From ca08f79ab27349b796cc2d94ce58184ce15e4bfd Mon Sep 17 00:00:00 2001 From: Krishna Kaushal Date: Tue, 7 May 2024 16:31:52 +0530 Subject: [PATCH 01/25] Gau Syntax Fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ❌ `gau -subs $TARGET` ✅ `gau --subs $TARGET` --- modes/stealth.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modes/stealth.sh b/modes/stealth.sh index f400f94..31665ae 100644 --- a/modes/stealth.sh +++ b/modes/stealth.sh @@ -229,7 +229,7 @@ if [[ "$MODE" = "stealth" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250 + gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250 fi if [[ "$BLACKWIDOW" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -387,7 +387,7 @@ if [[ "$MODE" = "stealth" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED FETCHING GUA URLS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250 + gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250 fi if [[ "$BLACKWIDOW" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -528,4 +528,4 @@ if [[ "$MODE" = "stealth" ]]; then loot fi exit -fi \ No newline at end of file +fi From ef0863c4f85c49e0da975881fa5266dbc1bbc5fb Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Wed, 29 May 2024 14:08:34 -0700 Subject: [PATCH 02/25] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 1aace37..9255fd5 100644 --- a/README.md +++ b/README.md @@ -48,10 +48,10 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News +- #### [Sn1per Scan Engine v10.6 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-6-released/) - #### [Sn1per Enterprise v20231025 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20231025-released/) - #### [Automated Penetration Testing Guide - Your Ultimate Resource](https://sn1persecurity.com/wordpress/penetration-testing-guide/) - #### [Dark Web Monitoring: Securing Your External Attack Surface](https://sn1persecurity.com/wordpress/dark-web-monitoring-securing-your-external-attack-surface/) -- #### [Sn1per Scan Engine v10.4 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-4-released/) - #### [Sn1per: The Next Generation of Tools for Security Professionals](https://sn1persecurity.com/wordpress/sn1per-the-next-generation-of-tools-for-security-professionals/) - #### [5 Ways Sn1per Can Automate Your Security Workflow](https://sn1persecurity.com/wordpress/5-ways-sn1per-can-automate-your-security-workflow/) - #### [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/) From 7d5372546208c6eb638ec100fe205e91b4ea1c82 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Wed, 29 May 2024 14:09:56 -0700 Subject: [PATCH 03/25] Update sniper --- sniper | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sniper b/sniper index 3633b31..bba2d94 100755 --- a/sniper +++ b/sniper @@ -590,7 +590,7 @@ function loot { echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" - echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.5 ${RESET}) offers unparalleled features, including: $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.6 ${RESET}) offers unparalleled features, including: $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💻 Sleek Web UI $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛠️ Extensive add-ons $RESET" From 0f31b5b6c330297d2023c8eeb8ecf3c205ed4cc2 Mon Sep 17 00:00:00 2001 From: Ikko Eltociear Ashimine Date: Sat, 8 Jun 2024 23:37:32 +0900 Subject: [PATCH 04/25] docs: update README.md mutiple -> multiple --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 9255fd5..166886f 100644 --- a/README.md +++ b/README.md @@ -211,7 +211,7 @@ sniper -u|--update - **DISCOVER:** Parses all hosts on a subnet/CIDR (ie. 192.168.0.0/16) and initiates a sniper scan against each host. Useful for internal network scans. - **PORT:** Scans a specific port for vulnerabilities. Reporting is not currently available in this mode. - **FULLPORTONLY:** Performs a full detailed port scan and saves results to