3

How can I find webpages using webapps using a specific framework, like you can look for apache servers with shodan. In my case the application are made with java.

Improve this question
4
  • Possible duplicate of this. Also, take a look here and here.
    – MiaoHatola
    Mar 12, 2017 at 8:36
  • @MiaoHatola Those questions are about identifying the framework used by a single website. This question is about finding all/many websites which use a specific framework.
    – tim
    Mar 12, 2017 at 9:45
  • @tim You are right. My bad. Maybe the OP can try to automate these huristics.
    – MiaoHatola
    Mar 12, 2017 at 10:08
  • I don't see how this question is considered to be off-topic for this site. Considering for example a new vulnerability is discovered (in a framework), this question asks for a way to check how many websites are vulnerable (since they are using the framework). Which is security related
    – Ernest Dujo
    Mar 24, 2017 at 4:40

3 Answers 3

Reset to default
1

There are many ways you can get an idea what technology a particular site uses. Among them are:

  • observing file extensions in URLs
  • technologies mentioned in job postings
  • tech blog articles
  • company's open-source work
  • header leaks

So build a list of candidate sites and then go inspect them.

Improve this answer
1

You can use google (or any search engine of your choice).

Most frameworks or languages contain specific identifying characteristics:

  • "powered by" footer (easy, but unlikely, especially for a language)
  • specific error messages, if errors are shown (something containing java.lang.NullPointerException for Java; most frameworks also have some specific error messages)
  • meta files such as changelogs
  • files that are always present such as specific CSS files (use inurl)
  • some frameworks and languages set specific HTTP header for which you can search
  • ...
Improve this answer
0

You cant. Java is a language, not a framework. There is nothing that can search the backend of peoples compiled code.

Improve this answer
2
  • can I find all websites using java applications ?
    – Ernest Dujo
    Mar 12, 2017 at 1:08
  • No. The code is located on the server, removed from you. You have no insight to that. If you have one particular site, you may be able to find out which language its using if you can get it to throw an error and print a stacktrace or something like that, but there is no universal search for java applications, like shodan, because its not possible.
    – joe
    Mar 12, 2017 at 2:36

Not the answer you're looking for? Browse other questions tagged .