The Lupaxa Security Toolbox
Part of The Lupaxa Project

lupaxa-cms-detection

Identify which CMS a website is using from public signals — name, evidence, version when it is exposed, and a confidence rating.

Built for authorised security-assessment recon used by The Lupaxa Project.

Features

• Detect a CMS from public signals: generator tags, headers, cookies, and scripts
• Report name, evidence, version when it is exposed, and confidence
• Quiet default: homepage plus confirm files for CMS that already scored
• Optional --active broader path probes, including a catalogue confirm sweep when the homepage is quiet (a path is never a hit from HTTP 200 alone)
• Library API (detect / detect_many) and CLI (cms-detection)
• Text, JSON, and CSV output
• Fully typed, linted, formatted, and tested

Installation

From PyPI

pip install lupaxa-cms-detection

From source (development mode)

pip install -e ".[dev]"

Requires Python 3.10+. Runtime dependencies: requests, beautifulsoup4.

Library quick start

from lupaxa.cms_detection import detect

result = detect("https://example.com", active=False)
print(result.cms, result.version, result.confidence)

CLI quick start

cms-detection --help
cms-detection https://example.com
cms-detection https://example.com --active
cms-detection urls.txt --format json --output results.json

You can also run the CLI as a module:

python -m lupaxa.cms_detection --help
python -m lupaxa.cms_detection --version

Documentation

Online documentation:

Documentation

Source repository:

GitHub

Serve docs locally

From a clone of the repository:

make mkdocs-serve

Then open the local URL printed by MkDocs in your browser.

Development

Clone the repository and install with Make:

make init                # first-time makefile-skills checkout
make python-install-dev  # editable install with [dev]
make python-check        # lint, type-check, and test