ParrotSec Eyewitness Tool
ParrotSec Eyewitness Tool
ParrotSec Eyewitness is a reconnaissance tool designed to capture website snapshots, collect server information, and identify technologies used by web services. It helps security professionals analyze targets during penetration testing or vulnerability assessments.
Tool Features
Some of the key features of the tool are as follows:
- Automatically takes screenshots of websites
- Gathers HTTP headers and server information
- Identifies web technologies (CMS, frameworks, etc.)
- Generates organized reports for analysis
Basic Command Line Flags
Some basic command-line switches are as follows:
Flag | Description |
---|---|
–single | Scan single URL |
–threads | Set number of parallel processes |
–webproxy | Use proxy for requests |
–timeout | Set page load timeout (seconds) |
–no-prompt | Skip confirmation prompts |
Tool Examples
Basic Website Scan
$ eyewitness --single https://example.com
Scans a single website and generates report in default output folder
Scan Multiple URLs
$ eyewitness -f urls.txt --threads 5
Reads targets from text file and processes 5 URLs simultaneously
Proxy Through Tor
$ eyewitness -f targets.txt --webproxy socks5://127.0.0.1:9050
Routes all requests through Tor network for anonymity
Custom Timeout Settings
$ eyewitness --single https://slow-site.com --timeout 30
Allows 30 seconds for page loading instead of default 7 seconds
Automatic Mode
$ eyewitness -f urllist.txt --no-prompt
Runs without user interaction – useful for automated scripts
Uses of EyeWitness
- Website Screenshot Collection: If you have a list of target IPs or URLs, you can quickly gather screenshots using:
eyewitness -f targets.txt --web
- Remote Desktop Investigation: If scanning a network for RDP services, you can collect RDP session screenshots using:
eyewitness -f rdp_list.txt --rdp
- VNC Service Analysis: To gather screenshots from open VNC services, use:
eyewitness -f vnc_list.txt --vnc
- Silent Reporting: To capture and generate reports without browser popups:
eyewitness -f urls.txt --web --headless
Parrot OS Tutorials
Disclaimer:
The information provided on this website regarding Parrot OS is for educational and informational purposes only. Parrot OS is a security-focused operating system intended for ethical hacking, penetration testing, digital forensics, and privacy protection. Always ensure you have proper authorization before conducting any security testing. Use Parrot OS responsibly and ethically. We are not affiliated with the official Parrot OS team. All trademarks belong to their respective owners.