From 5020eec4e51b600544c31aac1b607ae01cadcb25 Mon Sep 17 00:00:00 2001 From: "@xer0dayz" <1n3@hushmail.com> Date: Fri, 18 Dec 2020 11:20:16 -0700 Subject: [PATCH] * v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool --- sniper | 20 +++++++++----------- 1 file changed, 9 insertions(+), 11 deletions(-) diff --git a/sniper b/sniper index a801a06..21f89d2 100755 --- a/sniper +++ b/sniper @@ -470,28 +470,26 @@ function init { service postgresql start 2> /dev/null > /dev/null msfdb start 2> /dev/null > /dev/null chown root /run/user/1000/gdm/Xauthority 2> /dev/null + LAST_USER=$(last | head -n 1 | awk '{print $1}') + sudo cp -a /home/$LAST_USER/.Xauthority /root/.Xauthority 2> /dev/null sudo cp -a /root/.Xauthority /root/.Xauthority.bak 2> /dev/null sudo cp -a /home/$USER/.Xauthority /root/.Xauthority 2> /dev/null sudo cp -a /home/kali/.Xauthority /root/.Xauthority 2> /dev/null sudo chown root: /root/.Xauthority 2> /dev/null XAUTHORITY=/root/.Xauthority UPDATED_TARGETS=$LOOT_DIR/scans/updated.txt - if [[ "$AUTO_BRUTE" == "1" ]]; then echo "$TARGET AUTO_BRUTE `date +"%Y-%m-%d %H:%M"`" 2> /dev/null >> $LOOT_DIR/scans/tasks.txt touch $LOOT_DIR/scans/$TARGET-AUTO_BRUTE.txt 2> /dev/null fi - if [[ "$FULLNMAPSCAN" == "1" ]]; then echo "$TARGET fullnmapscan `date +"%Y-%m-%d %H:%M"`" 2> /dev/null >> $LOOT_DIR/scans/tasks.txt touch $LOOT_DIR/scans/$TARGET-fullnmapscan.txt 2> /dev/null fi - if [[ "$OSINT" == "1" ]]; then echo "$TARGET osint `date +"%Y-%m-%d %H:%M"`" 2> /dev/null >> $LOOT_DIR/scans/tasks.txt touch $LOOT_DIR/scans/$TARGET-osint.txt 2> /dev/null fi - if [[ "$RECON" == "1" ]]; then echo "$TARGET recon `date +"%Y-%m-%d %H:%M"`" 2> /dev/null >> $LOOT_DIR/scans/tasks.txt touch $LOOT_DIR/scans/$TARGET-recon.txt 2> /dev/null @@ -576,11 +574,11 @@ function loot { wc -l $LOOT_DIR/scans/notifications.txt 2> /dev/null | awk '{print $1}' > $LOOT_DIR/scans/notifications_total.txt 2> /dev/null wc -l $LOOT_DIR/scans/notifications_new.txt 2> /dev/null | awk '{print $1}' > $LOOT_DIR/scans/notifications_new_total.txt 2> /dev/null cat $LOOT_DIR/scans/tasks-running.txt 2> /dev/null > $LOOT_DIR/scans/tasks-running_total.txt 2> /dev/null - wc -l $LOOT_DIR/scans/tasks.txt 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/tasks_total.txt 2> /dev/null - wc -l $LOOT_DIR/scans/scheduled/*.sh 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/scheduled_tasks_total.txt 2> /dev/null - grep "Host\ status" $LOOT_DIR/scans/notifications.txt 2> /dev/null | wc -l | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/host_status_changes_total.txt 2> /dev/null - grep "Port\ change" $LOOT_DIR/scans/notifications.txt 2> /dev/null | wc -l | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/port_changes_total.txt 2> /dev/null - wc -l $LOOT_DIR/domains/domains_new-*.txt 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/domain_changes_total.txt 2> /dev/null + wc -l $LOOT_DIR/scans/tasks.txt 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/tasks_total.txt 2> /dev/null + wc -l $LOOT_DIR/scans/scheduled/*.sh 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/scheduled_tasks_total.txt 2> /dev/null + grep "Host\ status" $LOOT_DIR/scans/notifications.txt 2> /dev/null | wc -l | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/host_status_changes_total.txt 2> /dev/null + grep "Port\ change" $LOOT_DIR/scans/notifications.txt 2> /dev/null | wc -l | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/port_changes_total.txt 2> /dev/null + wc -l $LOOT_DIR/domains/domains_new-*.txt 2> /dev/null | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/domain_changes_total.txt 2> /dev/null cat $LOOT_DIR/web/dirsearch-new-*.txt $LOOT_DIR/web/spider-new-*.txt 2> /dev/null | wc -l | awk '{print $1}' 2> /dev/null > $LOOT_DIR/scans/url_changes_total.txt 2> /dev/null if [[ -f "$LOOT_DIR/notes/notepad.html" ]]; then echo -n "" 2>/dev/null @@ -592,14 +590,14 @@ function loot { if [[ "$SN1PER_AUTOLOAD" = "1" ]] && [[ ! -f "$INSTALL_DIR/pro/settings.php" ]]; then echo -e "$OKORANGE + -- --=[ Loading Sn1per Professional...$RESET" source $INSTALL_DIR/pro.sh - $BROWSER $LOOT_DIR/sniper-report.html 2> /dev/null > /dev/null & + sudo $LAST_USER -c $BROWSER $LOOT_DIR/sniper-report.html 2> /dev/null > /dev/null & else echo -e "$OKORANGE + -- --=[ Generating Sn1per Professional reports...$RESET" source $INSTALL_DIR/pro.sh fi else echo -e "$OKRED + -- --=[ Sn1per Professional is not installed. To download Sn1per Professional, go to https://xerosecurity.com. $RESET" - $BROWSER https://xerosecurity.com 2> /dev/null > /dev/null & + sudo $LAST_USER -c $BROWSER https://xerosecurity.com 2> /dev/null > /dev/null & fi rm -f $UPDATED_TARGETS 2> /dev/null touch $UPDATED_TARGETS 2> /dev/null