RedSiege / EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
https://www.christophertruncer.com/eyewitness-usage-guide/
GNU General Public License v3.0
4.97k stars 844 forks source link

WebDriver Error when trying to screenshot .onion sites #440

Closed GrandAdmiralDan closed 4 years ago

GrandAdmiralDan commented 4 years ago

OS Used - ALL Information (architecture, linux flavor, etc.)

Kali, latest release 2019.3 Firefox Quantum ESR 60.8.0esr (64-bit)

Pastebin link to error you are encountering

pastebin.com/XCqB4KvW

Expected behavior (vs. what you encountered)

I started with this blog: https://webbreacher.com/2017/09/02/dark-web-report-torghost-eyewitness-goodness/

I noticed that it includes the --headless command, but it looks like that's no longer supported? What's covered in the blog is what I'm trying to accomplish.

Any additional information

Screen shots using Eyewitness for normal .com websites while connected over Tor work completely fine.

The address for The Guardian's .onion site is 33y6fjyhs3phzfjj.onion so I was using that as an example. I can navigate to it without any issues with the Tor service running on Kali and utilizing Firefox as a browser.

I saw previous posts stating Eyewitness won't work over SOCKS proxy, but it's taking a screenshot of .com and such websites over the same proxy without any issues. These posts were also dated a couple years back, too.

I've verified I can navigate to .onion sites without any issues. What I'm executing for a command is as follows ./Eyewitness.py --web --timeout 60 --single 33y6fjyhs3phzfjj.onion

I get the WebDriver Error about 3-4 seconds into the script running.

digininja commented 4 years ago

You would need to be able to point EyeWitness at a SOCKS proxy to be able to screenshot over Tor but due to the upgrade to Python 3, there is currently no SOCKS support.

You could try going back to an earlier version using Python 2 which had SOCKS support and try that.

On Mon, 25 Nov 2019 at 15:58, Dan Schmidt notifications@github.com wrote:

OS Used - ALL Information (architecture, linux flavor, etc.)

Kali, latest release 2019.3 Firefox Quantum ESR 60.8.0esr (64-bit) Pastebin link to error you are encountering

pastebin.com/XCqB4KvW Expected behavior (vs. what you encountered)

I started with this blog: https://webbreacher.com/2017/09/02/dark-web-report-torghost-eyewitness-goodness/

I noticed that it includes the --headless command, but it looks like that's no longer supported? What's covered in the blog is what I'm trying to accomplish. Any additional information

Screen shots using Eyewitness for normal .com websites while connected over Tor work completely fine.

The address for The Guardian's .onion site is 33y6fjyhs3phzfjj.onion so I was using that as an example. I can navigate to it without any issues with the Tor service running on Kali and utilizing Firefox as a browser.

I saw previous posts stating Eyewitness won't work over SOCKS proxy, but it's taking a screenshot of .com and such websites over the same proxy without any issues. These posts were also dated a couple years back, too.

I've verified I can navigate to .onion sites without any issues. What I'm executing for a command is as follows ./Eyewitness.py --web --timeout 60 --single 33y6fjyhs3phzfjj.onion

I get the WebDriver Error about 3-4 seconds into the script running.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/FortyNorthSecurity/EyeWitness/issues/440?email_source=notifications&email_token=AAA4SWN5ZLNDVDJZQ4OAITLQVPY2TA5CNFSM4JRLCEWKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4H33MCIA, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAA4SWLONBHUN6JT64ESIVTQVPY2TANCNFSM4JRLCEWA .

GrandAdmiralDan commented 4 years ago

That did it! I downloaded V 2.2.3 and then ran the following command: ./Eyewitness.py --web --timeout 60 -f links.txt --proxy-ip 127.0.0.1 --proxy-port 9050 --proxy-type socks5

Thanks a bunch!

digininja commented 4 years ago

No problem, remember to close the issue.

On Mon, 25 Nov 2019 at 17:13, Dan Schmidt notifications@github.com wrote:

That did it! I downloaded V 2.2.3 and then ran the following command: ./Eyewitness.py --web --timeout 60 -f links.txt --proxy-ip 127.0.0.1 --proxy-port 9050 --proxy-type socks5

Thanks a bunch!

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/FortyNorthSecurity/EyeWitness/issues/440?email_source=notifications&email_token=AAA4SWJ5N6KSUF5BBIF2KBDQVQBVHA5CNFSM4JRLCEWKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEFDEDZY#issuecomment-558252519, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAA4SWIAKQOYN7VRRQTVLZLQVQBVHANCNFSM4JRLCEWA .

deauther890 commented 5 months ago

Hello,

Please can you detail the steps for this fix. I have tried to roll back to v 2.2.3 and I'm always getting RDP libraries not found (I already went the issue and tried all the fixes and still not working).

Thanks in advanced.