Web Application - Library & Software checker

Job ID: 39503605

Budget: £20 – £250 GBP

Hi,

I'm a web application penetration tester. I need a script making that Analyses and confirms all software versions running on a web application. The script must have the capabilities of handling unauthenticated and authenticated web applications.

Basically, how the Chrome / Firefox Extension Wappalyzer detects software on an application, it displays the version , I need the script to provide this, along with the direct link to the file (for example a js file) where it had been detected.

So if I provide

python scraper.py https://example.com , it gathers all of the disclosed software that Wappalyzer does, it then provides a link to this and then outputs it all in a nice format so it can help speed up my day to day pentesting.

Additionally, I want it to compare the detected versions to known CVE's to see if they're vulnerable to certain exploits. With me being a pentester, just a link to the CVE's would be nice. I've attempted to make the script multiple times in ChatGPT but it's inconsistent, It either flags false positives or provides wrong detrected service information.

This must detect all common (say top 20) JavaScript services that web apps commonly use such as:

Lodash
jQuery
jQuery-UI
Moment.js
Handlebars e.t.c

How much would something like this cost to make?

I can also additionally provide screenshots of my output on my script so you can get an Idea.

So if you'd like to send me a quote:
* Must detect Alot of Common JavaScript Pacakages
* Would be useful if it could detect server versions too like Nginx, Apache, IIS and associated versions
* Report if any detected versions have any known vulnerabilities

e.g


python scraper.py https://example.com
-----------------------------------------
Detected 3 JavaScript Files ...
https://example.com/file1.js
https://example.com/file2.js
https://example.com/file3.js
------------------------------------------
Analysing Files .......
-------------------------------------------
Detected Software: jQuery
Detected Version: 1.11.0
location: https://example.com/file1.js
Status: VULNERABLE (Coloured Red)
Vulnerability Link: https://security.snyk.io/package/npm/jquery/1.11.0
Highest Severity Vulnerability: HIGH
--------------------------------------------
Detected Software: Bootstrap
Detected Version: 5.3.6
Location: https://example.com/file2.js
Status: Not vulnerable (Highlight Green)
--------------------------------------------
Server Detected: Apache
Detected Version: 1.0
Location: https://example.com/file3.js
Status: VULNERABLE
Vulnerability Link: https://www.cybersecurity-help.cz/vdb/nginx/nginx/1.23.1/
Highest Severity Vulnerability: HIGH