So the last tool on our enumeration revisited list is going to be a tool called go witness so go witness
is written in go and it's a form of another tool that was called Eyewitness.
Let's go ahead and just go to go witness in while you're installing it because already have it installed.
I'm going to have I'm going to talk about it OK.
So that way we we kill some time here.
So let's go ahead and go to go witness here and I want you to just scroll down.
Copy the go get right here and it takes about 30 seconds to install.
So while we're doing that let's talk about what go witness actually does.
So we have a list of the machines that are alive right.
We find the list of machines that are alive and we sort those out we give everything up and running.
And what we're gonna do is we're gonna go to all those different addresses and we're going to actually
take a screenshot of those addresses.
So I'm going to just give you an example of one here but you can run this through a whole list of file
if you want.
So a whole list of subdomains and that will automate into the process.
So instead of having to go to a hundred domains or subdomains one by one you can just look at the pictures
of each subdomain and visually understand what's going on very quickly on a Web site.
So if there's an interesting log in form you can target that page right away versus you know just going
one by one and it just saves a lot of time.
So you by now should have go witness install and what we're gonna do is we're just going to pick out
one domain here.
So what we can do is we can take a look at go witness and do a dash dash help and I'll show you in the
next video how it's automated into my script so we can scan a cider range if we want to and take screenshots
we can take a screenshot of a single your URL we can do a file as I said before here we're just going
to take a screenshot of a one year or else let's go ahead and just say go witness and we're going to
do a single.
We have to specify the URL flag here and we'll display HECS Tesla icon and so to go out and take a screenshot
of Tesla dot com and we should be able to go find that screenshot pretty easily we could save this out
to a directory but it should be right where we're at here in the root.
So if you go to home and we look for a screenshot hey there it is a G.P.S. Tesla dot com and this is
exactly what Tesla dot.com looks like when you navigate to it.
So imagine you have 100 Web sites and you want to run through 100 different Web sites you can see here
look.
Picture by picture until you see what's interesting and what's not interesting.
So that's really it.
It's it's an awesome tool here and it's fantastically easy to run and very easy to just do very quickly.
So from here what I want to do is I want to cap this off with showing you my script that I run when
I'm doing bug bounty hunting or when I'm doing anything against a client and I'm going to provide that
script to you as well.
So I will leave a pastebin for it on the next video to where you can access it.
You can modify it make it your own do whatever you want with it and have fun with it.
So let's go ahead and move to next video where we talk about automation and we wrap up this enumeration
section and we start moving on to Web application pen testing.