Eyeballer

What is Eyeballer?

Eyeballer is an innovative AI-driven tool designed to assist penetration testers in efficiently analyzing vast numbers of website screenshots to pinpoint pages likely to contain security vulnerabilities. By leveraging a convolutional neural network, Eyeballer classifies rendered web pages into categories such as login pages, old-looking sites, custom 404 pages, and homepages. This automation significantly reduces manual triage efforts during large-scale external network assessments, enabling security professionals to focus on high-value targets. Eyeballer complements traditional scanning tools by providing a visual layer of analysis that is difficult to achieve with signature-based methods alone. The tool is open-source and supports GPU acceleration for training and inference, making it adaptable to diverse testing environments.

Key Features

• AI-Powered Visual Classification

  Uses convolutional neural networks to analyze screenshots and label web pages based on visual characteristics relevant to penetration testing.

• Large-Scale Perimeter Assessment

  Designed to handle thousands of screenshots quickly, enabling efficient triage of extensive external web assets.

• Multiple Target Labels

  Identifies key categories such as login pages, old-looking sites, custom 404 pages, and homepages to prioritize potential vulnerabilities.

• Open Source and Extensible

  Available on GitHub, allowing customization, retraining, and integration into existing security workflows.

• Human-Readable and Machine-Readable Outputs

  Generates both HTML reports for easy browsing and CSV files for automated processing.

• Supports GPU Acceleration

  Optimized for GPU use during model training and prediction to improve performance on large datasets.

Use Cases

• Penetration Testing : Automates the identification of high-value web targets within large external perimeters to streamline manual review.
• Security Assessment Triage : Helps security teams prioritize which web pages to investigate further based on visual indicators of vulnerability.
• Bug Bounty Reconnaissance : Assists bug bounty hunters in quickly filtering through numerous web assets to find promising attack surfaces.
• Continuous Security Monitoring : Integrates into ongoing penetration testing services to maintain up-to-date target prioritization as web assets evolve.

FAQs