Screenshot web interfaces at scale with headless Chrome

gowitness points headless Chrome at every target in a list and saves a screenshot of what loads. A picture of each site is the quickest way to triage a wide attack surface: you spot login portals, default vendor panels, error screens, and forgotten admin apps at a glance, without reading through status codes and titles line by line.

It runs several Chrome workers at once, can probe a list of ports per host, and stores what it finds in more than one place: screenshots on disk plus a SQLite, Postgres, or MySQL database, CSV, or JSON lines. Full-page capture, a custom window size, a proxy, a spoofed user agent, and an injectable JavaScript hook control how each page renders before the shutter fires.

In a Trickest workflow, gowitness sits after subdomain discovery and HTTP probing so it only screenshots hosts that answer. It reads a file of targets and writes a folder of captures and metadata, which you review as a gallery to decide which hosts are worth testing by hand.