User Guide

Synapse-Wappalyzer User Guide

Synapse-Wappalyzer adds new Storm commands to allow you to query the Wappalyzer API using your existing API key.

Examples

Setting your personal API key

To set-up a personal use API key:

> wappalyzer.setup.apikey --self myapikey
Setting Wappalyzer API key for the current user.

Enrich an inet:url node:

> [inet:url=https://vertex.link] | wappalyzer.query
inet:url=https://vertex.link
        .created = 2024/04/17 17:22:47.762
        :base = https://vertex.link
        :fqdn = vertex.link
        :params =
        :path =
        :port = 443
        :proto = https

Once results have been ingested, pivot to the it:prod:softver nodes created:

> inet:url=https://vertex.link -> it:hosturl -> it:host -> it:hostsoft -> it:prod:softver
it:prod:softver=a8f10b5f85fef4d10a88104251a0af01
        .created = 2024/04/17 17:22:49.430
        :semver = 5.7.2
        :semver:major = 5
        :semver:minor = 7
        :semver:patch = 2
        :software = 965c88ae1506a6266e1c4aea672369a8
        :vers = 5.7.2
        :vers:norm = 5.7.2
it:prod:softver=a339ef6be2c8f67921a0e01816c322e7
        .created = 2024/04/17 17:22:49.080
        :semver = 4.2.16
        :semver:major = 4
        :semver:minor = 2
        :semver:patch = 16
        :software = c08b65a66d0a6c82fad40907016f0016
        :vers = 4.2.16
        :vers:norm = 4.2.16
it:prod:softver=283b4c4fa79b54b018fe7fd66c6133f7
        .created = 2024/04/17 17:22:49.148
        :semver = 4.9.4
        :semver:major = 4
        :semver:minor = 9
        :semver:patch = 4
        :software = 42769dbf514ab59c8e801b140094455c
        :vers = 4.9.4
        :vers:norm = 4.9.4
it:prod:softver=945bdf9e7d96bd3d034a94d5bd283db2
        .created = 2024/04/17 17:22:49.275
        :semver = 3.5.1
        :semver:major = 3
        :semver:minor = 5
        :semver:patch = 1
        :software = 18ff68943bad45ca44fa25d6ee4a9c6c
        :vers = 3.5.1
        :vers:norm = 3.5.1
it:prod:softver=652e778b1ab23fb721b97ef85dd8ac1f
        .created = 2024/04/17 17:22:49.586
        :semver = 3.3.2
        :semver:major = 3
        :semver:minor = 3
        :semver:patch = 2
        :software = 0f9bf81b52d38de82da346284b524fc5
        :vers = 3.3.2
        :vers:norm = 3.3.2

Display urls which are still queued:

> wappalyzer.queue
Queued urls:
https://google.com
https://yahoo.com

Urls pending indexing:
1713374570693 - https://reddit.com
1713374570755 - https://facebook.com
1713374570755 - https://geocities.com

Use of meta:source nodes

Synapse-Wappalyzer uses a meta:source node and -(seen)> light weight edges to track nodes observed from the Wappalyzer API.

> meta:source=ee638d5c8dcad8edd3ec08c6dd158495
meta:source=ee638d5c8dcad8edd3ec08c6dd158495
        .created = 2024/04/17 17:22:48.870
        :name = wappalyzer api

Storm can be used to filter nodes to include/exclude nodes which have been observed by Synapse-Wappalyzer. The following example shows how to filter the results of a query to include only results observed by Synapse-Wappalyzer:

> inet:url=https://vertex.link -> it:hosturl +{ <(seen)- meta:source=ee638d5c8dcad8edd3ec08c6dd158495 }
it:hosturl=('ef46766fc8d98119cef1d992dd0f6b64', 'https://vertex.link')
        .created = 2024/04/17 17:22:48.988
        :host = ef46766fc8d98119cef1d992dd0f6b64
        :url = https://vertex.link