GluePrint is a web technology fingerprinting tool for security researchers
and penetration testers. Detect 600+ technologies from a single scan.
Installation · Usage · Categories · Contributing
- Python 3.8+
- pip
git clone https://github.com/VinavilDev/glueprint.git
cd glueprint
pip install -r requirements.txt# Basic scan
python __main__.py -u https://example.com
# Deep scan with evidence
python __main__.py -u https://example.com --deep --verbose
# JSON output
python __main__.py -u https://example.com --json -o report.json
# Custom headers
python __main__.py -u https://example.com -H "Authorization: Bearer token"from core import GluePrint
scanner = GluePrint("https://example.com")
result = scanner.scan(deep=True)
for tech in result.detections:
print(f"{tech.name}: {tech.confidence}%")
# Check specific technology
if result.has("WordPress"):
print("WordPress detected")
# Filter by category
wafs = result.by_category("waf")
# Export to JSON
data = scanner.to_json()| Category | Technologies | Examples |
|---|---|---|
| Web Servers | 20+ | Apache, nginx, IIS, LiteSpeed, Caddy |
| Languages | 10+ | PHP, Python, Ruby, Node.js, ASP.NET |
| Databases | 5+ | MySQL, PostgreSQL, MongoDB, Redis |
| Frameworks | 60+ | Laravel, Django, Rails, Next.js, WordPress |
| Frontend | 20+ | React, Vue, Angular, Svelte, HTMX |
| JavaScript | 200+ | jQuery, GSAP, Chart.js, Three.js, Socket.io |
| CSS/Icons | 50+ | Tailwind, Bootstrap, Font Awesome |
| Analytics | 60+ | Google Analytics, Matomo, Hotjar, Mixpanel |
| E-commerce | 110+ | Shopify, WooCommerce, Stripe, PayPal, Klarna |
| Security | 70+ | reCAPTCHA, Auth0, Sentry, Cloudflare Turnstile |
| Widgets | 40+ | YouTube, SoundCloud, Disqus, Twitter |
| Services | 60+ | Google Fonts, Algolia, Firebase, Twilio |
| Hosting | 15+ | Aruba, OVH, WP Engine, Vercel, Netlify |
| CDN | 17+ | Cloudflare, AWS CloudFront, Fastly, Akamai |
| WAF | 12+ | Cloudflare WAF, AWS WAF, ModSecurity |
- Header Analysis - Server, X-Powered-By, cookies
- Body Pattern Matching - Scripts, styles, meta tags
- Version Extraction - Automatic version detection
- Confidence Scoring - Evidence-based scoring system
- Security Audit - HSTS, CSP, X-Frame-Options
- Deep Scan - WAF triggering, path probing
- JSON Export - Automation-friendly output
Add patterns to the appropriate file in fingerprints/:
"Technology Name": {
"headers": {"Header-Name": r"pattern"},
"cookies": [r"cookie_pattern"],
"body": [r"body_pattern_1", r"body_pattern_2"],
"confidence": 90,
"requires": 1,
},| Flag | Description |
|---|---|
-u, --url |
Target URL |
-d, --deep |
Deep scan mode |
-v, --verbose |
Show evidence |
-j, --json |
JSON output |
-o, --output |
Save to file |
-t, --timeout |
Request timeout |
--no-verify |
Skip SSL verification |
-H, --header |
Custom header |
-c, --cookie |
Custom cookie |
Read through our contributing guidelines and then check out issues labeled as help wanted or good first issue.
- Fork the repository
- Add fingerprint patterns to the appropriate category file in
fingerprints/ - Test detection accuracy
- Submit a pull request
Find GluePrint useful? Give the repo a star ⭐