From caaa62ad5bd826b9cc77f1b452dd128e933e40ba Mon Sep 17 00:00:00 2001 From: WP Engine Marketing Date: Sun, 23 Dec 2018 11:52:04 -0700 Subject: [PATCH] Sn1per Community Edition by @xer0dayz - https://xerosecurity.com --- CHANGELOG.md | 13 +++++++++++++ install.sh | 16 ++++++++-------- modes/normal_webporthttp.sh | 4 ++-- modes/normal_webporthttps.sh | 4 ++-- modes/webporthttp.sh | 4 ++-- modes/webporthttps.sh | 4 ++-- sniper.conf | 1 - 7 files changed, 29 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b27f64e..327a0c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,19 @@ ## CHANGELOG: +* v6.1 - Added automated web scanning via Burpsuite Pro 2.x API for all 'web' mode scans +* v6.1 - Added Waybackmachine URL retrieval to all web scans +* v6.1 - Added Elasticsearch Kibana Console LFI CVE-2018-17246 vuln check +* v6.1 - Added 4 levels of brute forcing to all web mode scans +* v6.1 - Added configurable options for ALL scan plugins and options in Sn1per +* v6.1 - Added logging for ALL tools and exploits +* v6.1 - Added NMap latest Github repo to install.sh to fix issue with LUA libs +* v6.1 - Fixed issue with CMSMap install/usage +* v6.1 - Fixed issue with WPScan gem dependency missing (public_suffix) * v6.1 - Fixed timeout setting in cutycapt +* v6.1 - Fixed script errors with CVE-2018-15473 sshUsernameEnumExploit.py * v6.1 - Improved SSLyze scan options +* v6.1 - Removed http-vuln-cve2017-5638.nse script due to outdated NMap libs +* v6.1 - Removed serializekiller plugin from install.sh +* v6.1 - Removed cansina plugin from install.sh * v6.1 - Fixed issue with Amass not running due to invalid command line options in latest release * v6.0 - Improved scan options for discover mode scans * v6.0 - Fixed issue with pip3 dependency package missing diff --git a/install.sh b/install.sh index e10c8c1..33c803d 100755 --- a/install.sh +++ b/install.sh @@ -40,6 +40,7 @@ cd $INSTALL_DIR echo -e "$OKORANGE + -- --=[Installing package dependencies...$RESET" apt-get install python3-uritools python3-paramiko nfs-common eyewitness nodejs wafw00f xdg-utils metagoofil clusterd ruby rubygems python dos2unix zenmap sslyze arachni aha libxml2-utils rpcbind uniscan xprobe2 cutycapt host whois dirb dnsrecon curl nmap php php-curl hydra wpscan sqlmap nbtscan enum4linux cisco-torch metasploit-framework theharvester dnsenum nikto smtp-user-enum whatweb sslscan amap jq golang adb xsltproc apt-get install waffit 2> /dev/null +apt-get install libssl-dev 2> /dev/null apt-get remove python3-pip apt-get install python3-pip pip install dnspython colorama tldextract urllib3 ipaddress requests @@ -49,9 +50,9 @@ echo -e "$OKORANGE + -- --=[Installing gem dependencies...$RESET" gem install aquatone gem install rake gem install ruby-nmap net-http-persistent mechanize text-table +gem install public_suffix -echo -e "$OKORANGE + -- --=[Setting ruby...$RESET" - +echo -e "$OKORANGE + -- --=[Setting up Ruby...$RESET" dpkg-reconfigure ruby echo -e "$OKORANGE + -- --=[Cleaning up old extensions...$RESET" @@ -59,7 +60,7 @@ rm -Rf $PLUGINS_DIR 2> /dev/null mkdir $PLUGINS_DIR 2> /dev/null cd $PLUGINS_DIR mkdir -p $PLUGINS_DIR/nmap_scripts/ 2> /dev/null -mkdir -p $GO_DIR +mkdir -p $GO_DIR 2> /dev/null echo -e "$OKORANGE + -- --=[Downloading extensions...$RESET" git clone https://github.com/1N3/Findsploit.git @@ -74,19 +75,18 @@ cp /usr/share/sniper/plugins/BlackWidow/injectx.py /usr/bin/injectx.py pip install -r /usr/share/sniper/plugins/BlackWidow/requirements.txt git clone https://github.com/Dionach/CMSmap.git git clone https://github.com/0xsauby/yasuo.git -git clone https://github.com/johndekroon/serializekiller.git git clone https://github.com/aboul3la/Sublist3r.git git clone https://github.com/nccgroup/shocker.git git clone --depth 1 https://github.com/drwetter/testssl.sh.git git clone https://github.com/BishopFox/spoofcheck.git git clone https://github.com/arthepsy/ssh-audit -git clone https://github.com/deibit/cansina git clone https://github.com/1N3/jexboss.git git clone https://github.com/maurosoria/dirsearch.git git clone https://github.com/jekyc/wig.git git clone https://github.com/rbsec/dnscan.git +git clone https://github.com/nmap/nmap.git pip3 install -r $PLUGINS_DIR/dnscan/requirements.txt -git clone https://github.com/Rhynorater/CVE-2018-15473-Exploit.git ssh-enum +git clone https://github.com/1N3/CVE-2018-15473-Exploit.git ssh-enum git clone https://github.com/leapsecurity/libssh-scanner.git pip install -r $PLUGINS_DIR/libssh-scanner/requirements.txt mv $INSTALL_DIR/bin/slurp.zip $PLUGINS_DIR @@ -97,8 +97,6 @@ cd ~/go/bin;go get -u github.com/OWASP/Amass/cmd/amass; mv