diff --git a/CHANGELOG.md b/CHANGELOG.md index 79e5feb..528dd19 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,9 @@ ## CHANGELOG: +* v9.2 - Fixed issue with gau tool not installing and updated GAU setting in confs +* v9.2 - Updated python2 to python3 +* v9.2 - Removed Slurp tool +* v9.2 - Added BlackArch Dockerfile +* v9.2 - Updated DockerFile to latest Kali release * v9.1 - Fixed issue with dirsearch installation/command syntax update * v9.1 - Updated Nuclei sc0pe templates * v9.1 - Fixed issue with Nuclei sc0pe parsers not working diff --git a/README.md b/README.md index 092dbd0..1c6b6e6 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,8 @@ [[Website](https://sn1persecurity.com/wordpress/)] [[Blog](https://sn1persecurity.com/wordpress/blog/)] [[Shop](https://sn1persecurity.com/wordpress/shop)] [[Documentation](https://sn1persecurity.com/wordpress/documentation/)] [[Demo](https://www.youtube.com/c/Sn1perSecurity/videos)] [[Find Out More](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)] -## Attack Surface Management + +## Attack Surface Management Platform ### Discover hidden assets and vulnerabilities in your environment @@ -47,16 +48,16 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News +- #### [Automated Penetration Testing Guide - Your Ultimate Resource](https://sn1persecurity.com/wordpress/penetration-testing-guide/) +- #### [Sn1per Enterprise v20230516 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20230516-released/) +- #### [Dark Web Monitoring: Securing Your External Attack Surface](https://sn1persecurity.com/wordpress/dark-web-monitoring-securing-your-external-attack-surface/) +- #### [Sn1per Scan Engine v10.4 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-4-released/) +- #### [Sn1per: The Next Generation of Tools for Security Professionals](https://sn1persecurity.com/wordpress/sn1per-the-next-generation-of-tools-for-security-professionals/) - #### [Sn1per Scan Engine v10.3 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-3-released/) - - #### [5 Ways Sn1per Can Automate Your Security Workflow](https://sn1persecurity.com/wordpress/5-ways-sn1per-can-automate-your-security-workflow/) - - #### [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/) - - #### [Sn1per Scan Engine v10.2 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-2-update/) - - #### [Sn1per Enterprise Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-released/) - - #### [Sn1per Professional v10.0 Released!](https://sn1persecurity.com/wordpress/sn1per-professional-v10-released/) ## Kali/Ubuntu/Debian/Parrot Linux Install @@ -253,4 +254,4 @@ For license and legal information, refer to the LICENSE.md (. -Attack Surface Management (ASM) | Continuous Attack Surface Testing (CAST) | Attack Surface Software | Attack Surface Platform | Continuous Automated Red Teaming (CART) | Vulnerability & Attack Surface Management | Red Team | Threat Intel | Application Security | Cybersecurity | IT Asset Discovery | Automated Penetration Testing | Hacking Tools | Recon Tool | Bug Bounty Tool | Vulnerability Scanner | Attack Surface Analysis | Attack Surface Reduction | Attack Surface Detector | Attack Surface Monitoring | Attack Surface Review | Attack Surface Discovery | Digital Threat Management | Risk Assessment | Threat Remediation | Offensive Security Framework | Automated Penetration Testing Framework | External Threat Management | Internal IT Asset Discovery | Security Orchestration and Automation (SOAR) | Sn1per tutorial | Sn1per tool | Sn1per metasploit | Sn1per for windows | Sn1per review | Sn1per download | how to use Sn1per | Sn1per professional download | Sn1per professional crack | automated pentesting framework | pentest-tools github | ad pentest tools | pentest-tools review | security testing tools | ubuntu pentesting tools | pentesting tools for mac | cloud-based pen-testing tools +External attack surface management, Attack surface monitoring, Attack Surface Management Platform, Attack Surface Management Solutions, Vulnerability management, Threat intelligence, Cybersecurity risk assessment, Security posture assessment, Digital footprint analysis, Attack surface mapping, Web application security, Network security, Infrastructure security, Cloud