237 lines
8.0 KiB
HTML
237 lines
8.0 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self' data:; img-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self' https://defcon.social https://bsky.app;">
|
|
<meta http-equiv="X-Content-Type-Options" content="nosniff">
|
|
<link rel="stylesheet" href="../assets/css/style.css">
|
|
<link rel="icon" type="image/x-icon" href="../favicon.ico">
|
|
<script>
|
|
// Apply theme immediately to prevent flash
|
|
(function() {
|
|
const theme = localStorage.getItem('theme') ||
|
|
(window.matchMedia && window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light');
|
|
document.documentElement.setAttribute('data-theme', theme);
|
|
})();
|
|
</script>
|
|
<title>gowitness Cheatsheet - Cheatsheets - Launch Pad</title>
|
|
</head>
|
|
<body>
|
|
<button class="theme-toggle" id="themeToggle" aria-label="Toggle dark mode">
|
|
<svg class="theme-icon theme-icon-moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"></path></svg>
|
|
<svg class="theme-icon theme-icon-sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="display: none;"><circle cx="12" cy="12" r="5"></circle><line x1="12" y1="1" x2="12" y2="3"></line><line x1="12" y1="21" x2="12" y2="23"></line><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"></line><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"></line><line x1="1" y1="12" x2="3" y2="12"></line><line x1="21" y1="12" x2="23" y2="12"></line><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"></line><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"></line></svg>
|
|
</button>
|
|
<br/><br/>
|
|
<div class="name">
|
|
__ _______________________ _________._________________________
|
|
\_ _____/ \______ \ / _ \ / _____/ / _____/ | | \_ _____/
|
|
| __) | _/ / /_\ \ / \ ___ / \ ___ | | | __)_
|
|
| \ | | \ / | \ \ \_\ \ \ \_\ \ | |___ | \
|
|
\___ / |____|_ / \____|__ / \______ / \______ / |_______ \ /_______ /
|
|
\/ \/ \/ \/ \/ \/ \/
|
|
</div>
|
|
<div class="blog-page-header">
|
|
<div class="blog-header-content">
|
|
<a href="/cheatsheets" class="back-link" title="Back to Cheatsheets">
|
|
<svg xmlns="http://www.w3.org/2000/svg" width="42" height="42" viewBox="0 0 24 24" class="home-icon"><path fill="currentColor" d="M10 20v-6h4v6h5v-8h3L12 3 2 12h3v8z"/></svg>
|
|
</a>
|
|
<h1 class="blog-page-title">gowitness Cheatsheet</h1>
|
|
</div>
|
|
</div>
|
|
<div class="blog-post-container">
|
|
<div class="blog-posts-container" style="max-width: 900px; margin: 0 auto;">
|
|
<div class="blog-post">
|
|
<div class="blog-post-content">
|
|
<p><a href="index.html">← Back to cheatsheets</a></p>
|
|
<p><a href="../index.html">← Home</a></p>
|
|
<hr>
|
|
<p>Gowitness is a website screenshot utility written in Go. It uses Chrome Headless to generate screenshots, storing results in a SQLite database with an optional web UI for browsing.</p>
|
|
<hr>
|
|
<h2>Commands</h2>
|
|
<ul>
|
|
<li>gowitness single - Screenshot single URL</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness file - Screenshot URLs from file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness nmap - Parse nmap XML for targets</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness scan - Scan and screenshot CIDR range</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness server - Start web report server</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness report - Generate report</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Single URL</h2>
|
|
<ul>
|
|
<li>gowitness single https://example.com - Screenshot single URL</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness single -u https://example.com - Explicit URL flag</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>File Input</h2>
|
|
<ul>
|
|
<li>gowitness file -f urls.txt - Screenshot from file</li>
|
|
</ul>
|
|
<ul>
|
|
<li>gowitness file -f urls.txt -t 10 - With 10 threads</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Global Options</h2>
|
|
<ul>
|
|
