Screenshot the web services from an nmap XML scan

gowitness-nmap takes the XML output of an nmap scan and screenshots the web services in it. Rather than building a URL list by hand, you point it at a port scan with -f, and it walks the results, picks the http and https services, and captures each interface with headless Chrome.

The nmap-aware filters decide what gets rendered: --open keeps only open ports, --port narrows to specific port numbers, and --service or --service-contains match on the service name nmap detected. The gowitness render controls still apply, so you can set the thread count with -t, a preflight --timeout, --fullpage capture, screenshot resolution, a custom --user-agent, and a --proxy.

Reach for it right after a port-scan stage, when you want scan findings turned into a visual gallery instead of a table of open ports. Web apps on odd ports get captured alongside the usual 80 and 443, which makes it good for spotting login pages, default panels, and forgotten admin consoles.