EyeWitness is a tool that allows a penetration tester to capture screenshots of a website without leaving the Terminal—the tool does all of the work in the background. Imagine having to visually profile multiple websites, open Virtual Network Computing (VNC) servers, and use Remote Desktop Protocols (RDPs). This can be a time-consuming task. EyeWitness takes the screenshots, stores them offline, and provides an HTML report:

1. To begin, you'll need to download EyeWitness from its GitHub repository using git clone https://github.com/FortyNorthSecurity/EyeWitness.git.
2. Once the download has completed, access the root/EyeWitness/setup directory and run the setup.sh script using the following sequence of commands:

3. Once the setup process is complete, use the cd .. command to go one directory up to the root/EyeWitness directory. To screenshot a single website, use the following command:

./EyeWitness.py --web --single example.com

You can try this tool on one of the web applications on Metasploitable or OWASP BWA virtual machines.

4. Once the task completes, EyeWitness will indicate whether it was successful in capturing screenshots of the target(s) and provide you with the location of the offline report, as seen in the following screenshot:

5. Upon opening the HTML report, the left-hand column contains information about the web request, while the right-hand column contains the screenshots:

This tool is very handy when profiling multiple services and websites at once.

Now that you have completed this section, you are able to perform web enumeration using the EyeWitness tool.