<li>-t, --threads - Concurrent threads (default 4)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-P, --screenshot-path - Screenshot save location</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-D, --db-path - Database file path</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-X, --resolution - Screenshot resolution (e.g., 1920x1080)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>-F, --fullpage - Capture full page screenshot</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--timeout - Page timeout in seconds</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--delay - Delay before screenshot (seconds)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--user-agent - Custom User-Agent</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--proxy - HTTP/SOCKS5 proxy</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--chrome-path - Path to Chrome binary</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--disable-db - Don't save to database</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Scan Command</h2>
|
|
<ul>
|
|
<li>gowitness scan --cidr 192.168.1.0/24 - Scan CIDR range</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--cidr - CIDR range to scan</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--ports - Ports to check (comma separated)</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--skip-https - Skip HTTPS checks</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--skip-http - Skip HTTP checks</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Nmap Integration</h2>
|
|
<ul>
|
|
<li>gowitness nmap -f scan.xml - Parse nmap XML</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--open - Only use open ports</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--service-contains - Filter by service name</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Report Server</h2>
|
|
<ul>
|
|
<li>gowitness server - Start web server</li>
|
|
</ul>
|
|
<ul>
|
|
<li>--address - Listen address (default 127.0.0.1:7171)</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Common Examples</h2>
|
|
<h3>Single Screenshot</h3>
|
|
<pre><code>gowitness single https://example.com</code></pre>
|
|
<p>Screenshot single URL.</p>
|
|
<h3>From URL List</h3>
|
|
<pre><code>gowitness file -f urls.txt -t 10</code></pre>
|
|
<p>Screenshot URLs from file with 10 threads.</p>
|
|
<h3>Full Page Screenshots</h3>
|
|
<pre><code>gowitness file -f urls.txt -F</code></pre>
|
|
<p>Capture full page (scrolling).</p>
|
|
<h3>Custom Resolution</h3>
|
|
<pre><code>gowitness file -f urls.txt -X 1920x1080</code></pre>
|
|
<p>Set viewport resolution.</p>
|
|
<h3>CIDR Scan</h3>
|
|
<pre><code>gowitness scan --cidr 192.168.1.0/24 --ports 80,443,8080</code></pre>
|
|
<p>Scan network range for web servers.</p>
|
|
<h3>From Nmap Results</h3>
|
|
<pre><code>gowitness nmap -f nmap_scan.xml --open</code></pre>
|
|
<p>Screenshot from nmap results.</p>
|
|
<h3>Start Report Server</h3>
|
|
<pre><code>gowitness server</code></pre>
|
|
<p>Browse results at http://127.0.0.1:7171</p>
|
|
<h3>With Delay</h3>
|
|
<pre><code>gowitness file -f urls.txt --delay 3</code></pre>
|
|
<p>Wait 3 seconds before screenshot.</p>
|
|
<h3>Through Proxy</h3>
|
|
<pre><code>gowitness file -f urls.txt --proxy http://127.0.0.1:8080</code></pre>
|
|
<p>Route through Burp Suite.</p>
|
|
<h3>Pipeline</h3>
|
|
<pre><code>subfinder -d example.com -silent | httpx -silent > urls.txt && gowitness file -f urls.txt</code></pre>
|
|
<p>Full recon pipeline.</p>
|
|
<hr>
|
|
<h2>Database</h2>
|
|
<p>Results stored in SQLite database (default: gowitness.sqlite3)</p>
|
|
<ul>
|
|
<li>Contains URLs, response codes, titles, headers</li>
|
|
<li>Screenshots linked by URL hash</li>
|
|
<li>Queryable for reporting</li>
|
|
</ul>
|
|
<hr>
|
|
<h2>Tips</h2>
|
|
<ul>
|
|
<li>Use --fullpage for complete page capture</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Increase threads for large URL lists</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Use the web server for easy browsing</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Add delay for JavaScript-heavy sites</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Combine with httpx to filter live hosts first</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Database enables easy querying and reporting</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Similar to aquatone but with SQLite backend</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Requires Chrome/Chromium installed</li>
|
|
</ul>
|
|
<ul>
|
|
<li>Always get authorization before scanning</li>
|
|
</ul>
|
|
<hr>
|
|
<p><a href="index.html">← Back to cheatsheets</a></p>
|
|
<p><a href="../index.html">← Home</a></p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<script async type="text/javascript" src="../blog/analytics.js"></script>
|
|
<script src="../theme.js"></script>
|
|
</body>
|
|
</html>
|