July 27th, 2024

Web-check: All-in-one OSINT tool for analysing any website

Web-Check is an open-source intelligence tool for analyzing websites, identifying vulnerabilities, and assessing server architecture. It offers various features and deployment options, promoting community contributions under the MIT License.

Read original articleLink Icon
Web-check: All-in-one OSINT tool for analysing any website

Web-Check is an open-source intelligence tool designed to analyze websites, providing insights into their structure and security. Its primary purpose is to help users identify potential vulnerabilities, assess server architecture, and understand the technologies employed by a site. The tool includes features such as IP information, SSL chain analysis, DNS records, cookies and headers inspection, server location and performance metrics, open ports, traceroute, carbon footprint estimation, and associated hostnames. A live demo of Web-Check is available at web-check.xyz.

Deployment options for Web-Check include one-click deployments via Netlify and Vercel, running the application using Docker, or cloning the repository to run it locally. The project promotes community involvement, encouraging contributions, bug reporting, and feature suggestions, and it operates under the MIT License. Detailed documentation for usage and configuration is provided in the repository, which also lists various contributors to the project. For further information, users can visit the Web-Check GitHub repository.

Link Icon 4 comments
By @mediumsmart - 3 months
Error Details for cookies The cookies job failed with an skipped state after 372 ms. The server responded with the following error: No cookies

There are no cookies on the site, that’s right. Why is this a fail? Should be boolean instead of making assumptions there has to be a cookie here, where is it... or is it an error not to have a cookie? the site loads fine ... oh, and where is the dmarc policy for the website mentioned?

By @stevenicr - 3 months
Took a peek, was expecting to see something that would return things like site generator (wordpress? ) and return name of plugins, themes and third party code loads (like google analytics, jqeury and such)

Still cool tool though. Wondering how I can take a spreadsheet of 100 domains and tell it to return all the things..

By @efilife - 3 months
Am I crazy or this one was posted here before? Not complaining, it's great, good to see it have that much traction

Just checked, it was

https://news.ycombinator.com/item?id=40757951

By @paulryanrogers - 3 months
Seems very surface level. Perhaps that's why the subtext is open source intelligence?

Could be useful as a first step I suppose.