There's builtwith.com - looks at server response headers etc. Doesn't always detect everything because hiding such information is a security advantage for website owners.