About

BackendInfo is a lightweight (24kb) Firefox extension that detects name and version of backends behind websites.

Detecting 15 different backends / 130+ versions

Drupal 6.x, 5.x, Wordpress 2.x

phpBB 2.x, 3.x, Django, DokuWiki

MediaWiki, MoinMoin, Reddit, Blogger

Joomla 1.5.x, 1.0.x

more…

This extension adds an icon to the statusbar, that let’s you detect the backend and view detail information. The icon changes accordingly to the detection status:



Default icon

(click to start)

Wordpress

detected

More infos

on mouseover

Text info

Nothing found

The context menu (right mouse click) provides a few options, eg. if you are in a sub-url (such as /blog/) you can choose between the base url or the current one, whereas a left mouse click directly checks the current node.





Try it out!

Find lots of sites using Django, DokuWiki, Drupal, Joomla (2), MediaWiki, MoinMoin, phpBB, Reddit, Wordpress.

We need your help!

Visit the project page at addons.mozilla.org, vote and leave a short review . Thanks!!

. Thanks!! You could enhance the supported backends by adding a new filter .

. Send is infos about insecure software versions along with a link to more information. It could be interesting to mark insecure backend versions and provide a link to further informations. Please post it via mail or in the forum.

How it works

BackendInfo basically works by detecting URLs, strings and regular expressions. This ranges from typical html and css codes to certain directory and file-structures. It is easy to track changes in css, js and html files between releases that can be used to identify the backends exact version with tools like Meld. Furthermore, documents like CHANGELOG, UPDATES, etc are often left readable after a standard backend installation, providing some more insight as well.

BackendInfo is a “plugin framework”, every extension checks for a given backend by required URLs, and optionally a number of strings or regex patterns that have to be contained or not contained in this url.

No statistics are collected, neither is any data reported to another server. Just plain and simple detection of the current website. Nothing else!

Source Code