Websites Captures

Lookyloo & PyLookyloo

Lookyloo is a web interface that allows you to capture a website in a safe environment and see what happens in a browser when you open a specific URL.

There is a public instance of Lookyloo hosted by CIRCL available at lookyloo.circl.lu.

PyLookyloo is a Python library that allows you to interact with Lookyloo. It is available as a package on PyPI and can be installed with pip install pylookyloo.

Lacus & PyLacus

Lacus is a standalone capturing interface that you can use with Lookyloo if you have many captures to do, or want to run the captures from a dedicated machine. Depending on the bandwidth of the server, and how much memory you have, it can capture 10th of thousands of URLs a day without any issue.

It is part of the AIL Project toolsuite and is used by the public instance of Lookyloo, and is the recommended capturing tool for AIL.

PyLaCus is a Python library that allows you to interact with Lacus. It is available as a package on PyPI and can be installed with pip install pylacus.

Monitoring

Lookyloo only allows capturing a URL once, but sometimes, you want to keep track of what changes on a website, either to detect is a website is defaced, or to monitor be informed when a parking page turns into a real website (or phishing for example). This is where the monitoring interface come in: it allows you to monitor a URL over time, and see the changes.

You can use the monitoring interface on the public instance of Lookyloo at lookyloo.circl.lu.

Browser extension (Firefox on Desktop and Android)

Lookyloo has a browser extension that allows you to capture a website directly from your browser. It is only available for Firefox on desktop and Android, and can be installed from the Firefox Add-ons store.

It is only recommended to use the extension if you have your own instance of Lookyloo because it can submit the cookies of the current session, which means it may submit login cookies along with the capture. Once the capture is on the Lookyloo instance, everyone with access to it could re-use them to login as you on websites.

Har2Tree

This module is a bit more niche, but it is used by Lookyloo to convert a HAR file to a tree using Ete Toolkit.

It is available as a package on PyPI and can be installed with pip install har2tree.

PlaywrightCapture

This module is directly using Playwright to capture a website. It accepts many options and does all kind of actions on the page during the capture to make it look like it’s a legitimate users.

It is available as a package on PyPI and can be installed with pip install playwrightcapture.

LacusCore

This module is the core of Lacus, but you can use it as a standalone module if you want to capture a website without using Lacus.

It is available as a package on PyPI and can be installed with pip install lacuscore.