RomanNum3ral
/
Sn1per
mirror of https://github.com/1N3/Sn1per.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5 from jmchia/master 

New fixes and script installation
This commit is contained in:
1N3 2015-10-11 13:41:12 -04:00
parent 0ec850444b 7730363665
commit 49e9ae3bac
2 changed files with 34 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
install.sh
View File

@ -1,6 +1,7 @@
#!/bin/bash #!/bin/bash
# Install script for sn1per # Install script for sn1per
# #
DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
echo "Installing sn1per dependencies..." echo "Installing sn1per dependencies..."
apt-get install host whois theharvester dnsenum curl nmap php5 php5-curl wapiti hydra iceweasel wpscan sqlmap arachni w3af golismero nbtscan enum4linux cisco-torch metasploit-framework theharvester nmap dnsenum nikto smtp-user-enum whatweb python nbtscan sslscan amap apt-get install host whois theharvester dnsenum curl nmap php5 php5-curl wapiti hydra iceweasel wpscan sqlmap arachni w3af golismero nbtscan enum4linux cisco-torch metasploit-framework theharvester nmap dnsenum nikto smtp-user-enum whatweb python nbtscan sslscan amap
git clone https://github.com/1N3/Findsploit.git git clone https://github.com/1N3/Findsploit.git
@ -11,5 +12,8 @@ git clone https://github.com/1N3/SuperMicro-Password-Scanner
git clone https://github.com/Dionach/CMSmap.git git clone https://github.com/Dionach/CMSmap.git
mkdir loot mkdir loot
chmod +rx sniper chmod +rx sniper
chmod +rx bin/dnsdict6
chmod +rx Goohak/goohak
ln -s $DIR/sniper /usr/bin/sniper
echo "Be sure to install the following packages manually and update the sniper script references: dig dnsdict6 cmsmap samrdump inurlbr wafw00f showmount samrdump rpcinfo snmpwalk" echo "Be sure to install the following packages manually and update the sniper script references: dig dnsdict6 cmsmap samrdump inurlbr wafw00f showmount samrdump rpcinfo snmpwalk"
echo "Done!" echo "Done!"

57
sniper
View File

@ -19,18 +19,23 @@
# USAGE: # USAGE:
# ./sn1per <target> # ./sn1per <target>
# #
DIR=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd ) ##FINDSPLOIT_DIR="$DIR/Findsploit" Not used on script
SCRIPT_PATH=`realpath ${BASH_SOURCE[0]}`
DIR=`dirname $SCRIPT_PATH`
TARGET="$1" TARGET="$1"
LOOT_DIR="loot" LOOT_DIR="$DIR/loot"
FINDSPLOIT_DIR="Findsploit" CMSMAP="$DIR/CMSmap/cmsmap.py"
CMSMAP="CMSmap/cmsmap.py" BRUTEX="$DIR/BruteX/brutex"
SAMRDUMP="bin/samrdump.py" GOOHAK="$DIR/Goohak/goohak"
DNSDICT6="bin/dnsdict6" XSSTRACER="$DIR/XSSTracer/xsstracer.py"
INURLBR="bin/inurlbr.php" SAMRDUMP="$DIR/bin/samrdump.py"
USER_FILE="BruteX/simple-users.txt" DNSDICT6="$DIR/bin/dnsdict6"
PASS_FILE="BruteX/password.lst" INURLBR="$DIR/bin/inurlbr.php"
DNS_FILE="BruteX/namelist.txt" USER_FILE="$DIR/BruteX/simple-users.txt"
SUPER_MICRO_SCAN="SuperMicro-Password-Scanner/supermicro_scan.sh" PASS_FILE="$DIR/BruteX/password.lst"
DNS_FILE="$DIR/BruteX/namelist.txt"
SUPER_MICRO_SCAN="$DIR/SuperMicro-Password-Scanner/supermicro_scan.sh"
THREADS="30" THREADS="30"
OKBLUE='\033[94m' OKBLUE='\033[94m'
OKRED='\033[91m' OKRED='\033[91m'
@ -152,7 +157,7 @@ then
echo -e "$OKRED+ -- --=[Port 25 closed... skipping.$RESET" echo -e "$OKRED+ -- --=[Port 25 closed... skipping.$RESET"
else else
