<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Technology Stack Fingerprinting

## Wappalyzer API

### Lookup
```bash
curl -s -H "x-api-key: $WAPPALYZER_KEY" \
  "https://api.wappalyzer.com/v2/lookup/?urls=https://example.com"
```

### Response Fields
- `name`: Technology name
- `categories`: Technology categories
- `versions`: Detected versions
- `confidence`: Detection confidence (0-100)

## BuiltWith API

### Free Lookup
```bash
curl -s "https://api.builtwith.com/free1/api.json?KEY=$BW_KEY&LOOKUP=example.com"
```

### Domain Info
```bash
curl -s "https://api.builtwith.com/v21/api.json?KEY=$BW_KEY&LOOKUP=example.com"
```

## WhatWeb

### Basic Scan
```bash
whatweb -v example.com --log-json=results.json
```

### Aggressive Mode
```bash
whatweb -v --aggression 3 example.com --log-json=results.json
```

## wafw00f

### WAF Detection
```bash
wafw00f example.com -a -o waf.json -f json
```

### Supported WAFs
```bash
wafw00f -l  # List all detectable WAFs
```

## httpx

### Tech Detection
```bash
httpx -u example.com -tech-detect -silent -json
```

### Bulk Scan
```bash
httpx -l urls.txt -tech-detect -status-code -title -silent -json -o results.json
```

## Shodan

### Host Lookup
```bash
shodan host 1.2.3.4 --fields hostnames,os,ports,product,version
```

### Search
```bash
shodan search "hostname:example.com" --fields ip_str,port,product,version
```

## Retire.js

### Scan JS Files
```bash
retire --jspath ./js/ --outputformat json --outputpath retire.json
```

## Environment Variables

| Variable | Description |
|----------|-------------|
| `WAPPALYZER_KEY` | Wappalyzer API key |
| `BUILTWITH_KEY` | BuiltWith API key |
| `SHODAN_API_KEY` | Shodan API key |