XML. -- **MASSPORTSCAN:** Runs a "fullportonly" scan on mutiple targets specified via the "-f" switch. +- **MASSPORTSCAN:** Runs a "fullportonly" scan on multiple targets specified via the "-f" switch. - **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly. - **MASSWEB:** Runs "web" mode scans on multiple targets specified via the "-f" switch. - **WEBPORTHTTP:** Launches a full HTTP web application scan against a specific host and port. From beeac68f1a58d05e4dd2d75a00ff2b29349621cb Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Thu, 20 Jun 2024 12:26:58 -0700 Subject: [PATCH 05/25] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 9255fd5..7ed8648 100644 --- a/README.md +++ b/README.md @@ -48,6 +48,7 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News +- #### [Sn1per Enterprise v20240608 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20240608-released/) - #### [Sn1per Scan Engine v10.6 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-6-released/) - #### [Sn1per Enterprise v20231025 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20231025-released/) - #### [Automated Penetration Testing Guide - Your Ultimate Resource](https://sn1persecurity.com/wordpress/penetration-testing-guide/) From 8058f3faa5b9f216c01824e6cc178ddc70ef4a25 Mon Sep 17 00:00:00 2001 From: "semgrep.dev on behalf of @1N3" Date: Mon, 15 Jul 2024 12:02:04 +0000 Subject: [PATCH 06/25] Add Semgrep CI --- .github/workflows/semgrep.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/semgrep.yml diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml new file mode 100644 index 0000000..3ab5688 --- /dev/null +++ b/.github/workflows/semgrep.yml @@ -0,0 +1,24 @@ +on: + workflow_dispatch: {} + pull_request: {} + push: + branches: + - main + - master + paths: + - .github/workflows/semgrep.yml + schedule: + # random HH:MM to avoid a load spike on GitHub Actions at 00:00 + - cron: 2 23 * * * +name: Semgrep +jobs: + semgrep: + name: semgrep/ci + runs-on: ubuntu-20.04 + env: + SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} + container: + image: returntocorp/semgrep + steps: + - uses: actions/checkout@v3 + - run: semgrep ci From 09c852993b4f20b8451d0018b47f3101134f28ac Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Thu, 1 Aug 2024 14:49:51 -0700 Subject: [PATCH 07/25] Update install.sh Add wtmpdb for last command usage --- install.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/install.sh b/install.sh index f37a295..179cdcd 100755 --- a/install.sh +++ b/install.sh @@ -119,6 +119,7 @@ apt install -y urlcrazy apt install -y iputils-ping apt install -y enum4linux apt install -y dnsutils +apt install -y wtmpdb echo -e "$OKBLUE[*]$RESET Installing Metasploit...$RESET" curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > /tmp/msfinstall From 7f5657e8fe9d8cd1df37ba9235c99fdb246e76bb Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 2 Aug 2024 11:02:25 -0700 Subject: [PATCH 08/25] Update install.sh Updated PHP version. --- install.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/install.sh b/install.sh index 179cdcd..ef94f48 100755 --- a/install.sh +++ b/install.sh @@ -90,8 +90,8 @@ apt install -y whois apt install -y dnsrecon apt install -y curl apt install -y nmap -apt install -y php7.4 -apt install -y php7.4-curl +apt install -y php8.2 +apt install -y php8.2-curl apt install -y hydra apt install -y sqlmap apt install -y nbtscan From 308f22c6a29a90a8a4c82f01ab99158c4bfc6ab2 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 2 Aug 2024 11:04:41 -0700 Subject: [PATCH 09/25] Update install.sh Cleaning up install files --- install.