tags:#penetration testing#httpx#wordpress#fingerprinting#recon#whatweb#cms detection
One-click install
npx skills add https://github.com/Wyl-cmd/kxns-cli --skill cms-detection-wyl-cmd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cms-detection
Source: https://github.com/Wyl-cmd/kxns-cli/tree/main/src/kxns_cli/skills/cms-detection
Command: npx skills add https://github.com/Wyl-cmd/kxns-cli --skill cms-detection-wyl-cmd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During penetration testing and security assessments, testers waste time running generic checks against unknown web stacks. This Skill fingerprints the CMS, framework, and server software of every live host so each target receives the correct technology-specific tests and version-to-CVE matching. ## Core Features & Use Cases - Bulk Technology Fingerprinting: Runs httpx tech-detect and whatweb across lists of alive hosts to identify WordPress, Drupal, Joomla, Magento, Laravel, Django, Spring Boot, and more. - CMS-Specific Version Detection: Extracts exact versions via generator meta tags, readme.html, CHANGELOG.txt, composer.lock, and wp-json endpoints. - Version-to-CVE Mapping: Maps detected versions to known vulnerabilities using searchsploit and nuclei CVE templates. - Use Case: Given a list of 200 alive subdomains, categorize them by CMS, identify a WordPress 6.5 instance, and immediately check it against known CVEs for that version. ## Quick Start Detect the CMS and technology stack of every host in alive_subs.txt and map the versions to known CVEs.

Frequently Asked Questions about cms-detection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect which CMS a website is running?▼

Run httpx with the -tech-detect flag against the host for fast Wappalyzer-based fingerprinting, then confirm with whatweb at aggression level 3. Cross-check version-specific files like readme.html for WordPress or CHANGELOG.txt for Drupal.

How to find the WordPress version of a target site?▼

Check the generator meta tag, the /feed/ RSS generator element, and readme.html, which often leaks the exact version. The /wp-json/ endpoint also reveals installed namespaces that indicate plugin and core versions.

What is the difference between httpx tech-detect and whatweb?▼

httpx -tech-detect is faster and uses Wappalyzer signatures, making it ideal for bulk scanning of many hosts. whatweb performs deeper, more aggressive checks and can identify specific CMS versions, but may trigger WAF blocks at high aggression levels.

Why does CMS detection return wrong or spoofed versions?▼

Generator meta tags can be spoofed and CDNs may serve stale cached version info. Always confirm with at least two independent methods, such as combining the meta tag with readme.html or the RSS feed, and bypass caches with random query parameters.

Can CMS detection work on headless CMS platforms like Strapi?▼

Headless CMS platforms like Strapi and Contentful expose no version files or generator tags. Detection relies on identifying their API endpoints and response signatures instead of traditional fingerprint files.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

httpx-probe

Probe URL lists for live HTTP/HTTPS services and collect fingerprints, titles, headers, and TLS metadata.

Official
Intermediate
hanc00lhanc00l

cve-exploitation

Identify and exploit CVEs on target systems using nmap and searchsploit.

Community
Intermediate
uphiagouphiago
1.1k

visual-recon

Automates bulk screenshot capture of live subdomains for visual triage.

Community
Intermediate
unclejobs-aiunclejobs-ai
37

unblock

Retrieve validated page content from blocked URLs via adaptive fetch escalation.

Community
Advanced