# Scanning for Web Servers

# Gowitness

Github

Gowitness describes itself as "A golang, web screenshot utility using Chrome Headless." That basically means it will find all the web servers and take a screenshot of them automatically. The result is a folder of images that is easy to browse through and get an idea of whats running than.

It should be included with the standard appliance build. If you still need to install, run this script as root.

apt install -y golang-go
go install github.com/sensepost/gowitness@latest
export PATH="/root/go/bin:$PATH"

You can run a scan of the internal subnets file. This will check ports 80 and 443 for open web servers.

gowitness scan file -t 20 -f ~/scope-include