EN
ENNA

Aquatone

MIT

๐Ÿ•ธ Web Scanning ยท Go

Aquatone is a tool for visual inspection of websites across a large number of hosts, designed to help quickly identify interesting targets in a sea of web servers. Given a list of URLs or domains, Aquatone visits each one, takes a screenshot, collects HTTP headers and response bodies, and generates an interactive HTML report that lets you visually browse through all discovered web services. This visual approach is much faster than manually visiting hundreds of URLs - you can quickly spot login panels, default pages, interesting applications, and potential targets by scanning through the screenshot gallery. Aquatone is commonly used after subdomain enumeration to triage discovered assets, identifying which subdomains host web applications worth deeper investigation. It runs headless Chrome for rendering and supports customizable viewport sizes, timeouts, and concurrent connections.

5.9kstars
912forks
106issues
Updated 3y ago

Installation

Go

$ go install github.com/michenriksen/aquatone@latest

Download

$ Download pre-built binary from GitHub releases

Use Cases

  • Triaging hundreds of discovered subdomains by visual inspection of screenshots
  • Generating browsable HTML reports of web services across an attack surface
  • Identifying login panels, admin interfaces, and default pages at scale
  • Visual diffing of web services between assessment periods to spot changes
  • Screening web servers for interesting applications after reconnaissance

Tags

screenshotsvisual-reconweb-discoverytriagehtml-reportchrome-headlesschromiumgolangosintreconnaissancesecurity

More in Web Scanning