FortyNorthSecurity/EyeWitness
EyeWitness
EyeWitness is a web infrastructure mapper and reconnaissance tool designed to automate the visual mapping of exposed web services. It functions as a headless browser screenshotter and HTTP reconnaissance utility that captures visual evidence and extracts server headers from lists of web targets.
The system identifies server technologies and audits for common default administrative credentials to map an organization's external attack surface. It generates searchable HTML security reports that combine screenshots, page source code, and categorized analysis results for vulnerability assessment.
The tool includes capabilities for web server reconnaissance and attack surface mapping, utilizing multithreaded target processing and buffer-based resource management to handle high-volume scanning. It supports importing target lists from text and XML formats.
Features
- Attack Surface Mapping - Discovers and documents internet-facing assets by capturing screenshots to identify an organization's external attack surface.
- Website Analysis and Reconnaissance - Analyzes HTTP server headers and technology stacks to identify versions and potential vulnerabilities.
- Browser Screenshot Capture - Captures screenshots of the visible browser area to visually identify exposed web interfaces.
- Reconnaissance Screenshot Tools - Captures full-page screenshots and extracts headers from web targets for visual security reconnaissance.
- Server Configuration Analysis - Audits HTTP headers to extract specific service and version information from targeted websites.
- Attack Surface Mappers - Identifies server technologies and default credentials to catalog internet-facing infrastructure and organizational exposure.
- HTTP Header Analyzers - Captures and inspects HTTP response headers to analyze the technology stack of web services.
- HTTP Response Header Inspectors - Inspects HTTP response headers to isolate technology signatures and server version strings.
- Headless Browsers - Utilizes automated headless browser engines to render remote web pages and capture visual evidence.
- Screenshotters - Provides a headless browser utility to automate the visual mapping of exposed web services.
- Static Report Generation - Converts collected scan data and screenshots into standalone HTML websites for offline analysis.
- Portable HTML Reports - Produces self-contained, searchable HTML reports containing page source and visual evidence.
- Screenshot Reports - Generates browsable HTML reports that embed screenshots and response headers for visual analysis.
- Concurrent Target Scanners - Distributes network requests across multiple concurrent threads to accelerate large-scale infrastructure reconnaissance.
- Credential Testing Tools - Provides an active auditing feature that tests discovered web interfaces against a list of common default administrative credentials.
- Default Credential Auditing - Checks discovered web interfaces for common default administrative passwords to identify insecure access points.
- Vulnerability Report Generation - Generates detailed HTML reports combining visual evidence and server data for security audits.
- Visual Reconnaissance - Automated screenshot capture and header analysis for web targets.
- Visual Reconnaissance - Designated tool for taking screenshots and reporting on web services.
- Exploitation Frameworks - Screenshots web services.
- Reconnaissance - Automates domain screenshotting for manual review.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
