eyewitness

Capture HTTP, RDP, and VNC screenshots and generate HTML reports.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill eyewitness
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: eyewitness
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/recon/eyewitness
Command: npx skills add https://github.com/AeonDave/malskill --skill eyewitness

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of capturing screenshots of web services and generating comprehensive HTML reports, making visual enumeration of web services efficient.

Core Features & Use Cases

  • Web Screenshotting: Captures screenshots of HTTP/HTTPS services.
  • RDP/VNC Screenshots: Can also capture screenshots of RDP and VNC services.
  • Reporting: Generates categorized HTML reports with HTTP headers and identified matches.
  • Use Case: When asked to visually enumerate web services on a given IP range, this Skill can screenshot all accessible web interfaces and provide a consolidated report.

Quick Start

Use the eyewitness skill to screenshot all URLs from the file named 'urls.txt' and save the output to the 'output' directory.

Frequently Asked Questions about eyewitness

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web screenshotting for a list of URLs?

Automating web screenshotting for a list of URLs requires Python dependencies to capture HTTP, RDP, and VNC services. You provide a text file containing target hosts to generate a visual inventory and an HTML report of the discovered web interfaces.

What is visual web enumeration and when do I need it?

Visual web enumeration is the process of capturing screenshots of discovered web services to quickly identify what is running on target hosts. It is needed when assessing large IP ranges to generate a visual inventory of accessible web interfaces.

Can I capture screenshots of RDP and VNC services or just HTTP?

You can capture screenshots of RDP and VNC services in addition to standard HTTP and HTTPS web services. This requires specific Python dependencies to handle the protocols and consolidate them into a single categorized HTML report.

Do I need Python to generate HTML reports from web screenshots?

You need Python to generate HTML reports from web screenshots because the automation relies on specific Python dependencies for HTTP, RDP, and VNC screenshotting capabilities. The environment handles both image capture and report generation.

What is the best way to visually inventory web services across an IP range?

The best way to visually inventory web services across an IP range is to automate screenshotting all accessible interfaces and output the results to a dedicated directory. This generates a categorized HTML report with HTTP headers and identified matches for review.