EyeWitness – A Rapid Web Application Triage Tool

We, at ehacking
used to share
tools that can make the penetration testing process easy
and effective. You might have seen EH Tools shared before and you will witness
the tools that we will share later, but today I have an interesting tool to
discuss; it’s called EyeWitness. Chris Truncer is the man behind this tool; it
has been designed to run on Kali Linux.








EyeWitness is
designed to take screenshots of websites, provide some server header info, and
identify default credentials if possible.

 EyeWitness is designed to take a file, parse
out the URLs, take a screenshot of the web pages, and generate a report of the
screenshot along with some server header information.  EyeWitness is able
to parse three different types of files, a general text file with each url on a
new line, the xml output from a NMap scan, or a .nessus file.  Jason Hill (
@jasonhillva)
worked on creating the XML parsing code for EyeWitness, and provided a lot of
feedback throughout writing it. 

In addition to
providing the file name, you can also optionally provide a maximum timeout
value.  The timeout value is the maximum amount of time EyeWitness waits
for a web page to render, before moving on to the next URL in the list.

Image Credit

Supported Linux Distros:
Debian
7+ (at least stable, looking into testing) (Thanks to @themightyshiv)
CentOS
6.5+ (Thanks to @themightyshiv)
Setup:
1.   
Navigate into the setup
directory
2.   
Run the setup.sh script
Usage:
./EyeWitness.py
-f filename -t optionaltimeout –open (Optional)
Examples:
./EyeWitness
-f urls.txt
./EyeWitness
-f urls.xml -t 8 –open

Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

OSINT Tutorial to Discover Antivirus of the Target

This OSINT tutorial demonstrates the "RECON-NG tool" on Kali Linux. It discovers the type of Anti-Virus software (AV) the victim is running on their...

Cracking Password Protected ZIP, RAR & PDF using Zydra

Having confidential documents on a system, like a pdf of financial data or a zip including personal images and videos, ensure they're password-protected so...

Four Ways SASE is Revolutionizing Network Security 

Are you interested in a network that offers amazing security features without compromising high-speed performance? With SASE, you don't have to settle for less....

Protect Your Account From Being Hacked While Online Banking on a Public Network

An online account is an account that you register to access or use a website or application. Indeed you have an online account such...