security, Third-party risk management, Incident response, Penetration testing, Asset discovery, Patch management, Security scanning, Firewall configuration, Intrusion detection system, Security awareness training, Data breach prevention, Web server security, Endpoint security, Phishing protection, Vulnerability assessment, Network security, Web application testing, Ethical hacking, Security assessment, Information security, Red teaming, Cybersecurity testing, Pen testing tools, Exploitation techniques, Wireless network testing, Social engineering, Security auditing, Incident response, Intrusion detection, Firewall testing, Security assessment methodology, Risk assessment, Security controls, Web vulnerability scanning, Password cracking, Security testing services, Security architecture, System hardening, Network reconnaissance, Red teaming, Penetration testing, Cybersecurity, Vulnerability assessment, Attack simulation, Threat intelligence, Risk assessment, Security testing, Adversarial tactics, Incident response, Security assessment, Network security, Defensive measures, Security controls, Social engineering, Exploitation techniques, Security awareness, Defensive strategies, Risk mitigation, Blue teaming, Security operations, Intrusion detection, Security frameworks, Cyber defense, Information security diff --git a/bin/slurp.zip b/bin/slurp.zip deleted file mode 100644 index b6c56e7..0000000 Binary files a/bin/slurp.zip and /dev/null differ diff --git a/conf/bug_bounty_full_brute b/conf/bug_bounty_full_brute index 6cd4f8b..ea61c82 100644 --- a/conf/bug_bounty_full_brute +++ b/conf/bug_bounty_full_brute @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -178,7 +183,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_max_javascript_files b/conf/bug_bounty_max_javascript_files index c30cff2..941c040 100644 --- a/conf/bug_bounty_max_javascript_files +++ b/conf/bug_bounty_max_javascript_files @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -178,7 +183,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_quick b/conf/bug_bounty_quick index ef08faf..dfa3df7 100644 --- a/conf/bug_bounty_quick +++ b/conf/bug_bounty_quick @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -178,7 +183,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/bug_bounty_quick_port_80_443_only b/conf/bug_bounty_quick_port_80_443_only index fff8980..7302288 100644 --- a/conf/bug_bounty_quick_port_80_443_only +++ b/conf/bug_bounty_quick_port_80_443_only @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -178,7 +183,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/deep_active_recon b/conf/deep_active_recon index 3821438..66198e9 100644 --- a/conf/deep_active_recon +++ b/conf/deep_active_recon @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -142,6 +146,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="1" +TOMBAIO="1" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -182,7 +187,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/default b/conf/default index bc34835..f725fb5 100644 --- a/conf/default +++ b/conf/default @@ -64,6 +64,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -168,6 +172,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="0" +TOMBAIO="0" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -180,7 +185,7 @@ URLSCANIO="1" # DYNAMIC APPLICATION SCANNERS BURP_SCAN="0" ARACHNI_SCAN="0" -ZAP_SCAN="0" +ZAP_SCAN="1" # ACTIVE WEB PLUGINS SC0PE_VULNERABLITY_SCANNER="1" @@ -206,7 +211,7 @@ SMUGGLER="1" WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" -GUA="1" +GAU="1" HACKERTARGET="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/fast_service_portscan b/conf/fast_service_portscan index f120c4f..eeb8e14 100644 --- a/conf/fast_service_portscan +++ b/conf/fast_service_portscan @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -142,6 +146,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="1" +TOMBAIO="1" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -181,7 +186,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/super_stealth_mode b/conf/super_stealth_mode index 6d7c03f..810758a 100644 --- a/conf/super_stealth_mode +++ b/conf/super_stealth_mode @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -177,7 +182,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/super_stealth_mode_OSINT