The Lupaxa Security Toolbox
Part of The Lupaxa Project
lupaxa-cms-detection
Identify which CMS a website is using from public signals — name, evidence, version when it is exposed, and a confidence rating.
Built for authorised security-assessment recon used by The Lupaxa Project.
[!WARNING] Authorised use only. Use this tool for authorised security-assessment recon only. You must have permission to test the target.
Features
- Detect a CMS from public signals: generator tags, headers, cookies, and scripts
- Report name, evidence, version when it is exposed, and confidence
- Quiet default: homepage plus confirm files for CMS that already scored
- Optional
--activebroader path probes, including a catalogue confirm sweep when the homepage is quiet (a path is never a hit from HTTP 200 alone) - Library API (
detect/detect_many) and CLI (cms-detection) - Text, JSON, and CSV output
- Fully typed, linted, formatted, and tested
Installation
From PyPI
pip install lupaxa-cms-detection
From source (development mode)
pip install -e ".[dev]"
Requires Python 3.10+. Runtime dependencies: requests, beautifulsoup4.
Library quick start
from lupaxa.cms_detection import detect
result = detect("https://example.com", active=False)
print(result.cms, result.version, result.confidence)
CLI quick start
cms-detection --help
cms-detection https://example.com
cms-detection https://example.com --active
cms-detection urls.txt --format json --output results.json
You can also run the CLI as a module:
python -m lupaxa.cms_detection --help
python -m lupaxa.cms_detection --version
Documentation
Online documentation:
Source repository:
Serve docs locally
From a clone of the repository:
make mkdocs-serve
Then open the local URL printed by MkDocs in your browser.
Development
Clone the repository and install with Make:
make init # first-time makefile-skills checkout
make python-install-dev # editable install with [dev]
make python-check # lint, type-check, and test
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file lupaxa_cms_detection-0.1.0.tar.gz.
File metadata
- Download URL: lupaxa_cms_detection-0.1.0.tar.gz
- Upload date:
- Size: 11.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
31e51d9a965ac35920590496b3c2dcfb634f3b5191149a45bf7699e2f3682450
|
|
| MD5 |
bd2ec3282b92883c70300e1570154534
|
|
| BLAKE2b-256 |
9748976e8a484faf35526704499342d4be78cb20abfeb30de026c449a46f4919
|
Provenance
The following attestation bundles were made for lupaxa_cms_detection-0.1.0.tar.gz:
Publisher:
generate-release.yml on lupaxa-security-toolbox/cms-detection
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
lupaxa_cms_detection-0.1.0.tar.gz -
Subject digest:
31e51d9a965ac35920590496b3c2dcfb634f3b5191149a45bf7699e2f3682450 - Sigstore transparency entry: 2598312074
- Sigstore integration time:
-
Permalink:
lupaxa-security-toolbox/cms-detection@e57c71f57049559f909cd20bc289e93bdad97ab0 -
Branch / Tag:
refs/tags/v0.1.0 - Owner: https://github.com/lupaxa-security-toolbox
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
generate-release.yml@e57c71f57049559f909cd20bc289e93bdad97ab0 -
Trigger Event:
push
-
Statement type:
File details
Details for the file lupaxa_cms_detection-0.1.0-py3-none-any.whl.
File metadata
- Download URL: lupaxa_cms_detection-0.1.0-py3-none-any.whl
- Upload date:
- Size: 14.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
928ccf412f367c6ed720aebf5dde682e846befff66db0a566021e1a227928f19
|
|
| MD5 |
7d46661b13e5f4c75be2b163ff8d3a35
|
|
| BLAKE2b-256 |
c99fdcd724e9c7d9d0483eed55542fe6c88cc290e6ec9a32d4d108ed69121ba9
|
Provenance
The following attestation bundles were made for lupaxa_cms_detection-0.1.0-py3-none-any.whl:
Publisher:
generate-release.yml on lupaxa-security-toolbox/cms-detection
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
lupaxa_cms_detection-0.1.0-py3-none-any.whl -
Subject digest:
928ccf412f367c6ed720aebf5dde682e846befff66db0a566021e1a227928f19 - Sigstore transparency entry: 2598312541
- Sigstore integration time:
-
Permalink:
lupaxa-security-toolbox/cms-detection@e57c71f57049559f909cd20bc289e93bdad97ab0 -
Branch / Tag:
refs/tags/v0.1.0 - Owner: https://github.com/lupaxa-security-toolbox
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
generate-release.yml@e57c71f57049559f909cd20bc289e93bdad97ab0 -
Trigger Event:
push
-
Statement type:
