Detect Website Backends
RSS icon Email icon
  • About

    BackendInfo is a lightweight (24kb) Firefox extension that detects name and version of backends behind websites.

    Detecting 15 different backends / 130+ versions

    • Drupal 6.x, 5.x, Wordpress 2.x
    • phpBB 2.x, 3.x, Django, DokuWiki
    • MediaWiki, MoinMoin, Reddit, Blogger
    • Joomla 1.5.x, 1.0.x
    • more…

    This extension adds an icon to the statusbar, that let’s you detect the backend and view detail information. The icon changes accordingly to the detection status:


    Default icon
    (click to start)

    Wordpress
    detected

    More infos
    on mouseover

    Text info

    Nothing found

    The context menu (right mouse click) provides a few options, eg. if you are in a sub-url (such as /blog/) you can choose between the base url or the current one, whereas a left mouse click directly checks the current node.

    Try it out!
    Find lots of sites using Django, DokuWiki, Drupal, Joomla (2), MediaWiki, MoinMoin, phpBB, Reddit, Wordpress.

    We need your help!

    • Visit the project page at addons.mozilla.org, vote and leave a short review. Thanks!!
    • You could enhance the supported backends by adding a new filter.
    • Send is infos about insecure software versions along with a link to more information. It could be interesting to mark insecure backend versions and provide a link to further informations. Please post it via mail or in the forum.

    How it works
    BackendInfo basically works by detecting URLs, strings and regular expressions. This ranges from typical html and css codes to certain directory and file-structures. It is easy to track changes in css, js and html files between releases that can be used to identify the backends exact version with tools like Meld. Furthermore, documents like CHANGELOG, UPDATES, etc are often left readable after a standard backend installation, providing some more insight as well.

    BackendInfo is a “plugin framework”, every extension checks for a given backend by required URLs, and optionally a number of strings or regex patterns that have to be contained or not contained in this url.

    No statistics are collected, neither is any data reported to another server. Just plain and simple detection of the current website. Nothing else!

    Source Code

brought to you by linuxuser.at