aeondave/malskill/eyewitness

Claude Code and agent skill by aeondave/malskill

Trust tier 3
  • community
Source check pending

Checking that the SKILL.md file is still in the repository.

Auth/lab ref: Web screenshotting and reporting tool that captures screenshots of web services and generates an HTML report.

Install

npx vskill@latest install aeondave/malskill/eyewitness

SKILL.md

EyeWitness

Screenshots web services and produces an HTML report with categorized results.

Quick Start

bash
# Screenshot from URL list
eyewitness -f urls.txt --web
 
# Screenshot from nmap XML
eyewitness -x nmap_scan.xml --web
 
# Specify output directory
eyewitness -f urls.txt --web -d output/eyewitness

Core Flags

FlagDescription
-f <file>Input file with URLs/hosts
-x <xml>Nmap XML output file
--webHTTP screenshotting (default)
-d <dir>Output directory
--no-promptSkip interactive prompts
--timeout <n>Per-target timeout (default 7s)
--threads <n>Threads (default 10)
--delay <n>Delay between requests
--proxy-ip <ip>Proxy IP
--proxy-port <port>Proxy port
--resolveResolve IP addresses
--user-agent <ua>Custom user agent
--prepend-httpsPrepend both HTTP and HTTPS to schemeless input
--jitter <n>Jitter between screenshots

Common Workflows

bash
# Screenshot a subdomain list
cat subs.txt | sed 's/^/http:\/\//' > urls.txt
eyewitness -f urls.txt --web -d report/ --no-prompt
 
# From nmap scan + report
nmap -sV -p 80,443,8080,8443 -oX scan.xml 192.168.1.0/24
eyewitness -x scan.xml --web -d web_report/ --no-prompt
 
# With both HTTP and HTTPS
eyewitness -f hosts.txt --prepend-https --web -d out/

Output

EyeWitness produces:

  • report.html — categorized screenshots with HTTP headers, page titles, response codes
  • Matches/ — signature-based categories (login pages, Cisco, Citrix, VMware, etc.)
  • Screenshots/ — raw screenshot images (PNG)
  • ew.db — SQLite database with results

Pipeline Integration

bash
# From subfinder → httpx → eyewitness
subfinder -d target.com -silent | \
  httpx -silent | \
  tee live_hosts.txt | \
  eyewitness --web -f /dev/stdin -d eyewitness_out/ --no-prompt
 
# From masscan/nmap port scan
masscan -p 80,443,8080,8443,8000,8888 192.168.1.0/24 -oX masscan.xml
eyewitness -x masscan.xml --web -d report/ --no-prompt
 
# Include non-standard ports (use httpx first)
cat hosts.txt | httpx -ports 80,443,8080,8443,3000,5000,8888 -silent | \
  eyewitness --web -f /dev/stdin -d report/ --no-prompt

Resources

FileWhen to load
references/report-tips.mdHTML report layout, signature categories, pipeline integration, DB queries

Security

  • Security scanPassed, 95 of 100Pattern checks on the skill's files.
  • Model reviewPassed

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
22
Repository forks
1
7-day trend score
21

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/aeondave/malskill/eyewitness/badge)](https://verified-skill.com/skills/aeondave/malskill/eyewitness)

Something wrong with this skill or its page? Tell us.