Discovery
Capture rendered pages for visual host triage
WitnessMe screenshot mode for visual web inventory.
overview
What witnessme-screenshot does
After probing, witnessme-screenshot turns a host or URL list into a folder of rendered page images for visual triage.
Use -p when the target is a CIDR or IP range so the node knows which ports to hit before capturing.
For links or XPath field extraction on the same hosts, switch to witnessme-grab instead of screenshot mode.
use cases
Where witnessme-screenshot fits
Triage a large host list visually
Capture every live web service as an image so you can scan a grid of screenshots and spot the interesting hosts far faster than reading responses.
Surface exposed admin and login panels
Spot default consoles, login pages, and dashboards in the screenshot wall, the kind of high-value target that hides in a flat list of 200s.
Screenshot a CIDR with port scanning
Pass an IP range and a port list so it probes each host on the given ports and captures whatever web service answers.
Render single-page apps as users see them
Use the headless browser to capture JavaScript-built pages accurately, instead of the empty shell a plain HTTP fetch returns.
reference
witnessme-screenshot inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| ports | STRING | -p | Ports to scan if IP Range/CIDR is provided |
| target | STRING | · | The target IP, range, CIDR or hostname |
| targets | FILE | · | The target IPs, ranges, CIDRs, hostnames, NMap XML file, or .Nessus file |
Showing key inputs. witnessme-screenshot exposes 3 inputs in total.
example
Run witnessme-screenshot
# witnessme-screenshot: capture screenshots for a URL listwitnessme screenshot -p urls.txt[+] https://www.example.com -> shots/www.example.com.png[+] https://api.example.com -> shots/api.example.com.png[+] https://dev.example.com -> shots/dev.example.com.png[+] https://staging.example.com -> shots/staging.example.com.png[+] https://mail.example.com -> shots/mail.example.com.pngguidance
Choosing witnessme-screenshot
Use when you want a visual pass over live web hosts. Prefer witnessme-grab when you need links or a specific field rather than images.
witnessme-grab
Same WitnessMe binary in grab mode. Extracts links and content; screenshot mode is for visual triage.
gowitness
Go headless screenshot tool with a similar visual inventory and a different report layout.
faq
witnessme-screenshot questions
related
More Discovery tools
apkurlgrep
Extract URLs and endpoints from Android APK files.
cariddi
Crawl a domain list and scan responses for endpoints, secrets, tokens, and juicy files.
crawlergo
Browser-driven crawler that harvests requests for downstream scanners.
dirsearch
Web path scanner.
fallparams
Crawl pages, harvest potential parameters, write a custom wordlist.
feroxbuster
Recursive content discovery with smart defaults and rich response filters.
Run witnessme-screenshot yourself
A host list feeds witnessme-screenshot, which renders each web service in a headless browser and writes a folder of screenshots for visual triage.
Facts on this page come from the live Trickest tool library.