From 11e203fe910d525060cbc6bf594faac711fc7cc5 Mon Sep 17 00:00:00 2001 From: Yunus YILDIRIM Date: Tue, 12 Jul 2016 12:53:48 +0300 Subject: [PATCH 1/7] update sub-domain hijack list --- sniper | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sniper b/sniper index 518d454..5640807 100644 --- a/sniper +++ b/sniper @@ -226,7 +226,7 @@ if [ "$MODE" = "stealth" ]; then python Sublist3r/sublist3r.py -d $TARGET -vvv -o loot/domains/domains-$TARGET.txt 2>/dev/null dos2unix loot/domains/domains-$TARGET.txt 2>/dev/null echo -e "$OKGREEN + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +$RESET" - for a in `cat loot/domains/domains-$TARGET.txt`; do dig $a CNAME | egrep -i "heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr" 2>/dev/null; done; + for a in `cat loot/domains/domains-$TARGET.txt`; do dig $a CNAME | egrep -i "heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr|amazonaws|hubspot" 2>/dev/null; done; echo -e "$OKGREEN + -- ----------------------------=[Checking Email Security]=----------------- -- +$RESET" python SimpleEmailSpoofer/spoofcheck.py $TARGET 2>/dev/null fi @@ -323,7 +323,7 @@ if [ "$MODE" = "airstrike" ]; then python Sublist3r/sublist3r.py -d $a -vvv -o loot/domains/domains-$a.txt 2>/dev/null dos2unix loot/domains/domains-$a.txt 2>/dev/null echo -e "$OKGREEN + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +$RESET" - for b in `cat loot/domains/domains-$a.txt`; do dig $b CNAME | egrep -i 'heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr' 2>/dev/null; done; + for b in `cat loot/domains/domains-$a.txt`; do dig $b CNAME | egrep -i 'heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr|amazonaws|hubspot' 2>/dev/null; done; echo -e "$OKGREEN + -- ----------------------------=[Checking Email Security]=----------------- -- +$RESET" python SimpleEmailSpoofer/spoofcheck.py $a 2>/dev/null fi @@ -446,7 +446,7 @@ then python Sublist3r/sublist3r.py -d $TARGET -vvv -o loot/domains/domains-$TARGET.txt 2>/dev/null dos2unix loot/domains/domains-$TARGET.txt 2>/dev/null echo -e "$OKGREEN + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +$RESET" - for a in `cat loot/domains/domains-$TARGET.txt`; do dig $a CNAME | egrep -i 'heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr' 2>/dev/null; done; + for a in `cat loot/domains/domains-$TARGET.txt`; do dig $a CNAME | egrep -i 'heroku|github|bitbucket|squarespace|shopify|desk|teamwork|unbounce|helpjuice|helpscout|pingdom|tictail|campaign monitor|cargocollective|statuspage|tumblr|amazonaws|hubspot' 2>/dev/null; done; echo -e "$OKGREEN + -- ----------------------------=[Checking Email Security]=----------------- -- +$RESET" python SimpleEmailSpoofer/spoofcheck.py $TARGET 2>/dev/null fi From bbc3894ba0f920b5523fcd61854ebdf19e4b0cdd Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Thu, 29 Dec 2016 18:24:32 +0200 Subject: [PATCH 2/7] Master merged --- sniper | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/sniper b/sniper index 98b707a..5f7bb84 100644 --- a/sniper +++ b/sniper @@ -59,6 +59,14 @@ cd $INSTALL_DIR # DEFAULT IS "1" (ENABLED) AUTOBRUTE="1" +# CREATE LOOT DIR SUBDIRS +mkdir $LOOT_DIR 2> /dev/null +mkdir $LOOT_DIR/screenshots/ -p 2> /dev/null +mkdir $LOOT_DIR/nmap -p 2> /dev/null +mkdir $LOOT_DIR/domains -p 2> /dev/null +mkdir $LOOT_DIR/output -p 2> /dev/null +mkdir $LOOT_DIR/reports -p 2> /dev/null + function loot { echo -e "$OKRED ____ $RESET" echo -e "$OKRED _________ / _/___ ___ _____$RESET" @@ -289,8 +297,8 @@ if [ "$MODE" = "stealth" ]; then whatweb http://$TARGET echo -e "$OKGREEN + -- ----------------------------=[Checking Headers and Methods]=------------ -- +$RESET" xsstracer $TARGET 80 - echo -e "$OKGREEN + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +$RESET" - cutycapt --url=http://$TARGET --out=$LOOT_DIR/screenshots/$TARGET-port80.jpg + #echo -e "$OKGREEN + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +$RESET" + #cutycapt --url=http://$TARGET --out=$LOOT_DIR/screenshots/$TARGET-port80.jpg fi if [ -z "$port_443" ]; @@ -562,7 +570,7 @@ else nmap -sU -T5 -p U:$OPT1 --open $TARGET fi -service postgresql start +# service postgresql start echo "" echo -e "$OKGREEN + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +$RESET" From 5761f6584a6bed002e4663a7f541fd4014a089ac Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Mon, 16 Jan 2017 20:05:07 +0200 Subject: [PATCH 3/7] postresql is now prevented from starting --- sniper | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sniper b/sniper index 74457e3..a65207b 100644 --- a/sniper +++ b/sniper @@ -666,7 +666,7 @@ else nmap -sU -T5 -p U:$OPT1 --open $TARGET fi -service postgresql start +# service postgresql start echo "" echo -e "$OKGREEN + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +$RESET" From 4012575a77ba84db4a4d386a6c105d7be97c776d Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Tue, 17 Jan 2017 14:05:10 +0200 Subject: [PATCH 4/7] postgresql is now started again, running BruteX and Findsploit install --- install.sh | 4 ++-- sniper | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/install.sh b/install.sh index 6450da9..a8ce148 100644 --- a/install.sh +++ b/install.sh @@ -64,8 +64,8 @@ git clone https://github.com/drwetter/testssl.sh.git git clone https://github.com/lunarca/SimpleEmailSpoofer git clone https://github.com/arthepsy/ssh-audit echo -e "$OKORANGE + -- --=[Setting up environment...$RESET" -cd $PLUGINS_DIR/BruteX/ -bash install.sh +cd $PLUGINS_DIR/Findsploit/ && sh install.sh +cd $PLUGINS_DIR/BruteX/ && sh install.sh cd $INSTALL_DIR mkdir $LOOT_DIR 2> /dev/null mkdir $LOOT_DIR/screenshots/ -p 2> /dev/null diff --git a/sniper b/sniper index 30fdf25..74457e3 100644 --- a/sniper +++ b/sniper @@ -94,7 +94,7 @@ function loot { rm -f $LOOT_DIR/.fuse_* 2> /dev/null echo -e "$OKORANGE + -- --=[Starting Metasploit service...$RESET" /etc/init.d/metasploit start 2> /dev/null -# /etc/init.d/postgresql start 2> /dev/null + /etc/init.d/postgresql start 2> /dev/null echo -e "$OKORANGE + -- --=[Importing NMap XML files into Metasploit...$RESET" msfconsole -x "workspace -a $WORKSPACE; workspace $WORKSPACE; db_import $LOOT_DIR/nmap/nmap*.xml; hosts; services; exit;" echo -e "$OKORANGE + -- --=[Copying loot to workspace: $WORKSPACE...$RESET" @@ -666,7 +666,7 @@ else nmap -sU -T5 -p U:$OPT1 --open $TARGET fi -# service postgresql start +service postgresql start echo "" echo -e "$OKGREEN + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +$RESET" From b35eeddeb75505808a11c64bea60b8e3a3e862e5 Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Tue, 17 Jan 2017 20:52:04 +0200 Subject: [PATCH 5/7] postgresql service is now started conditionally --- sniper | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/sniper b/sniper index 74457e3..d9ed09c 100644 --- a/sniper +++ b/sniper @@ -35,6 +35,7 @@ TARGET="$1" MODE="$2" OPT1="$3" +DISABLE_POSTGRESQL="true" # disabling postgresql startup, assuming it's running already INSTALL_DIR="/usr/share/sniper" LOOT_DIR="/usr/share/sniper/loot" PLUGINS_DIR="/usr/share/sniper/plugins" @@ -94,7 +95,7 @@ function loot { rm -f $LOOT_DIR/.fuse_* 2> /dev/null echo -e "$OKORANGE + -- --=[Starting Metasploit service...