Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What technologies are under your site

underthesite.com

Post reply on HN
Print view View original

81–90 of 97 posts

Re: What technologies are under your site

#81

Post by lloeki »

tectonic wrote: post #50
aorshan wrote: post #49

Noticed that not a single website is using django. Am I missing something?

I'm not sure that there is a django matcher yet. Django is hard to reliably detect. Do you know of a good signature (like a header or form token) that it always uses?

You could implement "maybe" matchers, that look for stuff which has a good chance of telling you what's underneath but not with 100% certainty.

Now, the following is a hack, but CSRF stuff[0] gives a good indication:

If there's a form, there's a good chance you'll find a construct like:
Also, there may be a 'csrftoken' value in the cookie.

You will also most probably find the jQuery function that sets X-CSRFToken on XHRs (see the doc[0] at #ajax). For prototype it'll look like this [1]

[0] https://docs.djangoproject.com/en/dev/ref/contrib/csrf/

[1] http://stackoverflow.com/questions/5551914/protecting-protot...

Re: What technologies are under your site

#82

Post by 16s »

JoshTriplett wrote: post #33
mmaunder wrote: post #32

Earlier quoted context omitted.

Awesome! Suggestions: Do a reverse lookup on the site's IP and add matchers for the hostnames that show up. Mention if they're round robining their DNS. Add nmap OS fingerprinting. Do a traceroute and log the IP of the closest router (final hop) to the site and add matching for that. Add a wiki interface and build a crunchbase like app. Add archiving of data and monitoring over time (as netcraft did in their original…

nmap OS fingerprinting seems a bit aggressive, but reverse-DNS checking seems like a great way to check which hosting platform a site uses.

nmap is too aggressive. It's a prelude to actual hacking attempts and labeled by IDS systems as such. Don't use it for this or you may end up in legal trouble.

Re: What technologies are under your site

#83

Post by Vivtek »

tectonic wrote: post #73
fus wrote: post #72

I cannot stand that unreal cogs image in bottom-right corner . Please make sure search works with special characters.

What's wrong with the image?

There are three cogs in a triangle. They couldn't move. That's all the explanation I can come up with - artistically I love the image.

Re: What technologies are under your site

#86

Post by davidcuddeback »

It says that my company's site [1] is running ASP.NET on Microsoft IIS, which it's not. To be fair, it also mentions Ruby on Rails, Apache, and Phusion Passenger, which are all correct. Aside from these minor glitches, this is a pretty cool project.

[1] http://identified.com

Re: What technologies are under your site

#90

Post by JoshTriplett »

tectonic wrote: post #71
dorkitude wrote: post #70

Earlier quoted context omitted.

Cool site! I'm having a lot of fun. However, I was confused by this flow: First: http://drktd.com/8Jgn After clicking the 'Add It!' link: http://drktd.com/8Iaf The wording on the previous page had me expecting a page for manually adding technologies to my site's stack a la Bagcheck.com.

Ah! This is a feature that I plan to add. Do you want to select technologies from a list, or write free-form text about your technology stack?

I'd like to suggest avoiding manual additions of technology for as long as possible. Focus on adding more ways to match specific technologies. After all, a site could always advertise more technologies in server headers or meta generator tags.
Post reply on HN