A Chrome extension that shows what a website is built with, from CMS and framework to server, CDN and security headers, in one click.
Kenapa
(01)Finding out what a website runs on means digging through view-source, DevTools and response headers by hand. Existing tools often miss the details that matter: the exact version, the Odoo edition, or whether an outdated library is exposed.
TechStack Detector reads the page and its response headers and lists the CMS, ERP (Odoo with version and edition), JS framework, backend, web server, CDN, UI library and analytics in one popup. A separate tab grades the site's security headers from A to F.
Detail
(02)TechStack Detector is a Manifest V3 Chrome extension written in vanilla JavaScript with no build step. Detection is signature based: each technology is matched on headers, cookies, meta tags, scripts, DOM, CSS variables and window globals, and the evidence is combined into a confidence score.
The Security tab runs a mostly passive audit on what the browser already received: HTTPS and mixed content, HSTS, CSP quality, clickjacking, nosniff, Referrer-Policy, Permissions-Policy, CORS, exposed server versions, session cookie flags and known vulnerable or end-of-life versions. It does not scan ports or probe sensitive paths.
Adding a new technology means adding one object to signatures.js. Nothing is sent to any third-party server.
Fitur
(03)- 01
Detects CMS, JS frameworks, backend, web server, CDN, UI libraries and analytics
- 02
Odoo detection with version and edition
- 03
Security audit with a 0-100 score and A-F grade
- 04
Checks HSTS, CSP, clickjacking, cookie flags, CORS and exposed versions
- 05
Flags vulnerable and end-of-life library versions
- 06
Shows server IP and full response headers
- 07
Live updates in the popup, badge count on the toolbar icon
- 08
Add your own signatures in a single file, no build step
Coba TechStack Detector sekarang.
Kode sumber, cara pakai, dan pembaruan terbaru ada di GitHub.