amass /usr/local/bin/ cd ~/go/bin;go get -u github.com/subfinder/subfinder; mv subfinder /usr/local/bin/subfinder cd $PLUGINS_DIR wget https://github.com/michenriksen/aquatone/blob/master/subdomains.lst -O /usr/share/sniper/plugins/Sublist3r/subdomains.lst -wget https://raw.githubusercontent.com/1N3/IntruderPayloads/master/FuzzLists/dirbuster-quick.txt -O /usr/share/sniper/plugins/cansina/dirbuster-quick.txt -wget https://svn.nmap.org/nmap/scripts/http-vuln-cve2017-5638.nse -O /usr/share/nmap/scripts/http-vuln-cve2017-5638.nse wget https://raw.githubusercontent.com/xorrbit/nmap/865142904566e416944ebd6870d496c730934965/scripts/http-vuln-INTEL-SA-00075.nse -O /usr/share/nmap/scripts/http-vuln-INTEL-SA-00075.nse wget https://raw.githubusercontent.com/f3d0x0/GPON/master/gpon_rce.py -O /usr/share/sniper/bin/gpon_rce.py cp $INSTALL_DIR/bin/iis-buffer-overflow.nse /usr/share/nmap/scripts/iis-buffer-overflow.nse 2> /dev/null @@ -106,6 +104,8 @@ echo -e "$OKORANGE + -- --=[Setting up environment...$RESET" cd $PLUGINS_DIR/Findsploit/ && bash install.sh cd $PLUGINS_DIR/BruteX/ && bash install.sh cd $PLUGINS_DIR/spoofcheck/ && pip install -r requirements.txt +cd $PLUGINS_DIR/CMSmap/ && pip3 install . && python3 setup.py install +cd $PLUGINS_DIR/nmap/ && ./configure && make && make install cd $INSTALL_DIR mkdir $LOOT_DIR 2> /dev/null mkdir $LOOT_DIR/screenshots/ -p 2> /dev/null diff --git a/modes/normal_webporthttp.sh b/modes/normal_webporthttp.sh index a82f635..b9353f8 100644 --- a/modes/normal_webporthttp.sh +++ b/modes/normal_webporthttp.sh @@ -39,9 +39,9 @@ if [ "$MODE" = "web" ]; echo -e "${OKGREEN}====================================================================================${RESET}" echo -e "$OKRED RUNNING CMSMAP $RESET" echo -e "${OKGREEN}====================================================================================${RESET}" - python $CMSMAP -t http://$TARGET + cmsmap http://$TARGET echo "" - python $CMSMAP -t http://$TARGET/wordpress/ + cmsmap http://$TARGET/wordpress/ echo "" if [ "$NIKTO" = "1" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" diff --git a/modes/normal_webporthttps.sh b/modes/normal_webporthttps.sh index 93ecef9..b965bcc 100644 --- a/modes/normal_webporthttps.sh +++ b/modes/normal_webporthttps.sh @@ -38,9 +38,9 @@ if [ "$MODE" = "web" ]; echo -e "${OKGREEN}====================================================================================${RESET}" echo -e "$OKRED RUNNING CMSMAP $RESET" echo -e "${OKGREEN}====================================================================================${RESET}" - python $CMSMAP -t https://$TARGET + cmsmap https://$TARGET echo "" - python $CMSMAP -t https://$TARGET/wordpress/ + cmsmap https://$TARGET/wordpress/ echo "" if [ "$NIKTO" = "1" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" diff --git a/modes/webporthttp.sh b/modes/webporthttp.sh index 138e34a..972dc2c 100644 --- a/modes/webporthttp.sh +++ b/modes/webporthttp.sh @@ -141,9 +141,9 @@ if [ "$MODE" = "webporthttp" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" echo -e "$OKRED RUNNING CMSMAP $RESET" echo -e "${OKGREEN}====================================================================================${RESET}" - python $CMSMAP -t http://$TARGET:$PORT + cmsmap http://$TARGET:$PORT echo "" - python $CMSMAP -t http://$TARGET/wordpress/ + cmsmap http://$TARGET:$PORT/wordpress/ echo "" if [ "$NIKTO" == "1" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" diff --git a/modes/webporthttps.sh b/modes/webporthttps.sh index d2bfa43..19995c0 100644 --- a/modes/webporthttps.sh +++ b/modes/webporthttps.sh @@ -150,9 +150,9 @@ if [ "$MODE" = "webporthttps" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" echo -e "$OKRED RUNNING CMSMAP $RESET" echo -e "${OKGREEN}====================================================================================${RESET}" - python $CMSMAP -t https://$TARGET:$PORT + cmsmap https://$TARGET:$PORT echo "" - python $CMSMAP -t https://$TARGET:$PORT/wordpress/ + cmsmap https://$TARGET:$PORT/wordpress/ echo "" if [ "$NIKTO" = "1" ]; then echo -e "${OKGREEN}====================================================================================${RESET}" diff --git a/sniper.conf b/sniper.conf index 2d61e24..53c21b4 100644 --- a/sniper.conf +++ b/sniper.conf @@ -16,7 +16,6 @@ PASS_FILE="$PLUGIN_DIR/wordlists/password.lst" DNS_FILE="$PLUGIN_DIR/brutex/wordlists/namelist.txt" # TOOL DIRECTORIES -CMSMAP="/usr/share/sniper/plugins/CMSmap/cmsmap.py" THEHARVESTER="/usr/share/theharvester/theharvester.py" SAMRDUMP="$INSTALL_DIR/bin/samrdump.py" DNSDICT6="$INSTALL_DIR/bin/dnsdict6"