diff --git a/CHANGELOG.md b/CHANGELOG.md index 79e5feb..08cb905 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,6 @@ ## CHANGELOG: +* v9.2 - Fixed issue with gau tool not working +* v9.2 - Updated python2 to python3 * v9.1 - Fixed issue with dirsearch installation/command syntax update * v9.1 - Updated Nuclei sc0pe templates * v9.1 - Fixed issue with Nuclei sc0pe parsers not working diff --git a/bin/slurp.zip b/bin/slurp.zip deleted file mode 100644 index b6c56e7..0000000 Binary files a/bin/slurp.zip and /dev/null differ diff --git a/conf/bug_bounty_full_brute b/conf/bug_bounty_full_brute index 6cd4f8b..3ba1be0 100644 --- a/conf/bug_bounty_full_brute +++ b/conf/bug_bounty_full_brute @@ -178,7 +178,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_max_javascript_files b/conf/bug_bounty_max_javascript_files index c30cff2..8b8b1fa 100644 --- a/conf/bug_bounty_max_javascript_files +++ b/conf/bug_bounty_max_javascript_files @@ -178,7 +178,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_quick b/conf/bug_bounty_quick index ef08faf..9c63726 100644 --- a/conf/bug_bounty_quick +++ b/conf/bug_bounty_quick @@ -178,7 +178,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_quick_port_80_443_only b/conf/bug_bounty_quick_port_80_443_only index fff8980..19a21a2 100644 --- a/conf/bug_bounty_quick_port_80_443_only +++ b/conf/bug_bounty_quick_port_80_443_only @@ -178,7 +178,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/deep_active_recon b/conf/deep_active_recon index 3821438..d7b5a3f 100644 --- a/conf/deep_active_recon +++ b/conf/deep_active_recon @@ -182,7 +182,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/default b/conf/default index bc34835..74694d1 100644 --- a/conf/default +++ b/conf/default @@ -206,7 +206,7 @@ SMUGGLER="1" WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" -GUA="1" +GAU="1" HACKERTARGET="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/fast_service_portscan b/conf/fast_service_portscan index f120c4f..4de6e66 100644 --- a/conf/fast_service_portscan +++ b/conf/fast_service_portscan @@ -181,7 +181,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/super_stealth_mode b/conf/super_stealth_mode index 6d7c03f..e4cc330 100644 --- a/conf/super_stealth_mode +++ b/conf/super_stealth_mode @@ -177,7 +177,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/super_stealth_mode_OSINT b/conf/super_stealth_mode_OSINT index 1b7192a..5a1ea86 100644 --- a/conf/super_stealth_mode_OSINT +++ b/conf/super_stealth_mode_OSINT @@ -177,7 +177,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/web_mode_all_plugins b/conf/web_mode_all_plugins index 2611335..5db838b 100644 --- a/conf/web_mode_all_plugins +++ b/conf/web_mode_all_plugins @@ -177,7 +177,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/webpwn_only b/conf/webpwn_only index c797e11..894d543 100644 --- a/conf/webpwn_only +++ b/conf/webpwn_only @@ -176,7 +176,7 @@ WAYBACKMACHINE="0" SSL="0" PASSIVE_SPIDER="0" HACKERTARGET="0" -GUA="0" +GAU="0" CUTYCAPT="0" WEBSCREENSHOT="0" diff --git a/conf/webpwn_only_metasploit_disabled b/conf/webpwn_only_metasploit_disabled index bcea8e0..316a229 100644 --- a/conf/webpwn_only_metasploit_disabled +++ b/conf/webpwn_only_metasploit_disabled @@ -176,7 +176,7 @@ WAYBACKMACHINE="0" SSL="0" PASSIVE_SPIDER="0" HACKERTARGET="0" -GUA="0" +GAU="0" CUTYCAPT="0" WEBSCREENSHOT="0" diff --git a/conf/zap_only_webscan b/conf/zap_only_webscan index 7068f15..57599f1 100644 --- a/conf/zap_only_webscan +++ b/conf/zap_only_webscan @@ -182,7 +182,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/install.sh b/install.sh index 09bb9f8..f37a295 100755 --- a/install.sh +++ b/install.sh @@ -285,7 +285,7 @@ go install github.com/harleo/asnip@latest; ln -fs ~/go/bin/asnip /usr/bin/asnip # GAU INSTALLER echo -e "$OKBLUE[*]$RESET Installing GAU...$RESET" -GO111MODULE=on go get github.com/lc/gau@latest +GO111MODULE=on go install github.com/lc/gau@latest rm -f /usr/bin/gau 2> /dev/null ln -fs /root/go/bin/gau /usr/bin/gau 2> /dev/null diff --git a/modes/normal_webporthttp.sh b/modes/normal_webporthttp.sh index 13a29da..e3daf1c 100644 --- a/modes/normal_webporthttp.sh +++ b/modes/normal_webporthttp.sh @@ -24,7 +24,7 @@ wpif [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" diff --git a/modes/normal_webporthttps.sh b/modes/normal_webporthttps.sh index e445ea0..f857ea2 100644 --- a/modes/normal_webporthttps.sh +++ b/modes/normal_webporthttps.sh @@ -24,7 +24,7 @@ if [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" diff --git a/modes/stealth.sh b/modes/stealth.sh index 942cab6..f400f94 100644 --- a/modes/stealth.sh +++ b/modes/stealth.sh @@ -225,7 +225,7 @@ if [[ "$MODE" = "stealth" ]]; then curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 echo " " fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -383,7 +383,7 @@ if [[ "$MODE" = "stealth" ]]; then curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 echo " " fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" diff --git a/modes/webporthttp.sh b/modes/webporthttp.sh index c769f5c..8ed19fe 100644 --- a/modes/webporthttp.sh +++ b/modes/webporthttp.sh @@ -179,7 +179,7 @@ if [[ "$MODE" = "webporthttp" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -325,14 +325,14 @@ if [[ "$MODE" = "webporthttp" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt fi if [[ "$JEXBOSS" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null cd $INSTALL_DIR diff --git a/modes/webporthttps.sh b/modes/webporthttps.sh index 111a8b1..49d6a36 100644 --- a/modes/webporthttps.sh +++ b/modes/webporthttps.sh @@ -195,7 +195,7 @@ if [[ "$MODE" = "webporthttps" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -334,14 +334,14 @@ if [[ "$MODE" = "webporthttps" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt fi if [[ "$JEXBOSS" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null cd $INSTALL_DIR diff --git a/sniper.conf b/sniper.conf index 14a4de6..d667a86 100644 --- a/sniper.conf +++ b/sniper.conf @@ -212,7 +212,7 @@ SMUGGLER="1" WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" -GUA="1" +GAU="1" HACKERTARGET="1" CUTYCAPT="0" WEBSCREENSHOT="1"