Sn1per by 1N3 @CrowdShield

This commit is contained in:
root 2016-05-14 10:29:45 -07:00
parent c4c18bda88
commit 6278f9627a
2 changed files with 12 additions and 18 deletions

View File

@ -48,6 +48,7 @@ https://gist.github.com/1N3/8214ec2da2c91691bcbc
```
## CHANGELOG:
* v1.7b - Improved passive recon performance
* v1.7a - Improved NMap http scan performance
* v1.7a - Removed joomscan due to verbosity issues
* v1.7 - Added uniscan web vulnerability scanner
@ -111,4 +112,5 @@ https://gist.github.com/1N3/8214ec2da2c91691bcbc
* v1.4 - Removed debug output from goohak from displaying on console
## FUTURE:
* Look into HTML reporting options
* Add install.sh for Ubuntu based systems
* Add install path to install.sh for universal access

26
sniper
View File

@ -141,24 +141,22 @@ if [ "$MODE" = "stealth" ]; then
echo -e "$OKGREEN + -- --=[Launching stealth scan: $TARGET $RESET"
echo -e "$OKGREEN $RESET"
echo -e "$OKGREEN################################### Running recon #################################$RESET"
echo -e "$OKGREEN+ -- --=[Running nslookup...$RESET"
nslookup $TARGET
echo -e "$OKGREEN+ -- --=[Running host lookup...$RESET"
host $TARGET
if [ $SCAN_TYPE == "DOMAIN" ];
then
dig -x $TARGET
whois $TARGET
theharvester -d $TARGET -l 200 -b all -v -t 2> /dev/null
dnsrecon -d $TARGET
dnsrecon -d $TARGET -t zonewalk
dnsrecon -d $TARGET -t axfr
dnsenum $TARGET -f BruteX/wordlists/namelist.txt
theharvester -d $TARGET -l 100 -b all 2> /dev/null
dnsenum $TARGET
mv -f *_ips.txt loot/ 2>/dev/null
python Sublist3r/sublist3r.py -d $TARGET -vvv 2>/dev/null
fi
echo ""
echo -e "$OKGREEN################################### Running passive scans #########################$RESET"
unicornscan $TARGET:21,22,23,25,53,79,80,110,111,135,139,162,389,443,445,512,513,514,1099,1524,2049,2121,3306,3389,3632,5432,5800,5900,6667,8000,8009,8080,8180,8443,10000,49152 2> /dev/null
xprobe2 $TARGET
wafw00f http://$TARGET
whatweb http://$TARGET
xsstracer $TARGET 80
@ -225,11 +223,8 @@ if [ "$MODE" = "airstrike" ]; then
then
dig -x $a
whois $a
theharvester -d $a -l 200 -b all -v -t 2> /dev/null
dnsrecon -d $a
dnsrecon -d $a -t zonewalk
dnsrecon -d $a -t axfr
dnsenum $a -f BruteX/wordlists/namelist.txt
theharvester -d $a -l 100 -b all 2> /dev/null
dnsenum $a
mv -f *_ips.txt loot/ 2>/dev/null
python Sublist3r/sublist3r.py -d $a -vvv 2>/dev/null
fi
@ -299,11 +294,8 @@ if [ $SCAN_TYPE == "DOMAIN" ];
then
dig -x $TARGET
whois $TARGET
theharvester -d $TARGET -l 200 -b all -v -t 2> /dev/null
dnsrecon -d $TARGET
dnsrecon -d $TARGET -t zonewalk
dnsrecon -d $TARGET -t axfr
dnsenum $TARGET -f BruteX/wordlists/namelist.txt
theharvester -d $TARGET -l 100 -b all 2> /dev/null
dnsenum $TARGET
mv -f *_ips.txt loot/ 2>/dev/null
python Sublist3r/sublist3r.py -d $TARGET -vvv 2>/dev/null
fi
@ -324,7 +316,7 @@ else
nmap -sU -T5 -p U:$OPT1 --open $TARGET
fi
service postgresql start 2> /dev/null
service postgresql start
echo ""
echo -e "$OKGREEN################################### Running Intrusive Scans ########################$RESET"