loading
Loading content
loading
Discovery
WitnessMe screenshot mode for visual web inventory.
overview
witnessme-screenshot runs WitnessMe in screenshot mode to capture what each URL renders, building an Eyewitness-style visual inventory.
It focuses on grabbing page images so analysts can skim large host sets without opening every site by hand.
Run it after URL probing when you want a gallery alongside titles and status codes from other tools.
use cases
Capture every live web service as an image so you can scan a grid of screenshots and spot the interesting hosts far faster than reading responses.
Spot default consoles, login pages, and dashboards in the screenshot wall, the kind of high-value target that hides in a flat list of 200s.
Pass an IP range and a port list so it probes each host on the given ports and captures whatever web service answers.
Use the headless browser to capture JavaScript-built pages accurately, instead of the empty shell a plain HTTP fetch returns.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| ports | STRING | -p | Ports to scan if IP Range/CIDR is provided |
| target | STRING | · | The target IP, range, CIDR or hostname |
| targets | FILE | · | The target IPs, ranges, CIDRs, hostnames, NMap XML file, or .Nessus file |
Showing key inputs. witnessme-screenshot exposes 3 inputs in total.
example
# witnessme-screenshot: capture screenshots for a URL listwitnessme screenshot -p urls.txt[+] https://www.example.com -> shots/www.example.com.png[+] https://api.example.com -> shots/api.example.com.png[+] https://dev.example.com -> shots/dev.example.com.png[+] https://staging.example.com -> shots/staging.example.com.png[+] https://mail.example.com -> shots/mail.example.com.pngguidance
Use witnessme-screenshot when you want a visual pass over a set of web hosts to triage them quickly. To extract links or specific fields instead of images, use witnessme-grab.
Same tool, grab mode. Use it to extract links and content; screenshot mode is for visual triage.
Fast Go headless screenshot tool. Similar visual inventory, different report layout.
faq
related
Check whether a URL redirects to a masked 404 page.
Append lines to a file only if they are not already there.
Extract URLs and endpoints from Android APK files.
Visual inspection of websites across a large number of hosts.
Find suspicious files across a large set of AWS S3 buckets.
An automated tool that checks for backup artifacts that may disclose a web application's source code.
A host list feeds witnessme-screenshot, which renders each web service in a headless browser and writes a folder of screenshots for visual triage.
Facts on this page come from the live Trickest tool library.