awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
michenriksen avatar

michenriksen/aquatoneArchived

0
View on GitHub↗
5,940 stars·905 forks·Go·MIT·11 viewsmichenriksen.com/blog/aquatone-now-in-go↗

Aquatone

Aquatone is a web screenshot reconnaissance tool that captures full-page screenshots of web services discovered during network reconnaissance and groups them by visual similarity. It scans a list of hosts or domains for HTTP and HTTPS services on common and custom ports to find responsive web endpoints, then takes full-page screenshots of those pages for quick review.

The tool accepts piped input from other tools and extracts URLs, domains, and IP addresses using regex pattern matching, making it pipeline-friendly for integration into existing workflows. It can also read XML output from Nmap or Masscan to skip port scanning and proceed directly to screenshotting. Aquatone produces a browsable HTML report that organizes screenshots and response headers by visual similarity, enabling rapid analysis of discovered web services.

Scan results can be exported as structured files, saving responsive URLs, raw headers, response bodies, and session data for further analysis. The tool supports scanning user-specified ports or built-in port list aliases to discover web services on non-standard ports.

Features

  • Reconnaissance Screenshots - Captures full-page screenshots of discovered web services for reconnaissance.
  • Self-Contained HTML Reports - Produces a self-contained HTML report embedding screenshots and response headers for offline browsing.
  • Concurrent Scan-to-Screenshot Pipelines - Provides a concurrent pipeline that scans ports and directly feeds responsive hosts into a screenshot queue.
  • Web Service Port Scans - Scans a list of IPs, hostnames, or domains for common HTTP ports and converts responsive targets into URLs.
  • Portable HTML Reports - Produces a browsable HTML report that groups collected screenshots and response headers by visual similarity.
  • Screenshot Reports - Produces a browsable HTML report organizing screenshots by visual similarity.
  • HTML Analysis Reports - Produces a browser-viewable report that groups screenshots and response headers by similarity for quick analysis.
  • Screenshot Similarity Clustering - Groups screenshots by perceptual hash comparison to identify visually similar pages and cluster them in the report.
  • CDP Screenshot Captures - Uses headless Chromium via CDP to capture full-page screenshots of responsive web pages.
  • Reconnaissance Screenshot Tools - Captures full-page screenshots of web services discovered during network reconnaissance.
  • HTTP Endpoint Scanners - Scans hosts for HTTP/HTTPS services on common and custom ports.
  • Custom Port List Scans - Scans user-defined ports or built-in aliases to discover web services on target hosts.
  • Nmap and Masscan XML Ingestion - Reads XML output from Nmap or Masscan to skip port scanning and proceed directly to screenshotting.
  • Pipeline Target Ingestion - Accepts piped input from other tools and extracts URLs, domains, and IPs using regex pattern matching.
  • Regex Extraction Utilities - Parses piped input using regex to extract URLs, domains, and IP addresses from arbitrary text streams.
  • Regex-Based Target Ingestion - Accepts piped input from any tool and extracts URLs, domains, and IPs using regex pattern matching.
  • Regex-Based Target Ingestion - Accepts piped input of URLs, domains, or IP addresses and extracts targets using regex pattern matching.
  • Scan Result Exporters - Exports scan results as structured files for further analysis.
  • Scan Result Exporters - Exports responsive URLs, raw headers, response bodies, and session data into structured files for further analysis.
  • Scan Result Importers - Reads Nmap or Masscan XML output to bypass port scanning and proceed directly to screenshotting.
  • Port Range and Top List Filters - Scans user-specified ports or built-in port list aliases to discover web services on non-standard ports.
  • Multi-File Response Data Exports - Exports responsive URLs, raw headers, response bodies, and session data to separate files for downstream analysis.
  • Multi-Type Response Exports - Saves responsive URLs, session data, raw headers, and response bodies to files for further tooling.
  • Reconnaissance Tools - Tool for domain flyovers and visual reconnaissance.
  • Visual Reconnaissance - Visual inspection and overview of HTTP-based attack surfaces.
  • Domain Reconnaissance - Tool for visual inspection of domain subdomains.
  • Network Reconnaissance - Subdomain discovery and reporting tool.
  • Network Security - Performs reconnaissance and subdomain discovery on target domains.
  • Security Tools - Tool for performing domain flyovers and reconnaissance.
  • Subdomain Enumeration - Powerful tool for subdomain discovery and takeover identification.
  • Web Vulnerability Tools - Tool for subdomain takeover detection.

Star history

Star history chart for michenriksen/aquatoneStar history chart for michenriksen/aquatone

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Aquatone

These projects share indexed features with Aquatone. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • fortynorthsecurity/eyewitnessFortyNorthSecurity avatar

    FortyNorthSecurity/EyeWitness

    5,753View on GitHub↗

    EyeWitness is a web infrastructure mapper and reconnaissance tool designed to automate the visual mapping of exposed web services. It functions as a headless browser screenshotter and HTTP reconnaissance utility that captures visual evidence and extracts server headers from lists of web targets. The system identifies server technologies and audits for common default administrative credentials to map an organization's external attack surface. It generates searchable HTML security reports that combine screenshots, page source code, and categorized analysis results for vulnerability assessment.

    Python
    View on GitHub↗5,753
  • projectdiscovery/naabuprojectdiscovery avatar

    projectdiscovery/naabu

    5,766View on GitHub↗

    Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

    Gocdn-exclusionhacktoberfestnmap
    View on GitHub↗5,766
  • zmap/zmapzmap avatar

    zmap/zmap

    6,246View on GitHub↗

    ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

    Cinternet-measurementinternet-scanningport-scanner
    View on GitHub↗6,246
  • aboul3la/sublist3raboul3la avatar

    aboul3la/Sublist3r

    10,957View on GitHub↗

    Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by querying search engines and public intelligence sources. It functions as a security tool for identifying the digital footprint of a target domain. The project provides both passive enumeration through multi-source API aggregation and active discovery via a DNS brute force tool. It includes a TCP port scanner to identify active services and open ports on discovered subdomains, facilitating attack surface mapping. The tool can be used as a standalone utility or as a Python security

    Python
    View on GitHub↗10,957
Compare all 30 related projects→

Frequently asked questions

What does michenriksen/aquatone do?

Aquatone is a web screenshot reconnaissance tool that captures full-page screenshots of web services discovered during network reconnaissance and groups them by visual similarity. It scans a list of hosts or domains for HTTP and HTTPS services on common and custom ports to find responsive web endpoints, then takes full-page screenshots of those pages for quick review.

What are the main features of michenriksen/aquatone?

The main features of michenriksen/aquatone are: Reconnaissance Screenshots, Self-Contained HTML Reports, Concurrent Scan-to-Screenshot Pipelines, Web Service Port Scans, Portable HTML Reports, Screenshot Reports, HTML Analysis Reports, Screenshot Similarity Clustering.

Which projects share features with michenriksen/aquatone?

Projects with overlapping indexed features include: fortynorthsecurity/eyewitness — EyeWitness is a web infrastructure mapper and reconnaissance tool designed to automate the visual mapping of exposed… projectdiscovery/naabu — Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to… zmap/zmap — ZMap is a fast single packet network scanner designed for Internet-wide network surveys. aboul3la/sublist3r — Sublist3r is a subdomain enumeration tool and passive reconnaissance framework designed to discover subdomains by… sensepost/gowitness — Gowitness is a system for rendering web interfaces at scale to capture visual snapshots, HTTP metadata, and network… lanmaster53/recon-ng — recon-ng is an open source intelligence reconnaissance framework designed to automate the collection and aggregation…