wig

wig is a web application information gathering tool designed to identify numerous Content Management Systems (CMS) and other administrative applications. It performs application fingerprinting by calculating checksums and matching strings from known files across different CMS versions, resulting in a score for each detected CMS and its most probable versions. The score is determined by weights and the number of matching 'hits' for given checksums.

Use cases include reconnaissance during penetration testing to map out web technologies on target sites. It helps security professionals quickly identify CMS instances like WordPress or Joomla, along with version details, which can reveal potential vulnerabilities. Additionally, wig attempts to infer the server's operating system using 'server' and 'x-powered-by' headers against a database of known values, supporting guesses for Microsoft Windows versions and Linux distributions.

This tool is particularly useful in the initial phases of web application assessments where understanding the technology stack is crucial for targeted exploitation or further enumeration.

Fingerprinting relies on checksums and string matching of known files for various CMS versions, producing a score based on weights and hit counts. For each detected CMS, the most probable versions are shown. OS detection parses 'server' and 'x-powered-by' headers against a built-in database of known values for Windows and Linux distributions. Scores reflect match confidence without additional requests in standard mode.