Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

  • Jebastin 42 posts 91 karma points
    Nov 22, 2016 @ 05:59

    Is there any ways to identify a website is developed with Umbraco CMS?

    I need the list of websites built with Umbraco CMS and also would like to know if there are any ways to identify whether a website is developed using Umbraco CMS or not, programmatically. Thanks.

  • Alex Skrypnyk 6134 posts 23953 karma points MVP 8x admin c-trib
    Nov 22, 2016 @ 09:52
    Alex Skrypnyk

    Hi Jebastin,

    You can make call to /umbraco/ and /umbraco/umbraco.aspx

    If this pathes are not closed and this is Umbraco - you will get page with login screen.



  • Harry Spyrou 212 posts 604 karma points
    Nov 22, 2016 @ 11:28
    Harry Spyrou

    Also, I've noticed that Umbraco sometimes puts a big ass whitespace before and after input text (that's in Developer Tools). That makes it easy for me to see it's from Umbraco.

  • Lee Kelleher 4020 posts 15802 karma points MVP 13x admin c-trib
    Nov 22, 2016 @ 12:10
    Lee Kelleher

    Hey Jebastin, Alex is right - best thing is to check for those file paths.

    @Harry - just to note that Umbraco doesn't do anything to manipulate the frontend markup. If there are excessive whitespaces, then it'll probably be in the template itself :-)

    - Lee

  • Chris Roberts 74 posts 106 karma points c-trib
    Nov 22, 2016 @ 13:10
    Chris Roberts

    It's worth noting that the /umbraco folder can (and arguably should) be renamed / secured in a live installation, making it impossible to use this mechanism to detect that a site is built in Umbraco.

    Ideally, it shouldn't be possible to tell whether a site is built using Umbraco. That way, should a security vulnerability be found, your site won't be on any list of 'targets' which could be attacked.

    Obscurity shouldn't be the only security mechanism in place, but it's another tool in the developers' box!

  • Aditya 24 posts 128 karma points
    Nov 23, 2016 @ 06:04

    Any best practices on how to do this? I've been meaning to try, but don't want to break the site by messing something up.

  • Richard Hamilton 36 posts 158 karma points
    May 31, 2020 @ 13:15
    Richard Hamilton

    But most people don't bother

  • George Phillipson 108 posts 287 karma points
    Jun 20, 2020 @ 13:22
    George Phillipson

    Hi Jebastin

    Old post, but there are a number of ways to protect your site, see

    If you cannot use any of the options from above, use a subdomain for the back office and block access to using IIS rewrite in the web.config.

    As for app_plugins and config, that's a bit trickier.


  • Dhanesh Kumar MJ 158 posts 512 karma points MVP c-trib
    Jun 20, 2020 @ 13:34
    Dhanesh Kumar MJ

    Hey jebastin,

    There is a chrome extension for umbraco. So that will help to goto the backend.No need to change URL manually because the backend URL is different for older versions. If it's developed in umbraco then the backend will show, if not then shows 404 page.

Please Sign in or register to post replies

Write your reply to: