Gowitness is a command-line tool written in Go that utilizes Chrome Headless to capture screenshots of web pages. The tool provides automated web page screenshot functionality through a headless Chrome browser implementation. It operates from the command line interface, allowing users to programmatically capture visual representations of websites and web applications. The utility is designed for reconnaissance activities where visual confirmation of web services is required. It can process single URLs or multiple targets, generating screenshot files that can be used for documentation, analysis, or verification purposes. Gowitness integrates Chrome's headless mode, which enables screenshot capture without requiring a graphical user interface. This makes it suitable for automated workflows and scripted operations in various security testing scenarios.
FEATURES
SIMILAR TOOLS
PyBOF is a Python library that enables in-memory loading and execution of Beacon Object Files (BOFs) with support for argument passing and function targeting.
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
A digital archive of the internet, allowing users to capture and browse archived web pages.
Explore the top million websites, ranked by referring subnets, and gain insights into online influence and popularity.
SharpShares efficiently enumerates and maps network shares and resolves names within a domain.
SharpPrinter enables efficient discovery of network printers for security and management purposes.
AHHHZURE is an automated deployment script that creates vulnerable Azure cloud lab environments for offensive security training and cloud penetration testing practice.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.