gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line. Both Linux and macOS is supported, with Windows support 'partially working'.Inspiration for
gowitness comes from Eyewitness. If you are looking for something with lots of extra features, be sure to check it out along with these otherprojects.Installation
All you would need is an installation of the latest Google Chrome or Chromium and
gowitness itself. gowitness can be downloaded using go get -u github.com/sensepost/gowitness or using the binaries available for download from the releases page.Running using docker
To screenshot a page using docker, simply run the following command that would also pull the latest gowitness image:
docker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest single --url=https://www.google.comgowitness to write your screenshots to, otherwise they will be lost when the container exits. The container is configured with the /screenshots/ directory as the working directory, so the above command mounts a local screenshots/ directory there.If you want to read an nmap file, save it locally into a screenshots directory, and use it with:
docker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest nmap -f /screenshots/nmap.xmldocker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest -h
A commandline web screenshot and information gathering tool by @leonjza
Usage:
gowitness [command]
Available Commands:
file Screenshot URLs sourced from a file
help Help about any command
nmap Screenshot services from an Nmap XML file
report Work with gowitness reports
scan Scan a CIDR range and take screenshots along the way
single Take a screenshot of a single URL
version Prints the version of gowitnessBuild from source
To build
gowitness from source, follow the following steps:- Ensure that you have at least golang version 1.13.
- Clone this repository and
cdinto it. - Run
go buildto get thegowitnessbinary for the current machine. - Or,
maketo build for all targets. Binaries will be in thebuild/diretory.
Usage examples
Screenshot a single website
$ gowitness single --url=https://www.google.com/This should result in a file being created called:
https-www.google.com.pngScreenshot a cidr
$ gowitness scan --cidr 192.168.0.0/24 --threads 20This should result in many
.png images in the current directory when complete. This can would also use 20 threads and not the default of 4.Generate a report
$ gowitness report generateThis should result in an
report.html file with a screenshot report.$ gowitness report generate --sort-perceptionThis should result in an
report.html file with a screenshot report where screenshots are sorted using perception hashing.$ gowitness report listThis should list the entries in the
gowitness.db file.