sensepost/gowitness

Features

• Attack Surface Mapping - Identifies and visually documents the external attack surface of network ranges and URL lists.
• Automated Web Screenshots - Renders websites using headless browsers to programmatically capture images and metadata for security reporting.
• Network and Web Reconnaissance - Identifies and documents web applications across networks to map the external and internal attack surface.
• Nmap Integration - Parses Nmap output files to identify and queue discovered web services for automated visual capture.
• Scan Result Parsing - Parses Nmap network scan results to automatically identify and capture screenshots of discovered web services.
• Scan Result Visualizers - Converts Nmap network scan outputs into visual evidence by capturing screenshots of discovered web ports.
• Scan Result Importers - Parses XML output from Nmap scans to automatically queue discovered services for visual capture.
• Attack Surface Mappers - Identifies and catalogs internet-facing infrastructure by capturing screenshots across network ranges.
• CIDR-Based Scanning - Iterates through CIDR blocks to identify and capture screenshots of active web interfaces.
• Visual Snapshot Capture - Takes visual snapshots of web interfaces across lists of URLs or network scans using a headless browser.
• Headless Browser Orchestrators - Integrates with headless browser orchestrators to render pages and extract visual and DOM metadata.
• Metadata Storage - Uses a relational database to persist screenshot records and technical site metadata for structured querying.
• File-Based Target Loading - Reads Nmap XML and text files to automatically load and queue targets for scanning.
• Visual Capture Tools - Provides an API to trigger visual captures and screenshots of specific URLs for documentation and review.
• Local Worker Pools - Implements a managed pool of background workers to process multiple target URLs in parallel.
• Screenshot Galleries - Provides a web-based gallery interface for browsing, filtering, and managing a database of captured website screenshots.
• Browser Screenshot Capture - Renders specific URLs using a headless browser to save resulting images to files.
• Web Security Auditing - Gathers visual snapshots and technical metadata to document findings during security assessments.
• Visual Reconnaissance Servers - Hosts a local web server to display the collection of captured screenshots and their associated metadata.
• Visual Evidence Browsers - Provides an interactive web interface to review and navigate collected visual evidence of web interfaces.
• HTTP Metadata Accessors - Records DOM elements, TLS information, and request headers alongside visual captures of web pages.
• Request Metadata - Records HTTP headers, cookies, console logs, and request traffic during page rendering.
• URL Targeters - Accepts URLs through an HTTP interface to integrate visual capture into external automated workflows.
• Static Asset Serving - Hosts a local web server to serve captured images and metadata directly from the database.
• Utility Tools - Visual reconnaissance and screenshotting for web assets.
• Visual Reconnaissance - Headless Chrome utility for web screenshots.
• Image Processing - Screenshots webpages using headless Chrome.
• Visual Reconnaissance - Capture screenshots of web applications for reconnaissance.

Star history