diff --git a/modes/sc0pe-passive-webscan.sh b/modes/sc0pe-passive-webscan.sh index bb8af7b..93b3ca3 100644 --- a/modes/sc0pe-passive-webscan.sh +++ b/modes/sc0pe-passive-webscan.sh @@ -28,3 +28,7 @@ fi rm -f /tmp/match.out 2> /dev/null done + + for file in `ls $INSTALL_DIR/templates/passive/web/recursive/*.sh 2> /dev/null`; do + source $file + done diff --git a/modes/webscan.sh b/modes/webscan.sh index 802c822..45244dc 100644 --- a/modes/webscan.sh +++ b/modes/webscan.sh @@ -140,9 +140,6 @@ if [[ "$MODE" = "webscan" ]]; then PORT="443" source $INSTALL_DIR/modes/sc0pe-passive-webscan.sh source $INSTALL_DIR/modes/sc0pe-active-webscan.sh - for file in `ls $INSTALL_DIR/templates/passive/web/recursive/*.sh 2> /dev/null`; do - source $file - done source $INSTALL_DIR/modes/sc0pe-network-scan.sh fi source $INSTALL_DIR/modes/sc0pe.sh diff --git a/templates/passive/recursive/Interesting_Ports_Found.sh b/templates/passive/recursive/Interesting_Ports_Found.sh deleted file mode 100644 index 38b3f32..0000000 --- a/templates/passive/recursive/Interesting_Ports_Found.sh +++ /dev/null @@ -1,21 +0,0 @@ -AUTHOR='@xer0dayz' -VULN_NAME='Interesting Ports Found' -FILENAME="$LOOT_DIR/nmap/ports-$TARGET.txt" -MATCH='80|443' -SEVERITY='P5 - INFO' -GREP_OPTIONS='-iv' -SEARCH='positive' -SECONDARY_COMMANDS='' - -rm -f /tmp/match.out 2> /dev/null - -for line in `cat $FILENAME 2> /dev/null`; do - echo $line - OUTPUT_NAME=$(echo $VULN_NAME | sed -E 's/[^[:alnum:]]+/_/g') - if [[ "$SEARCH" == "negative" ]]; then - cat $FILENAME 2> /dev/null | egrep $GREP_OPTIONS "$MATCH" $SECONDARY_COMMANDS 2> /dev/null >/tmp/match.out || echo "[+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/ /dev/null && /bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out) (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" && echo "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/> $LOOT_DIR/scans/notifications.txt || rm -f "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null - else - cat $FILENAME 2> /dev/null | egrep $GREP_OPTIONS "$MATCH" $SECONDARY_COMMANDS 2> /dev/null >/tmp/match.out && echo "[+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/ /dev/null && /bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out) (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" && echo "[xerosecurity.com] •?((¯°·._.• [+] [$SEVERITY] $VULN_NAME - URL: https://$TARGET:$PORT/$URI - EVIDENCE: $(head -n 1 /tmp/match.out | sed -r "s/> $LOOT_DIR/scans/notifications.txt || rm -f "$LOOT_DIR/vulnerabilities/sc0pe-$TARGET-https-$OUTPUT_NAME.txt" 2> /dev/null - fi - rm -f /tmp/match.out 2> /dev/null -done \ No newline at end of file diff --git a/templates/passive/web/recursive/Nikto_Vulnerability_Scan-HTTP.sh b/templates/passive/web/recursive/Nikto_Vulnerability_Scan-HTTP.sh index 69e7fc6..1e6b15a 100644 --- a/templates/passive/web/recursive/Nikto_Vulnerability_Scan-HTTP.sh +++ b/templates/passive/web/recursive/Nikto_Vulnerability_Scan-HTTP.sh @@ -1,6 +1,6 @@ AUTHOR='@xer0dayz' VULN_NAME='Nikto Vulnerability Scan - HTTP' -FILENAME="$LOOT_DIR/web/nikto-$TARGET-http-port443.txt" +FILENAME="$LOOT_DIR/web/nikto-$TARGET-http-port80.txt" OUTPUT_NAME=$(echo $VULN_NAME | sed -E 's/[^[:alnum:]]+/_/g') MATCH="\+" GREP_OPTIONS='-ih'