echo -e "$OKGREEN+ -- --=[Port 25 opened... running tests...$RESET" echo -e "$OKGREEN+ -- --=[Port 25 opened... running tests...$RESET"
nmap -sV --script=smtp* -p 25 192.168.1.113 nmap -sV --script=smtp* -p 25 $TARGET
smtp-user-enum -M VRFY -U $USER_FILE -t $TARGET smtp-user-enum -M VRFY -U $USER_FILE -t $TARGET
fi fi
@ -161,7 +166,7 @@ then
echo -e "$OKRED+ -- --=[Port 53 closed... skipping.$RESET" echo -e "$OKRED+ -- --=[Port 53 closed... skipping.$RESET"
else else
echo -e "$OKGREEN+ -- --=[Port 53 opened... running tests...$RESET" echo -e "$OKGREEN+ -- --=[Port 53 opened... running tests...$RESET"
nmap -sV --script=dns* -p 25 192.168.1.113 nmap -sV --script=dns* -p 53 $TARGET
fi fi
if [ -z "$port_80" ] if [ -z "$port_80" ]
@ -169,9 +174,9 @@ then
echo -e "$OKRED+ -- --=[Port 80 closed... skipping.$RESET" echo -e "$OKRED+ -- --=[Port 80 closed... skipping.$RESET"
else else
echo -e "$OKGREEN+ -- --=[Port 80 opened... running tests...$RESET" echo -e "$OKGREEN+ -- --=[Port 80 opened... running tests...$RESET"
goohak $TARGET 2> /dev/null $GOOHAK $TARGET 2> /dev/null
php $INURLBR --dork "site:$TARGET" -s $LOOT_DIR/inurlbr-$TARGET.txt >> $LOOT_DIR/inurlbr-$TARGET.txt php $INURLBR --dork "site:$TARGET" -s $LOOT_DIR/inurlbr-$TARGET.txt >> $LOOT_DIR/inurlbr-$TARGET.txt
rm -Rf output/ cookie.txt exploits.conf rm -Rf $DIR/output/ $DIR/cookie.txt $DIR/exploits.conf
nmap -sV -p 80 --script=http-enum,http-feed,http-open-proxy,http-headers,http-cors,http-server-header,http-php-version,http-form-brute,http-iis-short-name-brute,http-waf-fingerprint,http-auth,http-trace,http-iis-webdav-vuln,http-useragent-tester,http-vuln-cve2011-3368,http-userdir-enum,http-passwd,http-drupal-modules,http-csrf,http-wordpress-enum,http-frontpage-login,http-dombased-xss,http-phpself-xss,http-sql-injection,http-drupal-enum-users,http-referer-checker,http-vuln-cve2009-3960,http-methods,http-email-harvest,http-open-redirect,http-vuln-cve2011-3192,http-stored-xss,http-vuln-cve2013-0156,http-put,http-proxy-brute,http-rfi-spider,http-method-tamper $TARGET nmap -sV -p 80 --script=http-enum,http-feed,http-open-proxy,http-headers,http-cors,http-server-header,http-php-version,http-form-brute,http-iis-short-name-brute,http-waf-fingerprint,http-auth,http-trace,http-iis-webdav-vuln,http-useragent-tester,http-vuln-cve2011-3368,http-userdir-enum,http-passwd,http-drupal-modules,http-csrf,http-wordpress-enum,http-frontpage-login,http-dombased-xss,http-phpself-xss,http-sql-injection,http-drupal-enum-users,http-referer-checker,http-vuln-cve2009-3960,http-methods,http-email-harvest,http-open-redirect,http-vuln-cve2011-3192,http-stored-xss,http-vuln-cve2013-0156,http-put,http-proxy-brute,http-rfi-spider,http-method-tamper $TARGET
wafw00f http://$TARGET wafw00f http://$TARGET
echo "" echo ""
@ -281,9 +286,9 @@ then
else else
echo -e "$OKGREEN+ -- --=[Port 443 opened... running tests...$RESET" echo -e "$OKGREEN+ -- --=[Port 443 opened... running tests...$RESET"
