> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/reconnaissance/passive-reconnaissance-techniques/tech-stack-identification.md).

# Tech Stack Identification

A **Tech Stack** (Technology Stack) refers to the combination of technologies, frameworks, programming languages, and tools used to develop, deploy, and operate a web application, software, or IT infrastructure. It consists of both frontend and backend components that work together to deliver a fully functional application.

### **Tools for Tech Stack Identification**

Several tools can help identify a website’s tech stack through online services, browser extensions, or command-line interfaces (CLI). These tools detect various technologies, including:

* **Content Management Systems (CMS)**
* **Web frameworks and libraries** (React, Angular, Vue.js, etc.)
* **Hosting providers and cloud services**
* **SSL certificates and security mechanisms**
* **Analytics and advertising tools**
* **Web servers (Apache, Nginx, IIS, etc.)**
* **Programming languages and backend frameworks**
* **Plugins and third-party integrations**

#### 1. [**BuiltWith**](https://builtwith.com/)

An online service that provides detailed insights into a website’s technology stack, including historical data and analytics tools.

#### 2. [**Wappalyzer**](https://www.wappalyzer.com/)

A browser extension and CLI tool that detects CMS, web frameworks, JavaScript libraries, analytics, and more.

#### 3. [**WhatRuns**](https://www.whatruns.com/)

A lightweight browser extension that identifies web technologies, fonts, themes, and plugins used by a website.

#### 4. [**WhatWeb**](https://morningstarsecurity.com/research/whatweb)

A command-line tool for fingerprinting web technologies, capable of detecting servers, frameworks, and security mechanisms.