Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Jebastin 42 posts 91 karma points
    Nov 22, 2016 @ 05:59
    Jebastin
    0

    Is there any ways to identify a website is developed with Umbraco CMS?

    I need the list of websites built with Umbraco CMS and also would like to know if there are any ways to identify whether a website is developed using Umbraco CMS or not, programmatically. Thanks.

  • Alex Skrypnyk 5740 posts 21795 karma points MVP 4x admin c-trib
    Nov 22, 2016 @ 09:52
    Alex Skrypnyk
    1

    Hi Jebastin,

    You can make call to /umbraco/ and /umbraco/umbraco.aspx

    If this pathes are not closed and this is Umbraco - you will get page with login screen.

    Thanks,

    Alex

  • Harry Spyrou 199 posts 561 karma points
    Nov 22, 2016 @ 11:28
    Harry Spyrou
    0

    Also, I've noticed that Umbraco sometimes puts a big ass whitespace before and after input text (that's in Developer Tools). That makes it easy for me to see it's from Umbraco.

  • Lee Kelleher 3905 posts 14863 karma points MVP 10x admin c-trib
    Nov 22, 2016 @ 12:10
    Lee Kelleher
    1

    Hey Jebastin, Alex is right - best thing is to check for those file paths.

    @Harry - just to note that Umbraco doesn't do anything to manipulate the frontend markup. If there are excessive whitespaces, then it'll probably be in the template itself :-)

    Cheers,
    - Lee

  • Chris Roberts 74 posts 106 karma points c-trib
    Nov 22, 2016 @ 13:10
    Chris Roberts
    1

    It's worth noting that the /umbraco folder can (and arguably should) be renamed / secured in a live installation, making it impossible to use this mechanism to detect that a site is built in Umbraco.

    Ideally, it shouldn't be possible to tell whether a site is built using Umbraco. That way, should a security vulnerability be found, your site won't be on any list of 'targets' which could be attacked.

    Obscurity shouldn't be the only security mechanism in place, but it's another tool in the developers' box!

  • Aditya 23 posts 127 karma points
    Nov 23, 2016 @ 06:04
    Aditya
    0

    Any best practices on how to do this? I've been meaning to try, but don't want to break the site by messing something up.

  • Richard Hamilton 23 posts 124 karma points
    May 31, 2020 @ 13:15
    Richard Hamilton
    0

    But most people don't bother

  • George Phillipson 87 posts 236 karma points
    1 week ago
    George Phillipson
    0

    Hi Jebastin

    Old post, but there are a number of ways to protect your site, see https://our.umbraco.com/documentation/reference/security/Security-hardening/

    If you cannot use any of the options from above, use a subdomain for the back office and block access to https://www.yoursite.com/umbraco using IIS rewrite in the web.config.

    As for app_plugins and config, that's a bit trickier.

    George

  • D K M J 67 posts 200 karma points
    1 week ago
    D K M J
    0

    Hey jebastin,

    There is a chrome extension for umbraco. So that will help to goto the backend.No need to change URL manually because the backend URL is different for older versions. If it's developed in umbraco then the backend will show, if not then shows 404 page.

Please Sign in or register to post replies

Write your reply to:

Draft