Home / Footprinting / golang / Gowitness / Headless / Headless Chrome / Information Gathering / Linux / MacOS / Nmap / Scan / Screenshot / Security / Website / Windows / Gowitness - A Golang, Web Screenshot Utility Using Chrome Headless

Gowitness - A Golang, Web Screenshot Utility Using Chrome Headless

| Post sponsored by FaradaySEC | Multiuser Pentest Environment

gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line. Both Linux and macOS is supported, with Windows support 'partially working'.
Inspiration for gowitness comes from Eyewitness. If you are looking for something with lots of extra features, be sure to check it out along with these other projects.

Installation
All you would need is an installation of the latest Google Chrome or Chromium and gowitness itself. gowitness can be downloaded using go get -u github.com/sensepost/gowitness or using the binaries available for download from the releases page.

Running using docker
To screenshot a page using docker, simply run the following command that would also pull the latest gowitness image:
docker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest single --url=https://www.google.com
Keep in mind that a folder needs to be mounted into the container for gowitness to write your screenshots to, otherwise they will be lost when the container exits. The container is configured with the /screenshots/ directory as the working directory, so the above command mounts a local screenshots/ directory there.
If you want to read an nmap file, save it locally into a screenshots directory, and use it with:
docker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest nmap -f /screenshots/nmap.xml
For any other commands, you can get help similar to the local binary install. For example:
docker run --rm -it -v $(pwd)/screenshots:/screenshots leonjza/gowitness:latest -h
A commandline web screenshot and information gathering tool by @leonjza

Usage:
  gowitness [command]

Available Commands:
  file        Screenshot URLs sourced from a file
  help        Help about any command
  nmap        Screenshot services from an Nmap XML file
  report      Work with gowitness reports
  scan        Scan a CIDR range and take screenshots along the way
  single      Take a screenshot of a single URL
  version     Prints the version of gowitness

Build from source
To build gowitness from source, follow the following steps:
  • Ensure that you have at least golang version 1.13.
  • Clone this repository and cd into it.
  • Run go build to get the gowitness binary for the current machine.
  • Or, make to build for all targets. Binaries will be in the build/ diretory.

Usage examples

Screenshot a single website
$ gowitness single --url=https://www.google.com/
This should result in a file being created called: https-www.google.com.png

Screenshot a cidr
$ gowitness scan --cidr 192.168.0.0/24 --threads 20
This should result in many .png images in the current directory when complete. This can would also use 20 threads and not the default of 4.

Generate a report
$ gowitness report generate
This should result in an report.html file with a screenshot report.
$ gowitness report generate --sort-perception
This should result in an report.html file with a screenshot report where screenshots are sorted using perception hashing.
$ gowitness report list
This should list the entries in the gowitness.db file.


Gowitness - A Golang, Web Screenshot Utility Using Chrome Headless Gowitness - A Golang, Web Screenshot Utility Using Chrome Headless Reviewed by Zion3R on 8:30 AM Rating: 5