Web Application Fingerprinting Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects attempts to fingerprint web applications by identifying the 'WhatWeb' string in the HTTP User-Agent header. WhatWeb is a web application scanner that identifies technologies used by websites, which can be an indicator of reconnaissance activity.