All to know about BuiltWith

BuiltWith is a technology search or profiler.

It provides real-time target information to pentesters through the domain API and domain live API .

The domain API provides technical information such as analytics service, built-in plugins, frameworks, libraries, etc. to penetration testers.

The domain API relies on BuiltWith database to provide current and historical technology information about the target.

The Lookup pane retrieves the same information that the domain API provides.

On the other hand, the domain live API does extensive searches on a domain or URL.

It is possible to integrate both APIs into a security product to provide technical information to end users.

1) BuiltWith Domain API

The BuiltWith Domain API provides XML and JSON access to the technology information of a website which includes all technical information as found on detailed lookups at builtwith.com and additional meta data where available.

2) The general access method is as follows - api.builtwith.com/v18/api.[xml|json]?KEY=[Y.. KEY]&LOOKUP=[DOMAIN]

3) Authentication You must provide your API key in each lookup. See the examples for how this works.

4) Client SDK A Client SDK for C# is available at github.com/builtwith/BuiltWith-C-Client-API and can be installed via NuGet package 'BuiltWith'.

5) Get Domain Example XML Get Single Domain api.builtwith.com/v18/api.xml?KEY=[YOUR KEY]&LOOKUP=hotelscombined.com

6) JSON Get Single Domain api.builtwith.com/v18/api.json?KEY=[YOUR KEY]&LOOKUP=builtwith.com

7)Get Multiple Domains Example Provide multiple LOOKUP domains as a CSV (up to 16) api.builtwith.com/v18/api.xml?KEY=[YOUR KEY]&LOOKUP=hotelscombined.com,builtwith.com

8) High Throughput Lookups For ultra fast high performance API lookups use the following syntax. api.builtwith.com/v18/api.json?KEY=[YOUR KEY]&HIDETEXT=yes&NOMETA=yes&NOPII=yes&NOLIVE=yes&NOATTR=yes&LOOKUP=site1.com,site2.com,site3.com,site4.com,site5.com,site6.com,site7.com,site8.com,site9.com,site10.com,site11.com,site12.com,site13.com,site14.com,site15.com,site16.com

9) 16 Root Domains or Subdomains Only Per Lookup - alphabetically random for performance improvements Text, Meta, Attributes, Contacts all removed Removes live lookup of results if not in our database For even higher throughput contact us about dedicated endpoint solutions.

10) Get Specific Page Profile Example Providing an internal URL or subdomain will get that specific page technology profile. Ensure you encode the LOOKUP parameter. api.builtwith.com/v18/api.json?KEY=[YOUR KEY]&LOOKUP=hotelscombined.com%2FPlace%2FHawaii.htm

Reference: api.builtwith.com/domain-api