Forum Discussion
AltostratusHow to block web site technologies information with ASM/Advance WAF
Hi pinkzeppelin,
it is difficult to block sites like builtwith or wappalyzer from profiling your web application.
builtwith offers a site for removing your site data: https://builtwith.com/removals
wappalyzer offers some guidance how to hide the technologies you are using from their scanner: https://www.wappalyzer.com/articles/how-to-hide-technologies-from-wappalyzer/Also F5 offers some guidance and also some information on why it is difficult to hide your technology: K35304481: Is there any way to prevent ''Wappalyzer'' from detecting my server technology by F5 ASM?
These tools are often using your browser for profiling the technologies of a website. Webservers, frameworks and CMS can be easily identified by Headers, file extensions or cookies. You cannot identify these tools by their user-agent or source IPs. Best you can do is to hide and obfuscate your technology stack.
KR
Daniel
MVPI would not know how iRules can help. Both, wappalyzer and builtwith, either come as a browser plugin or they offer an API.
The browser plugin creates a profile of your web application and its technologies from the HTTP responses that your browser gets, it does not add extra requests or headers. You won't even notice that a visitor has it installed in his or her browser.
CirrostratusOK need to test then with few cases in hand
