Aquatone

Bulk web screenshots from a list of hosts or ports.

A Go alternative to EyeWitness, designed to swallow the output of other tools through standard input. It takes hosts or subdomains, probes the usual web ports, saves the screenshot and the response body, and clusters similar-looking pages in the report, which makes the exception very visible: the odd panel among a hundred identical corporate portals.

Family Web discovery & fuzzing

Flags -ports -out -threads

Concepts Web Content Discovery (Directory Fuzzing), Virtual Host Fuzzing

Cheatsheet Discovery & fuzzing

Installation

# Go binary: download the release .zip, unzip it and put it on the PATH
wget https://github.com/michenriksen/aquatone/releases/download/v1.7.0/aquatone_linux_amd64_1.7.0.zip -O aquatone.zip
unzip aquatone.zip && sudo mv aquatone /usr/local/bin/   # requires chromium/google-chrome

Repositorygithub.com/michenriksen/aquatoneBinaryx64

Useful commands3 commands

Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.