EyeWitness and HTTP

Recon Techniques
1

Hi guys,

I used amass and enumerated some http subdomains. I then used EyeWitness to take screenshots of the links I had generated.

I found an interesting subdomain but when I tried to access it on both firefox and chrome the page was not loaded as it automatically redirects to using the https protocol.

Running an nmap scan showed that the https port was closed but the http port was open. Even if the web server automatically forwarded http requests to https, how was EyeWitness able to take a screenshot?

Is there a way to load the http page? Thanks.

3

I’m not sure how EyeWitness got a screenshot you can’t open in a browser, but if I was in your position I’d try throwing cURL at it to see if anything interesting comes back. Good luck!