diff --git a/CHANGELOG.md b/CHANGELOG.md index 314d272..b22d034 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,23 @@ ## CHANGELOG: +* v2.2b - Added fullportonly mode to do exclusive full port scans +* v2.2b - Fixed minor issue with Metasploit Pro not starting +* v2.2b - Fixed minor issue with sniper loot command +* v2.2a - Fixed minor issue with loot function +* v2.2 - Added auto Metasploit Pro & Zenmap GUI integration +* v2.2 - Added Sn1per workspaces to loot directory +* v2.1d - Added crt.sh sub-domain check +* v2.1d - Removed blank screenshots from loot directory +* v2.1c - Fixed issue with install.sh install directories +* v2.1b - Added automatic Metasploit NMap xml imports for loot directory +* v2.1b - Removed Zenmap +* v2.1a - Separated Arachni reports for port 80/443/tcp +* v2.1a - Fixed NMap full port scan options +* v2.1 - Added Arachni with auto HTML web reporting (web mode only) +* v2.1 - Added full NMap detailed port scans +* v2.1 - Added port 4443/tcp checks +* v2.1 - Added META tag scans for web apps +* v2.1 - Removed Uniscan from web mode +* v2.1 - Removed SQLMap from web mode * v2.0b - Added help option --help * v2.0a - Fixed issue with ssh-audit * v2.0a - Fixed issue with 'discover' mode @@ -109,4 +128,4 @@ * v1.4 - Removed debug output from goohak from displaying on console ## FUTURE: -* Add scan config options to enabled/disable certain scan tasks (ie. brute force, osint, web scans, etc.) \ No newline at end of file +* Add auto logging and reporting to all scans diff --git a/README.md b/README.md index 0e5a150..9b38bbd 100644 --- a/README.md +++ b/README.md @@ -19,6 +19,8 @@ Sn1per is an automated scanner that can be used during a penetration test to enu * Automatically exploit remote hosts to gain remote shell access * Performs high level enumeration of multiple hosts * Auto-pwn added for Metasploitable, ShellShock, MS08-067, Default Tomcat Creds +* Automatically integrates with Metasploit Pro, MSFConsole and Zenmap for reporting +* Create individual workspaces to store all scan output ## KALI LINUX INSTALL: ``` @@ -45,6 +47,7 @@ sniper sniper stealth sniper discover sniper port +sniper fullportonly sniper web sniper nobrute sniper airstrike @@ -57,11 +60,12 @@ sniper loot * **STEALTH:** Quickly enumerate single targets using mostly non-intrusive scans to avoid WAF/IPS blocking * **DISCOVER:** Parses all hosts on a subnet/CIDR (ie. 192.168.0.0/16) and initiates a sniper scan against each host. Useful for internal network scans. * **PORT:** Scans a specific port for vulnerabilities. Reporting is not currently available in this mode. +* **FULLPORTONLY:** Performs a full detailed port scan and saves results to XML. * **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly. * **NOBRUTE:** Launches a full scan against a target host/domain without brute forcing services. * **AIRSTRIKE:** Quickly enumerates open ports/services on multiple hosts and performs basic fingerprinting. To use, specify the full location of the file which contains all hosts, IP's that need to be scanned and run ./sn1per /full/path/to/targets.txt airstrike to begin scanning. * **NUKE:** Launch full audit of multiple hosts specified in text file of choice. Usage example: ./sniper /pentest/loot/targets.txt nuke. -* **LOOT:** Automatically organizes and displays loot folder in your browser and opens Zenmap GUI with all port scan results. To run, type 'sniper loot'. +* **LOOT:** Automatically organizes and displays loot folder in your browser and opens Metasploit Pro and Zenmap GUI with all port scan results. To run, type 'sniper loot'. ## SAMPLE REPORT: https://gist.github.com/1N3/8214ec2da2c91691bcbc diff --git a/install.sh b/install.sh index e4d4527..6450da9 100644 --- a/install.sh +++ b/install.sh @@ -19,18 +19,25 @@ echo -e "$OKORANGE + -- --=[http://crowdshield.com$RESET" echo "" INSTALL_DIR=/usr/share/sniper +LOOT_DIR=/usr/share/sniper/loot PLUGINS_DIR=/usr/share/sniper/plugins echo -e "$OKGREEN + -- --=[This script will install sniper under $INSTALL_DIR. Are you sure you want to continue?$RESET" read answer mkdir -p $INSTALL_DIR 2> /dev/null +mkdir -p $LOOT_DIR 2> /dev/null +mkdir $LOOT_DIR/domains 2> /dev/null +mkdir $LOOT_DIR/screenshots 2> /dev/null +mkdir $LOOT_DIR/nmap 2> /dev/null +mkdir $LOOT_DIR/reports 2> /dev/null +mkdir $LOOT_DIR/output 2> /dev/null cp -Rf $PWD/* $INSTALL_DIR cd $INSTALL_DIR echo -e "$OKORANGE + -- --=[Installing package dependencies...$RESET" apt-get install ruby rubygems python dos2unix zenmap sslyze uniscan xprobe2 cutycapt unicornscan waffit host whois dirb dnsrecon curl nmap php php-curl hydra iceweasel wpscan sqlmap nbtscan enum4linux cisco-torch metasploit-framework theharvester dnsenum nikto smtp-user-enum whatweb sslscan amap -pip install dnspython colorama tldextract urllib3 ipaddress +pip install dnspython colorama tldextract urllib3 ipaddress arachni echo -e "$OKORANGE + -- --=[Installing gem dependencies...$RESET" gem install rake @@ -38,7 +45,7 @@ gem install ruby-nmap net-http-persistent mechanize text-table echo -e "$OKORANGE + -- --=[Cleaning up old extensions...$RESET" rm -Rf Findsploit/ BruteX/ Goohak/ XSSTracer/ MassBleed/ SuperMicro-Password-Scanner/ CMSmap/ yasuo/ Sublist3r/ shocker/ jexboss/ serializekiller/ testssl.sh/ SimpleEmailSpoofer/ ssh-audit/ plugins/ 2> /dev/null -mkdir /usr/share/sniper/plugins/ +mkdir $PLUGINS_DIR cd $PLUGINS_DIR echo -e "$OKORANGE + -- --=[Downloading extensions...$RESET"