Websites using JEE

Question

Hi guys,

I have a simple question, but I can't find out the answer. I'm wondering if we can see that a website is built using the JEE technology, or servlets/JSP. I think it could be possible to look for specials pages from the server (404, wrong parameters, ...) in some cases, but what about the everyday use ?

In fact, I look for a collection of great (or wide used) website using the java technology, and I can't really find a list of these. I'llbe very happy if you can help me with these two small questions

Answer 1

You can use nmap to detect server type.

Eg: nmap -A -T4 serverhostname

See here: http://nmap.org/book/vscan.html

Answer 2

I don't think there is a bullet proof way to tell what technologies a website that you don't control was built with - any common clues can always be hidden or made to look like something else on purpose.

You can look at the Server header in a HTTP response (Tomcat seems to use "Apache-Coyote/1.1"), it may give you a clue. Keep in mind that the server running the website may be hidden from outside access, with other kind of servers acting as proxies placed in front of it. You cannot be sure which server's header you end up getting.

Personally, I tend to recognize Java web apps from the URLs (*.do = typical Struts, .jsf/.faces = Java Server Faces, ?wicket:interface = Wicket, etc), but again, these are configurable and subject to change. In today's world of REST and pretty URLs, don't bet on this either.

Out of curiosity, why do you need a list of popular websites built with Java?

Answer 3

You can hide it completely so that it's not visible from the URL or the response headers. I at least can tell that Google and Flickr are using a Java backend. Also a lot of banking/financial systems run on it.

For the remnant, just check the portfolios of well-known Java EE based frameworks. E.g. Liferay, IceFaces, Seam