b/conf/super_stealth_mode_OSINT index 1b7192a..7682a51 100644 --- a/conf/super_stealth_mode_OSINT +++ b/conf/super_stealth_mode_OSINT @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="1" +TOMBAIO="1" INTODNS="0" EMAILFORMAT="1" ULTRATOOLS="1" @@ -177,7 +182,7 @@ WAYBACKMACHINE="1" SSL="0" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/web_mode_all_plugins b/conf/web_mode_all_plugins index 2611335..4049b01 100644 --- a/conf/web_mode_all_plugins +++ b/conf/web_mode_all_plugins @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="1" +TOMBAIO="1" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -177,7 +182,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/conf/webpwn_only b/conf/webpwn_only index c797e11..a6e4bfe 100644 --- a/conf/webpwn_only +++ b/conf/webpwn_only @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="0" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -176,7 +181,7 @@ WAYBACKMACHINE="0" SSL="0" PASSIVE_SPIDER="0" HACKERTARGET="0" -GUA="0" +GAU="0" CUTYCAPT="0" WEBSCREENSHOT="0" diff --git a/conf/webpwn_only_metasploit_disabled b/conf/webpwn_only_metasploit_disabled index bcea8e0..7593336 100644 --- a/conf/webpwn_only_metasploit_disabled +++ b/conf/webpwn_only_metasploit_disabled @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -138,6 +142,7 @@ INURLBR="0" THEHARVESTER="0" METAGOOFIL="0" HUNTERIO="0" +TOMBAIO="0" INTODNS="0" EMAILFORMAT="0" ULTRATOOLS="0" @@ -176,7 +181,7 @@ WAYBACKMACHINE="0" SSL="0" PASSIVE_SPIDER="0" HACKERTARGET="0" -GUA="0" +GAU="0" CUTYCAPT="0" WEBSCREENSHOT="0" diff --git a/conf/zap_only_webscan b/conf/zap_only_webscan index 7068f15..c4daa13 100644 --- a/conf/zap_only_webscan +++ b/conf/zap_only_webscan @@ -55,6 +55,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -142,6 +146,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="1" +TOMBAIO="1" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -182,7 +187,7 @@ WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" HACKERTARGET="1" -GUA="1" +GAU="1" CUTYCAPT="0" WEBSCREENSHOT="1" diff --git a/install.sh b/install.sh index 09bb9f8..f37a295 100755 --- a/install.sh +++ b/install.sh @@ -285,7 +285,7 @@ go install github.com/harleo/asnip@latest; ln -fs ~/go/bin/asnip /usr/bin/asnip # GAU INSTALLER echo -e "$OKBLUE[*]$RESET Installing GAU...$RESET" -GO111MODULE=on go get github.com/lc/gau@latest +GO111MODULE=on go install github.com/lc/gau@latest rm -f /usr/bin/gau 2> /dev/null ln -fs /root/go/bin/gau /usr/bin/gau 2> /dev/null diff --git a/modes/normal.sh b/modes/normal.sh index e269b5a..43e2e8f 100644 --- a/modes/normal.sh +++ b/modes/normal.sh @@ -258,7 +258,7 @@ else echo -e "$OKRED RUNNING SSH AUDIT $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd $PLUGINS_DIR/ssh-audit - python ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt + python3 ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt fi fi cd $INSTALL_DIR @@ -511,7 +511,7 @@ else echo -e "$OKRED RUNNING SMB ENUMERATION $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port139.txt - python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt + python3 $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port139.txt fi if [[ "$NMAP_SCRIPTS" = "1" ]]; then @@ -616,7 +616,7 @@ else echo -e "$OKRED ENUMERATING SMB/NETBIOS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port445.txt - python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt + python3 $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port445.txt fi if [[ "$NMAP_SCRIPTS" = "1" ]]; then @@ -1256,4 +1256,4 @@ if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then fi if [[ "$LOOT" = "1" ]] && [[ -z "$NOLOOT" ]]; then loot -fi \ No newline at end of file +fi diff --git a/modes/normal_webporthttp.sh b/modes/normal_webporthttp.sh index abfd52b..e3daf1c 100644 --- a/modes/normal_webporthttp.sh +++ b/modes/normal_webporthttp.sh @@ -24,7 +24,7 @@ wpif [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -166,14 +166,14 @@ wpif [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt fi if [[ "$JEXBOSS" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port80.raw > $LOOT_DIR/web/jexboss-$TARGET-port80.