Skip to content

CMS Detection

lupaxa-cms-detection identifies which CMS a website is using from public signals. It reports the CMS name, the evidence that led to the call, a version when one is exposed, and a confidence rating.

Authorised use only

Use this tool for authorised security-assessment recon only. You must have permission to test the target.

Install the package for the library API and the cms-detection console command:

pip install lupaxa-cms-detection
cms-detection https://target.example

You can also run python -m lupaxa.cms_detection.

What it does

  • Scores homepage signals (generator meta, headers, cookies, script hosts)
  • Fetches a few well-known public files when identity or version is still missing
  • Optionally runs broader path probes with --active
  • Never treats a bare HTTP 200 as a path hit — the response must contain a matching snippet
  • Returns one best cms, other candidates, evidence, and confidence

Next steps