$RESET" /etc/init.d/metasploit start 2> /dev/null - /etc/init.d/postgresql start 2> /dev/null + if [ -z $DISABLE_POSTGRESQL ]; then /etc/init.d/postgresql start 2> /dev/null echo -e "$OKORANGE + -- --=[Importing NMap XML files into Metasploit...$RESET" msfconsole -x "workspace -a $WORKSPACE; workspace $WORKSPACE; db_import $LOOT_DIR/nmap/nmap*.xml; hosts; services; exit;" echo -e "$OKORANGE + -- --=[Copying loot to workspace: $WORKSPACE...$RESET" @@ -666,7 +667,7 @@ else nmap -sU -T5 -p U:$OPT1 --open $TARGET fi -service postgresql start +if [ -z $DISABLE_POSTGRESQL ]; then service postgresql start echo "" echo -e "$OKGREEN + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +$RESET" From a38da1ec4e42ed3381b9b9209fdd4cbb7724f3b6 Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Wed, 18 Jan 2017 10:30:51 +0200 Subject: [PATCH 6/7] fixed syntax errors in sh file --- sniper | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sniper b/sniper index d9ed09c..a30e938 100644 --- a/sniper +++ b/sniper @@ -95,7 +95,7 @@ function loot { rm -f $LOOT_DIR/.fuse_* 2> /dev/null echo -e "$OKORANGE + -- --=[Starting Metasploit service...$RESET" /etc/init.d/metasploit start 2> /dev/null - if [ -z $DISABLE_POSTGRESQL ]; then /etc/init.d/postgresql start 2> /dev/null + if [ -z $DISABLE_POSTGRESQL ]; then /etc/init.d/postgresql start 2> /dev/null; fi echo -e "$OKORANGE + -- --=[Importing NMap XML files into Metasploit...$RESET" msfconsole -x "workspace -a $WORKSPACE; workspace $WORKSPACE; db_import $LOOT_DIR/nmap/nmap*.xml; hosts; services; exit;" echo -e "$OKORANGE + -- --=[Copying loot to workspace: $WORKSPACE...$RESET" @@ -667,7 +667,7 @@ else nmap -sU -T5 -p U:$OPT1 --open $TARGET fi -if [ -z $DISABLE_POSTGRESQL ]; then service postgresql start +if [ -z $DISABLE_POSTGRESQL ]; then service postgresql start; fi echo "" echo -e "$OKGREEN + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +$RESET" From e47e6a6ce1157ddf4c3606bd2d5c8003fbdc213c Mon Sep 17 00:00:00 2001 From: "Arsen A. Gutsal" Date: Tue, 24 Jan 2017 15:44:52 +0200 Subject: [PATCH 7/7] minified directory creation --- sniper | 18 ++---------------- 1 file changed, 2 insertions(+), 16 deletions(-) diff --git a/sniper b/sniper index a30e938..9e1f22a 100644 --- a/sniper +++ b/sniper @@ -107,22 +107,8 @@ function loot { cp -Rf $LOOT_DIR/imports/ $LOOT_DIR/workspace/$WORKSPACE/ 2> /dev/null cp -Rf $LOOT_DIR/notes/ $LOOT_DIR/workspace/$WORKSPACE/ 2> /dev/null cp -Rf $LOOT_DIR/web/ $LOOT_DIR/workspace/$WORKSPACE/ 2> /dev/null - rm -Rf $LOOT_DIR/screenshots/ 2> /dev/null - rm -Rf $LOOT_DIR/nmap/ 2> /dev/null - rm -Rf $LOOT_DIR/domains/ 2> /dev/null - rm -Rf $LOOT_DIR/output/ 2> /dev/null - rm -Rf $LOOT_DIR/reports/ 2> /dev/null - rm -Rf $LOOT_DIR/imports/ 2> /dev/null - rm -Rf $LOOT_DIR/notes/ 2> /dev/null - rm -Rf $LOOT_DIR/web/ 2> /dev/null - mkdir $LOOT_DIR/screenshots/ -p 2> /dev/null - mkdir $LOOT_DIR/nmap -p 2> /dev/null - mkdir $LOOT_DIR/domains -p 2> /dev/null - mkdir $LOOT_DIR/output -p 2> /dev/null - mkdir $LOOT_DIR/reports -p 2> /dev/null - mkdir $LOOT_DIR/imports -p 2> /dev/null - mkdir $LOOT_DIR/notes -p 2> /dev/null - mkdir $LOOT_DIR/web -p 2> /dev/null + rm -Rf $LOOT_DIR/{screenshots,nmap,domains,outputs,reports,imports,notes,web}/ 2> /dev/null + mkdir $LOOT_DIR/{screenshots,nmap,domains,outputs,reports,imports,notes,web}/ -p 2> /dev/null echo -e "$OKORANGE + -- --=[Opening workspace directory...$RESET" iceweasel 2> /dev/null & sleep 2