loading
Loading content
loading
Discovery
WitnessMe screenshot mode for visual web inventory.
overview
After probing, witnessme-screenshot turns a host or URL list into a folder of rendered page images for visual triage.
Use -p when the target is a CIDR or IP range so the node knows which ports to hit before capturing.
For links or XPath field extraction on the same hosts, switch to witnessme-grab instead of screenshot mode.
use cases
Capture every live web service as an image so you can scan a grid of screenshots and spot the interesting hosts far faster than reading responses.
Spot default consoles, login pages, and dashboards in the screenshot wall, the kind of high-value target that hides in a flat list of 200s.
Pass an IP range and a port list so it probes each host on the given ports and captures whatever web service answers.
Use the headless browser to capture JavaScript-built pages accurately, instead of the empty shell a plain HTTP fetch returns.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| ports | STRING | -p | Ports to scan if IP Range/CIDR is provided |
| target | STRING | · | The target IP, range, CIDR or hostname |
| targets | FILE | · | The target IPs, ranges, CIDRs, hostnames, NMap XML file, or .Nessus file |
Showing key inputs. witnessme-screenshot exposes 3 inputs in total.
example
# witnessme-screenshot: capture screenshots for a URL listwitnessme screenshot -p urls.txt[+] https://www.example.com -> shots/www.example.com.png[+] https://api.example.com -> shots/api.example.com.png[+] https://dev.example.com -> shots/dev.example.com.png[+] https://staging.example.com -> shots/staging.example.com.png[+] https://mail.example.com -> shots/mail.example.com.pngguidance
Use when you want a visual pass over live web hosts. Prefer witnessme-grab when you need links or a specific field rather than images.
Same WitnessMe binary in grab mode. Extracts links and content; screenshot mode is for visual triage.
Go headless screenshot tool with a similar visual inventory and a different report layout.
faq
related
Extract URLs and endpoints from Android APK files.
Web path scanner.
Crawl pages, harvest potential parameters, write a custom wordlist.
Recursive content discovery with smart defaults and rich response filters.
Maintained gau fork for passive archive URL collection.
Extract JavaScript file URLs from a page or URL list.
A host list feeds witnessme-screenshot, which renders each web service in a headless browser and writes a folder of screenshots for visual triage.
Facts on this page come from the live Trickest tool library.