Pablo Guides

# Course #217: Mastering gowitness$

## Section 1: Introduction to gowitness$

### Introduction

In the realm of web application security, reconnaissance is a crucial phase that provides insights into potential vulnerabilities. One powerful tool that has emerged for this purpose is `gowitness`. Developed as a web application reconnaissance tool, gowitness allows penetration testers to capture and record web application screenshots, which can be instrumental in identifying exposed information, misconfigurations, or vulnerabilities during the testing process.

This section will provide an in-depth guide on how to install and configure gowitness on Kali Linux, illustrate its usage through step-by-step scenarios, and explain technical aspects in detail while providing external resources for further learning.

### Installation and Configuration on Kali Linux

#### Prerequisites

Before diving into the installation process, ensure that you have the following prerequisites met:

1. **Kali Linux**: This course assumes you are using Kali Linux. Make sure your system is updated to the latest version.
2. **Go Language**: gowitness is written in Go, so you'll need to have the Go programming environment set up on your machine.

#### Installing Go

1. **Update your system**:

   sudo apt update && sudo apt upgrade -y

 

2. **Install Go**:
You can install Go using the following commands:

   sudo apt install golang -y

 

3. **Verify installation**:
After installation, you can verify the installation of Go by checking its version:

   go version

 

#### Installing gowitness

1. **Download gowitness**:
You can clone the gowitness repository directly from GitHub. Navigate to the directory where you want to place the tool, then execute:

   git clone https://github.com/sensepost/gowitness.git

 

2. **Build gowitness**:
Navigate into the gowitness folder and build the tool:

   cd gowitness

   go build

 

3. **Move to a directory in your PATH**:
For ease of access, move the executable to a directory in your system’s PATH:

   sudo mv gowitness /usr/local/bin/

 

4. **Verify installation**:
You can verify the installation by running:

   gowitness –help

 

### Configuration

Gowitness is easy to configure as it uses a configuration file that you can customize based on your testing requirements. The default configuration is located in your home directory at `~/.config/gowitness/config.yaml`.

#### Sample Configuration

Below is a sample configuration file for gowitness:

"`yaml
# Sample gowitness configuration
output_directory: "./output"
timeout: 10
retry_count: 3
screenshot:
width: 1280
height: 720
"`

### Step-by-Step Usage of gowitness

#### Basic Commands

Gowitness provides a variety of commands for different functions. Here’s how to use gowitness effectively.

1. **Taking a Screenshot of a Single URL**:
To take a screenshot of a single URL, use the following command:

   gowitness single –url https://example.com

 

2. **Taking Screenshots from a File**:
You can also take screenshots of multiple URLs listed in a file:

   gowitness file –filename urls.txt

 

3. **Showing Results**:
After capturing screenshots, you can view the results using:

   gowitness report –directory ./output

 

#### Real-World Use Cases

1. **Web Application Assessment**:
When conducting a penetration test, you can use gowitness to capture screenshots of all pages on a target application, allowing you to visually confirm the functionality and design.

**Example**:

   gowitness file –filename target_urls.txt

 

This will capture screenshots of all URLs contained in `target_urls.txt`.

2. **Identifying Exposed Information**:
Many applications may inadvertently expose sensitive information through their web interfaces. By capturing screenshots of web applications, you can see if login forms, admin panels, or API endpoints are accessible.

3. **Integration into Reports**:
Screenshots taken can be integrated into your penetration testing reports to visually showcase findings. A well-documented report that includes screenshots helps in conveying the impact of vulnerabilities to stakeholders effectively.

### Detailed Technical Explanations

#### Technical Architecture of gowitness

Gowitness operates fundamentally by using headless browsing techniques to capture screenshots of web pages. Here’s a technical breakdown:

– **Headless Browsing**: It utilizes a browser engine without a graphical user interface (GUI) to render web pages programmatically. This approach is efficient for automated environments such as CI/CD pipelines, where visual rendering is unnecessary.

– **Concurrency**: Gowitness can handle multiple requests simultaneously, speeding up the screenshot capture process, especially when dealing with a large number of URLs.

– **Configuration Options**: Users can adjust timeout settings, screenshot quality, and output formats through its configuration file.

– **Output Formats**: Gowitness supports generating various output formats, including HTML reports, which can be customized based on user requirements.

### External Reference Links

Here are some resources for further learning about gowitness and web application security:

– [gowitness GitHub Repository](https://github.com/sensepost/gowitness)
– [Kali Linux Official Documentation](https://www.kali.org/docs/)
– [OWASP Web Security Testing Guide](https://owasp.org/www-project-web-security-testing-guide/latest/)
– [Go Programming Language Documentation](https://golang.org/doc/)

### Code Examples

Here's an example of how you can integrate gowitness with a WordPress site to perform reconnaissance:

1. **Create a List of WordPress URLs**:
Generate a file named `wordpress_urls.txt` containing URLs of your WordPress sites. Here's a sample format:
[/dm_code_snippet]
https://examplewordpress1.com
https://examplewordpress2.com
[/dm_code_snippet]

2. **Use gowitness to Capture Screenshots**:
Run the following command in your terminal:

   gowitness file –filename wordpress_urls.txt

 

3. **Review the Output**:
Once the process completes, you can check the output directory for screenshots and reports:

   cd output

   ls

 

### Conclusion

Gowitness is an indispensable tool for conducting thorough reconnaissance in penetration testing, particularly for web applications. Its ability to automate the screenshot capturing process can save significant time and provide valuable insights into the state of web applications. By following the steps outlined in this section, you can effectively deploy gowitness in your pentesting workflows.

In the upcoming sections of this course, we will explore advanced techniques and strategies for leveraging gowitness alongside other tools in the penetration testing toolkit.

Made by pablo rotem / פבלו רותם