Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft: Added EyeWitness #75

Closed
wants to merge 1 commit into from
Closed

Conversation

cyberamt
Copy link
Contributor

EyeWitness is a software that creates screenshots of web applications and can display simple response headers.

This pull request adds EyeWitness as an extra module to artemis. Since EyeWitness has a GPL 3.0 license, I did not put the pull request in the main Artemis repository.

Important: This pull-request is to be understood as a draft, the functionality to display images in the frontend of Artemis is not fully implemented.

@kazet

I would like to ask what you think is the easiest / best way to save images created by EyeWitness in the database and display them later in the frontend. Do you have any tips for me? I will then adapt the code accordingly to reflect this functionality. EyeWitness currently generates images, but these are not saved anywhere and cannot be called up.

@kazet
Copy link
Member

kazet commented Mar 5, 2024

Hello,

What about adding a view with domains tree? So that you can browse identified assets, some metadata and screenshot? This will allow us to move in the direction when Artemis doesn't just perform a scan, but continuously monitors your assets.

What about using a software we can use in the main repository (e.g. chromium is able to make screenshots)?

@cyberamt
Copy link
Contributor Author

cyberamt commented Mar 5, 2024

Under the hood, EyeWitness uses Selenium to access websites and take screenshots. You could of course reprogram this functionality, but I thought it would be nice to have some settings etc. at hand. If you want I can also close this merge request and try to implement it in the main repo. The advantage here is of course that it works, EyeWitness is stable and you don't have to reinvent the wheel twice.

@kazet
Copy link
Member

kazet commented Mar 5, 2024

Hello,

For chromium, you can perform a screenshot using chromium --headless --screenshot https://example.com . If you would prefer to introduce EyeWitness due to other features, could you describe them? If there are significant benefits of using EyeWitness, what about having a generic "asset map" functionality in the main repo and providing EyeWitness screenshots and other metadata as a separate module?

@cyberamt cyberamt closed this Apr 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants