How to hide Python & Django technologies from Wappalyzer

user_14483074 0
Viewed 704

I have a Django site and I want to hide Python and Django technologies from the eyes of Wappalyzer and hackers.

enter image description here

I've been searching for this topic on the net and found nothing useful.

How can I do that in Django version 3 and python version 3.7?

How to do that in different versions of Django and python?

Any help would be appreciated.

[Edit]:

I've found the answer!

According to @cizario's answer, I used the package django-hide (https://pypi.org/project/django-hide/).

Then in every template that has a form with {% csrf_token %}, I added {% load django_hide %} and changed the {% csrf_token %} to {% h_csrf_token %}.

It is because of the way Wappalyzer find the technologies according to @Reza Heydari's answer. If you go to any page that has a {% csrf_token %}, Wappalyzer finds the csrfmiddlewaretoken name in the input tag and find Django technology and add it to the technologies list. But with django-hide package, the input name will be randomized, something like:

< input type="hidden" name="ImNsklFHaOdsahbaz54h0AGadZW4i" value="6ARtjav4235rW81tNvZeAJATAtADTJHahaThAhYDFEThdzfergga6YaDLnNI">

Then I went to Wappalyzer Options and clear out the cache and it works now!

Note: Clearing the Wappalyzer is important, otherwise Wappalyzer shows cached technologies.

python-3.x django
2 Answers

Wappalyzer is an opensource project based on this question link

they use HTML and regex to find technologies of website. (link)

if you check the link above you can see for Django they search for input with name="csrfmiddlewaretoken" ( link )

user_129124760
user_123684190
Related