Is it possible for a 3rd party to reliably discern your CMS?

Question

I don't know much about poking at servers, etc, but in light of the (relatively) recent Wordpress security issues, I'm wondering if it's possible to obscure which CMS you might be using to the outside world.

Obviously you can rename the default login page, error messages, the favicon (I see the joomla one everywhere) and use a non-default template, but the sorts of things I'm wondering about are watching redirects somehow and things like that. Do most CMS leave traces?

This is not to replace other forms of security, but more of a curious question.

Thanks for any insight!

Answer 1

Yes, many CMS leave traces like the forming of identifiers and hierarchy of elements that are a plain giveaway.

This is however not the point. What is the point, is that there are only few very popular CMS. It is not necessary to determine which one you use. It will suffice to methodically try attack techniques for the 5 to 10 biggest CMS in use on your site to get a pretty good probability of success.