EyeWitness

Technique:

Screen Capture - T1113

This tool install is based on the existence of virtualenv.

apt update
apt install python3-virtualenv

Note on virtualenv usage:

• these containers are used to allow conflicting dependency installs to live side by side harmoniously
• activate / deactivate dependency containers for proper usage
  • prompt# source demo-env/bin/activate
  • prompt(demo-env)# deactivate
• with screen/tmux, multiple dependency containers can be activated at the same time

EyeWitness

Overview: Gather web screenshots from .nessus files or url lists. Pretty nice reports.

Tool located here

Possible Blurb: BHIS performed a review of the available web servers on the in-scope networks. The list of HTTP servers discovered was scanned with EyeWitness in order to obtain screenshots of the server responses and other details about each one. The full EyeWitness report is included in the supporting data archive.

Installation

cd /opt/
# this tool may hang an installation script based on service restart requests
# deny interactive interrupts
export DEBIAN_FRONTEND=noninteractive
git clone https://github.com/RedSiege/EyeWitness.git
cd EyeWitness
virtualenv -p python3 ew-env
source ew-env/bin/activate
cd Python/setup/
./setup.sh
deactivate
cd /opt/

Suggested invocation:

eyewitness --web -x export_from.nessus -d ./ew2 --delay 5  --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:108.0) Gecko/20100101 Firefox/108.0"`