security enabled verified low v1.0.0

aquatone

Tool for automatic visual inspection and screenshot capture of websites across large attack surfaces.

📋 Live Preview

aquatone -out {output-dir} < {input-file}

🌍 output-dir → aquatone 🌍 input-file → domains.txt

aquatone -out {output-dir} < {input-file}

Sandbox: execFile · Timeout: 600s

Capabilities

web.discovery.asset

web.screenshot.service

web.fingerprint.http

web.enumeration.subdomain

Parameters

Name	Type	Required	Default	Description	Aliases
`domains`	string	No	-	List of domains to scan (space/comma-separated)	`--domains`
`screenshot-timeout`	integer	No	30	Timeout for taking screenshots in seconds	`--screenshot-timeout`
`scan-timeout`	integer	No	10	Timeout for HTTP requests in seconds	`--scan-timeout`
`resolve-timeout`	integer	No	5	Timeout for DNS resolution in seconds	`--resolve-timeout`
`threads`	integer	No	5	Number of concurrent threads	`--threads`
`chrome-path`	string	No	-	Path to Chrome/Chromium executable	`--chrome-path`
`proxy`	string	No	-	HTTP proxy address	`--proxy`
`ports`	string	No	80,443	Ports to scan (comma-separated)	`--ports`
`http-port`	string	No	80	HTTP ports to check	`--http-port`
`https-port`	string	No	443	HTTPS ports to check	`--https-port`
`fallback-http`	boolean	No	-	Fall back to HTTP when HTTPS fails	`--fallback-http`
`output-dir`	string	No	aquatone	Directory to write output files	`--output-dir`, `-out`
`quiet`	boolean	No	-	Suppress verbose output	`--quiet`
`sites`	string	No	-	File containing list of sites (one per line)	`--sites`
`version`	boolean	No	-	Show version information	`--version`, `-v`

Artifacts

Type	Description	MIME	Schema	Trust
`screenshot.png`	Website screenshot	image/png	-	verified
`report.json`	Scan report as JSON	application/json	-	verified
`report.html`	Visual HTML report with screenshots	text/html	-	verified

Contract

Inputs

network.target.domain

Target domain or list of domains

network.target.file

File containing list of domains/hosts

network.target.ports

Ports to check for HTTP/HTTPS services

Outputs

screenshot.png

Website screenshot image

report.html

Visual HTML report

report.json

Scan results as JSON

Side effects: network_trafficprocess_spawn

Workflow Edges

Produces

screenshot.pngreport.htmlreport.json

Consumes

network.target.domainnetwork.target.filenetwork.target.ports

Resource Profile

Resource	Value
CPU	medium
Memory	512 MB
Network	medium
Disk I/O	medium

Examples

Take screenshots of domains from file

cat domains.txt | aquatone -out screenshots

Scan specific ports with custom thread count

cat domains.txt | aquatone -ports 80,443,8080,8443 -threads 10

Use custom Chrome binary

cat domains.txt | aquatone -chrome-path /usr/bin/chromium-browser

Scan through HTTP proxy

cat domains.txt | aquatone -proxy http://127.0.0.1:8080

Screenshot with longer timeout

cat domains.txt | aquatone -screenshot-timeout 60

Documentation

Aquatone — Visual Website Inspection Tool

Aquatone is a tool for automatic visual inspection and screenshot capture of websites across a large number of hosts. It helps identify interesting targets and assess attack surface visually. It also performs HTTP header analysis and provides a beautiful HTML report.

Basic Usage

# Screenshot domains from a file
cat domains.txt | aquatone -out screenshots

# Scan with custom ports
cat domains.txt | aquatone -ports 80,443,8080 -threads 10

# Use custom Chrome path
cat domains.txt | aquatone -chrome-path /usr/bin/chromium-browser

# Scan through proxy
cat domains.txt | aquatone -proxy http://127.0.0.1:8080

Output Structure

File/Directory	Description
`screenshots/`	PNG screenshot files
`aquatone_report.html`	Visual HTML report
`aquatone_session.json`	Session data
`hosts.json`	Host resolution data
`urls.txt`	List of discovered URLs

Related Tools

httpxeyewitnessgowitness