diff --git a/README.md b/README.md index 32b40eb..3989ab2 100644 --- a/README.md +++ b/README.md @@ -1,12 +1,35 @@ -![alt tag](https://github.com/1N3/Sn1per/blob/master/Sn1per.gif) +![alt tag](https://github.com/1N3/Sn1per/blob/master/Sn1per.jpg) + +[![GitHub release](https://img.shields.io/github/release/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/releases) +[![GitHub issues](https://img.shields.io/github/issues/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/issues) +[![Github Stars](https://img.shields.io/github/stars/1N3/Sn1per.svg?style=social&label=Stars)](https://github.com/1N3/Sn1per/) +[![GitHub Followers](https://img.shields.io/github/followers/1N3.svg?style=social&label=Follow)](https://github.com/1N3/Sn1per/) +[![Tweet](https://img.shields.io/twitter/url/http/crowdshield.svg?style=social)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fdeveloper.twitter.com%2Fen%2Fdocs%2Ftwitter-for-websites%2Ftweet-button%2Foverview&ref_src=twsrc%5Etfw&text=Sn1per%20-%20Automated%20Pentest%20Recon%20Scanner&tw_p=tweetbutton&url=https%3A%2F%2Fgithub.com%2F1N3%2FSn1per) +[![Follow on Twitter](https://img.shields.io/twitter/follow/crowdshield.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=crowdshield) ## ABOUT: -Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. +Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage large environments and pentest scopes. For more information regarding Sn1per Professional, go to https://xerosecurity.com. + +## SN1PER PROFESSIONAL FEATURES: +### Professional reporting interface +### Slideshow for all gathered screenshots +![](https://xerosecurity.com/images/sn1per-pro4.png) +### Searchable and sortable DNS, IP and open port database +![](https://xerosecurity.com/images/Sn1per-pro11.png) +### Categorized host reports +![](https://xerosecurity.com/images/Sn1per-pro8.png) +### Quick links to online recon tools and Google hacking queries +![](https://xerosecurity.com/images/sn1per-pro5.png) +### Personalized notes field for each host +![](https://xerosecurity.com/images/sn1per-pro13.png) + +## ORDER SN1PER PROFESSIONAL: +To obtain a Sn1per Professional license, go to https://xerosecurity.com. ## DEMO VIDEO: [![Demo](https://asciinema.org/a/IDckE48BNSWQ8TV8yEjJjjMNm.png)](https://asciinema.org/a/IDckE48BNSWQ8TV8yEjJjjMNm) -## FEATURES: +## SN1PER COMMUNITY FEATURES: - [x] Automatically collects basic recon (ie. whois, ping, DNS, etc.) - [x] Automatically launches Google hacking queries against a target domain - [x] Automatically enumerates open ports via NMap port scanning @@ -35,7 +58,7 @@ Sn1per is an automated scanner that can be used during a penetration test to enu - [x] Apache Struts CVE-2018-11776 RCE exploit - [x] Android Insecure ADB RCE auto exploit - [x] Apache Tomcat CVE-2017-12617 RCE exploit -- [x] Oracle WebLogic WLS-WSAT Component Deserialisation RCE CVE-2017-10271 MSF exploit +- [x] Oracle WebLogic WLS-WSAT Component Deserialisation RCE CVE-2017-10271 exploit - [x] Drupal Drupalgedon2 RCE CVE-2018-7600 - [x] GPON Router RCE CVE-2018-10561 - [x] Apache Struts 2 RCE CVE-2017-5638 @@ -129,17 +152,14 @@ sniper -u|--update ### MODES: * **NORMAL:** Performs basic scan of targets and open ports using both active and passive checks for optimal performance. * **STEALTH:** Quickly enumerate single targets using mostly non-intrusive scans to avoid WAF/IPS blocking. -* **FLYOVER:** Quick multi-threaded high level recon scanner for multiple hosts. * **AIRSTRIKE:** Quickly enumerates open ports/services on multiple hosts and performs basic fingerprinting. To use, specify the full location of the file which contains all hosts, IPs that need to be scanned and run ./sn1per /full/path/to/targets.txt airstrike to begin scanning. * **NUKE:** Launch full audit of multiple hosts specified in text file of choice. Usage example: ./sniper /pentest/loot/targets.txt nuke. * **DISCOVER:** Parses all hosts on a subnet/CIDR (ie. 192.168.0.0/16) and initiates a sniper scan against each host. Useful for internal network scans. * **PORT:** Scans a specific port for vulnerabilities. Reporting is not currently available in this mode. * **FULLPORTONLY:** Performs a full detailed port scan and saves results to XML. -* **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly. +* **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly. * **WEBPORTHTTP:** Launches a full HTTP web application scan against a specific host and port. * **WEBPORTHTTPS:** Launches a full HTTPS web application scan against a specific host and port. -* **UPDATE:** Checks for updates and upgrades all components used by sniper. -* **REIMPORT:** Reimport all workspace files into Metasploit and reproduce all reports. ## SAMPLE REPORT: https://gist.github.com/1N3/8214ec2da2c91691bcbc