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port80.raw 2> /dev/null cd $INSTALL_DIR @@ -197,4 +197,4 @@ wpif [[ "$MODE" = "web" ]]; then if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per HTTP web scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" fi -fi \ No newline at end of file +fi diff --git a/modes/normal_webporthttps.sh b/modes/normal_webporthttps.sh index 7c431cf..f857ea2 100644 --- a/modes/normal_webporthttps.sh +++ b/modes/normal_webporthttps.sh @@ -24,7 +24,7 @@ if [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -163,14 +163,14 @@ if [[ "$MODE" = "web" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt fi if [[ "$JEXBOSS" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port443.raw > $LOOT_DIR/web/jexboss-$TARGET-port443.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port443.raw 2> /dev/null cd $INSTALL_DIR @@ -193,4 +193,4 @@ if [[ "$MODE" = "web" ]]; then if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per HTTPS web scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" fi -fi \ No newline at end of file +fi diff --git a/modes/osint.sh b/modes/osint.sh index dfe16ac..7cde7cd 100644 --- a/modes/osint.sh +++ b/modes/osint.sh @@ -76,7 +76,7 @@ if [[ "$OSINT" = "1" ]]; then echo -e "$OKRED COLLECTING OSINT FROM ONLINE DOCUMENTS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd $INSTALL_DIR/plugins/metagoofil/ - python metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null + python3 metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null cd $INSTALL_DIR if [[ "$SLACK_NOTIFICATIONS_METAGOOFIL" == "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/osint/metagoofil-$TARGET.txt" @@ -94,6 +94,12 @@ if [[ "$OSINT" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s "https://api.hunter.io/v2/domain-search?domain=$TARGET&api_key=$HUNTERIO_KEY" | egrep "name|value|domain|company|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/hunterio-$TARGET.txt 2> /dev/null fi + if [[ "$TOMBAIO" == "1" ]]; then + echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" + echo -e "$OKRED GATHERING EMAILS VIA TOMBA.IO $RESET" + echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" + curl -H "X-Tomba-Key: $TOMBAIO_KEY" -H "X-Tomba-Secret: $TOMBAIO_SECRET" -s "https://api.tomba.io/v1/domain-search?domain=$TARGET" | egrep "email|organization|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/tombaio$TARGET.txt 2> /dev/null + fi if [[ "$METASPLOIT_EXPLOIT" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED GATHERING EMAILS VIA METASPLOIT $RESET" diff --git a/modes/recon.sh b/modes/recon.sh index a2ec23b..473d6bf 100644 --- a/modes/recon.sh +++ b/modes/recon.sh @@ -11,7 +11,7 @@ if [[ "$RECON" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED GATHERING DNS SUBDOMAINS VIA SUBLIST3R $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null + python3 /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null sed -ie 's/
/\n/g' domains-$TARGET-full.txt 2> /dev/null mv -f $LOOT_DIR/domains/domains-$TARGET.txte $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null wc -l $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null @@ -77,7 +77,7 @@ if [[ "$RECON" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED GATHERING CENSYS SUBDOMAINS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null + python3 $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null wc -l $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null fi if [[ "$SHODAN" = "1" ]]; then @@ -129,7 +129,7 @@ if [[ "$RECON" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED GATHERING SUBBRUTE SUBDOMAINS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null + python3 "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null wc -l $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null fi if [[ "$ALT_DNS" = "1" ]]; then @@ -231,16 +231,6 @@ if [[ "$RECON" = "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/subjack_new-$TARGET.txt" fi fi - if [[ "$SLURP" = "1" ]]; then - echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - echo -e "$OKRED STARTING PUBLIC S3 BUCKET SCAN $RESET" - echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - cd $PLUGINS_DIR/slurp/ - ./slurp-linux-amd64 domain --domain $TARGET | tee $LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt 2>/dev/null - if [[ "$SLACK_NOTIFICATIONS_S3_BUCKETS" == "1" ]]; then - /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt" - fi - fi if [[ "$ASN_CHECK" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RETRIEVING ASN INFO $RESET" @@ -270,4 +260,4 @@ if [[ "$RECON" = "1" ]]; then if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per scan: $TARGET [recon] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" fi -fi \ No newline at end of file +fi diff --git a/modes/stealth.sh b/modes/stealth.sh index 942cab6..f400f94 100644 --- a/modes/stealth.sh +++ b/modes/stealth.sh @@ -225,7 +225,7 @@ if [[ "$MODE" = "stealth" ]]; then curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 echo " " fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -383,7 +383,7 @@ if [[ "$MODE" = "stealth" ]]; then curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 echo " " fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" diff --git a/modes/webporthttp.sh b/modes/webporthttp.sh index c769f5c..8ed19fe 100644 --- a/modes/webporthttp.sh +++ b/modes/webporthttp.sh @@ -179,7 +179,7 @@ if [[ "$MODE" = "webporthttp" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -325,14 +325,14 @@ if [[ "$MODE" = "webporthttp" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt fi if [[ "$JEXBOSS" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null cd $INSTALL_DIR diff --git a/modes/webporthttps.sh b/modes/webporthttps.sh index 111a8b1..49d6a36 100644 --- a/modes/webporthttps.sh +++ b/modes/webporthttps.sh @@ -195,7 +195,7 @@ if [[ "$MODE" = "webporthttps" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250 fi - if [[ "$GUA" == "1" ]]; then + if [[ "$GAU" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -334,14 +334,14 @@ if [[ "$MODE" = "webporthttps" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt + python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt fi if [[ "$JEXBOSS" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING JEXBOSS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" cd /tmp/ - python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw + python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null cd $INSTALL_DIR diff --git a/sniper b/sniper index 6892d83..0d3b792 100755 --- a/sniper +++ b/sniper @@ -604,7 +604,23 @@ function loot { source $INSTALL_DIR/pro.sh fi else - echo -e "$OKRED + -- --=[ Sn1per Professional is not installed. To download Sn1per Professional, go to https://sn1persecurity.com. $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET ⚡ Upgrade to Sn1per Professional and unlock a world of powerful benefits! 🚀 $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.4 ${RESET}) offers unparalleled features, including: $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💻 Sleek Web UI $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛠️ Extensive add-ons $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔄 Seamless integrations $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🤝 Experience priority support, continuous updates, and enhanced capabilities tailored for professionals like you. $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💰 Maximize your investment and achieve exceptional results with Sn1per Professional. $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔍 Learn more about the differences between the versions at: ${OKBLUE}https://sn1persecurity.com/wordpress/sn1per-community-vs-professional-whats-the-difference/ $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛒 Purchase your Sn1per Professional license now at: ${OKBLUE}https://sn1persecurity.com/ $RESET" sudo $LAST_USER -c $BROWSER https://sn1persecurity.com 2> /dev/null > /dev/null & fi rm -f $UPDATED_TARGETS 2> /dev/null diff --git a/sniper.conf b/sniper.conf index 14a4de6..59fb0d2 100644 --- a/sniper.conf +++ b/sniper.conf @@ -66,6 +66,10 @@ CENSYS_API_SECRET="" # HUNTER.IO API KEY HUNTERIO_KEY="" +# TOMBA.IO API +TOMBAIO_KEY="" +TOMBAIO_SECRET="" + # GITHUB API KEY GITHUB_API_KEY="" @@ -173,6 +177,7 @@ INURLBR="1" THEHARVESTER="1" METAGOOFIL="1" HUNTERIO="0" +TOMBAIO="0" INTODNS="1" EMAILFORMAT="1" ULTRATOOLS="1" @@ -212,7 +217,7 @@ SMUGGLER="1" WAYBACKMACHINE="1" SSL="1" PASSIVE_SPIDER="1" -GUA="1" +GAU="1" HACKERTARGET="1" CUTYCAPT="0" WEBSCREENSHOT="1"