* v8.7 - Updated web file bruteforce lists

* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers

modes/sc0pe-passive-webscan.sh

@@ -28,3 +28,7 @@
                   fi
                   rm -f /tmp/match.out 2> /dev/null
             done
+
+            for file in `ls $INSTALL_DIR/templates/passive/web/recursive/*.sh 2> /dev/null`; do
+              source $file
+            done

modes/webscan.sh

@@ -140,9 +140,6 @@ if [[ "$MODE" = "webscan" ]]; then
 	    PORT="443"
 	    source $INSTALL_DIR/modes/sc0pe-passive-webscan.sh
 	    source $INSTALL_DIR/modes/sc0pe-active-webscan.sh
-	    for file in `ls $INSTALL_DIR/templates/passive/web/recursive/*.sh 2> /dev/null`; do
-          source $file
-        done
 	    source $INSTALL_DIR/modes/sc0pe-network-scan.sh
 	fi
 	source $INSTALL_DIR/modes/sc0pe.sh 

templates/passive/recursive/Interesting_Ports_Found.sh

@@ -1,21 +0,0 @@
-AUTHOR='@xer0dayz'
-VULN_NAME='Interesting Ports Found'
-FILENAME="$LOOT_DIR/nmap/ports-$TARGET.txt"
-MATCH='80|443'
-SEVERITY='P5 - INFO'
-GREP_OPTIONS='-iv'
-SEARCH='positive'
-SECONDARY_COMMANDS=''
-
-rm -f /tmp/match.out 2> /dev/null
-
-for line in `cat $FILENAME 2> /dev/null`; do
-	echo $line
-	OUTPUT_NAME=$(echo $VULN_NAME | sed -E 's/[^[:alnum:]]+/_/g')
-	if [[ "$SEARCH" == "negative" ]]; then
-        cat $FILENAME 2> /dev/null | egrep $GREP_OPTIONS "$MATCH" $SECONDARY_COMMANDS 2> /dev/null >/tmp/match.out || echo "[+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/</\&lh\;/g")" | tee "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null && /bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out) (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" && echo "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/</\&lh\;/g") (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" >> $LOOT_DIR/scans/notifications.txt || rm -f "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null 
-	else
-        cat $FILENAME 2> /dev/null | egrep $GREP_OPTIONS "$MATCH" $SECONDARY_COMMANDS 2> /dev/null >/tmp/match.out && echo "[+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/</\&lh\;/g")" | tee "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null && /bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out) (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" && echo "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/</\&lh\;/g") (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" >> $LOOT_DIR/scans/notifications.txt || rm -f "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null 
-	fi
-	rm -f /tmp/match.out 2> /dev/null
-done

templates/passive/web/recursive/Nikto_Vulnerability_Scan-HTTP.sh

@@ -1,6 +1,6 @@
 AUTHOR='@xer0dayz'
 VULN_NAME='Nikto Vulnerability Scan - HTTP'
-FILENAME="$LOOT_DIR/web/nikto-$TARGET-http-port443.txt"
+FILENAME="$LOOT_DIR/web/nikto-$TARGET-http-port80.txt"
 OUTPUT_NAME=$(echo $VULN_NAME | sed -E 's/[^[:alnum:]]+/_/g')
 MATCH="\+"
 GREP_OPTIONS='-ih'