nmap -sV -p 443 --script=http-enum,http-feed,http-open-proxy,http-headers,http-cors,http-server-header,http-php-version,http-form-brute,http-iis-short-name-brute,http-waf-fingerprint,http-auth,http-trace,http-iis-webdav-vuln,http-useragent-tester,http-vuln-cve2011-3368,http-userdir-enum,http-passwd,http-drupal-modules,http-csrf,http-wordpress-enum,http-frontpage-login,http-dombased-xss,http-phpself-xss,http-sql-injection,http-drupal-enum-users,http-referer-checker,http-vuln-cve2009-3960,http-methods,http-email-harvest,http-open-redirect,http-vuln-cve2011-3192,http-stored-xss,http-vuln-cve2013-0156,http-put,http-proxy-brute,http-rfi-spider,http-method-tamper,tls-nextprotoneg,ssl* $TARGET nmap -sV -p 443 --script=http-enum,http-feed,http-open-proxy,http-headers,http-cors,http-server-header,http-php-version,http-form-brute,http-iis-short-name-brute,http-waf-fingerprint,http-auth,http-trace,http-iis-webdav-vuln,http-useragent-tester,http-vuln-cve2011-3368,http-userdir-enum,http-passwd,http-drupal-modules,http-csrf,http-wordpress-enum,http-frontpage-login,http-dombased-xss,http-phpself-xss,http-sql-injection,http-drupal-enum-users,http-referer-checker,http-vuln-cve2009-3960,http-methods,http-email-harvest,http-open-redirect,http-vuln-cve2011-3192,http-stored-xss,http-vuln-cve2013-0156,http-put,http-proxy-brute,http-rfi-spider,http-method-tamper,tls-nextprotoneg,ssl* $TARGET
goohak $TARGET 2> /dev/null $GOOHAK $TARGET 2> /dev/null
php $INURLBR --dork "site:$TARGET" -s $LOOT_DIR/inurlbr-$TARGET.txt >> $LOOT_DIR/inurlbr-$TARGET.txt php $INURLBR --dork "site:$TARGET" -s $LOOT_DIR/inurlbr-$TARGET.txt >> $LOOT_DIR/inurlbr-$TARGET.txt
rm -Rf output/ cookie.txt exploits.conf rm -Rf $DIR/output/ $DIR/cookie.txt $DIR/exploits.conf
wafw00f https://$TARGET wafw00f https://$TARGET
echo "" echo ""
whatweb https://$TARGET whatweb https://$TARGET
@ -454,7 +459,7 @@ else
echo "" echo ""
whatweb http://$TARGET:8000 whatweb http://$TARGET:8000
echo "" echo ""
xsstracer $TARGET 8000 python $XSSTRACER $TARGET 8000
nikto -h http://$TARGET:8000 nikto -h http://$TARGET:8000
fi fi
@ -467,7 +472,7 @@ else
echo "" echo ""
whatweb http://$TARGET:8100 whatweb http://$TARGET:8100
echo "" echo ""
xsstracer $TARGET 8100 python $XSSTRACER $TARGET 8100
nikto -h http://$TARGET:8100 nikto -h http://$TARGET:8100
fi fi
@ -480,7 +485,7 @@ else
echo "" echo ""
whatweb http://$TARGET:8080 whatweb http://$TARGET:8080
echo "" echo ""
xsstracer $TARGET 8080 python $XSSTRACER $TARGET 8080
nikto -h http://$TARGET:8080 nikto -h http://$TARGET:8080
nmap -p 8080 --script=proxy-* $TARGET nmap -p 8080 --script=proxy-* $TARGET
fi fi
@ -494,7 +499,7 @@ else
echo "" echo ""
whatweb http://$TARGET:8180 whatweb http://$TARGET:8180
echo "" echo ""
xsstracer $TARGET 8180 python $XSSTRACER $TARGET 8180
nikto -h http://$TARGET:8180 nikto -h http://$TARGET:8180
nmap -p 8180 --script=proxy-* $TARGET nmap -p 8180 --script=proxy-* $TARGET
fi fi
@ -509,10 +514,8 @@ fi
echo -e "$OKGREEN################################### Running Brute Force #############################$RESET" echo -e "$OKGREEN################################### Running Brute Force #############################$RESET"
cd $DIR/BruteX cd $DIR/BruteX
$DIR/BruteX/brutex $TARGET $BRUTEX $TARGET
rm -f hydra.restore rm -f $DIR/BruteX/hydra.restore
cd .. rm -f $DIR/scan.log
echo "" echo -e "\n$OKGREEN################################### Done! ###########################################$RESET"
rm -f scan.log
echo -e "$OKGREEN################################### Done! ###########################################$RESET"
exit 0 exit 0