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/install.sh b/install.sh index ef94f48..69a78f0 100755 --- a/install.sh +++ b/install.sh @@ -448,5 +448,8 @@ mkdir -p /usr/share/sniper/loot/workspaces/ 2> /dev/null ln -fs /usr/share/sniper/loot/workspaces/ /home/kali/Desktop/workspaces 2> /dev/null ln -fs /usr/share/sniper/loot/workspaces/ /root/Desktop/workspaces 2> /dev/null +echo -e "$OKBLUE[*]$RESET Cleaning up installation files... $RESET" +rm -Rf /tmp/arachni* /tmp/gobuster* /tmp/msfinstall /tmp/openssl.cnf 2> /dev/null + echo -e "$OKRED[>]$RESET Done! $RESET" echo -e "$OKRED[>]$RESET To run, type 'sniper'! $RESET" From 2b7843219987dc2051205cc81b9440f604db18bf Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 2 Aug 2024 14:35:01 -0700 Subject: [PATCH 10/25] Update install.sh Updated python deps --- install.sh | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/install.sh b/install.sh index 69a78f0..97179b3 100755 --- a/install.sh +++ b/install.sh @@ -72,14 +72,17 @@ fi echo -e "$OKBLUE[*]$RESET Installing package dependencies...$RESET" apt update -apt install -y python3-paramiko apt install -y nfs-common apt install -y nodejs apt install -y wafw00f apt install -y xdg-utils apt install -y ruby apt install -y rubygems -apt install -y python +apt install -y python2 +apt install -y python3 +apt install -y python3-paramiko +apt purge -y python3-pip +apt install -y python3-pip apt install -y dos2unix apt install -y aha apt install -y libxml2-utils @@ -104,9 +107,6 @@ apt install -y adb apt install -y xsltproc apt install -y ldapscripts apt install -y libssl-dev 2> /dev/null -apt install -y python-pip 2> /dev/null -apt purge -y python3-pip -apt install -y python3-pip apt install -y xmlstarlet apt install -y net-tools apt install -y p7zip-full From b10362bdabfcdba0adfc286f159eab9e4f059cda Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sun, 4 Aug 2024 10:27:06 -0700 Subject: [PATCH 11/25] Update install.sh Removed old Metasploit GPG key from install. --- install.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/install.sh b/install.sh index 97179b3..699e6d2 100755 --- a/install.sh +++ b/install.sh @@ -122,6 +122,7 @@ apt install -y dnsutils apt install -y wtmpdb echo -e "$OKBLUE[*]$RESET Installing Metasploit...$RESET" +rm -f /usr/share/keyrings/metasploit-framework.gpg 2> /dev/null curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > /tmp/msfinstall chmod 755 /tmp/msfinstall /tmp/msfinstall From c66d2a158c858f605bc664cd18464d2843a78f87 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Mon, 21 Oct 2024 14:36:48 -0700 Subject: [PATCH 12/25] Update webscan.sh Fixed Nuclei template scans --- modes/webscan.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modes/webscan.sh b/modes/webscan.sh index a69ae4d..7894a17 100644 --- a/modes/webscan.sh +++ b/modes/webscan.sh @@ -130,8 +130,8 @@ if [[ "$MODE" = "webscan" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED RUNNING NUCLEI SCAN $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt - nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt + nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt + nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt fi if [[ "$SC0PE_VULNERABLITY_SCANNER" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" @@ -162,4 +162,4 @@ if [[ "$MODE" = "webscan" ]]; then fi loot exit -fi \ No newline at end of file +fi From fa6171de7bd8d1383f388fc4e327f1a20567ac44 Mon Sep 17 00:00:00 2001 From: Dan Church Date: Fri, 15 Nov 2024 11:46:19 -0600 Subject: [PATCH 13/25] DRY help message code Don't call 'echo' a bunch of times. --- sniper | 194 +++++++++++++++++++++++++++++---------------------------- 1 file changed, 99 insertions(+), 95 deletions(-) diff --git a/sniper b/sniper index bba2d94..b725750 100755 --- a/sniper +++ b/sniper @@ -46,101 +46,105 @@ DISTRO=$(cat /etc/*-release | grep DISTRIB_ID= | cut -d'=' -f2) function help { logo - echo "" - echo -e "$OKBLUE[*]$RESET NORMAL MODE" - echo ' sniper -t ' - echo "" - echo -e "$OKBLUE[*]$RESET SPECIFY CUSTOM CONFIG FILE" - echo ' sniper -c /full/path/to/sniper.conf -t -m -w ' - echo "" - echo -e "$OKBLUE[*]$RESET NORMAL MODE + OSINT + RECON" - echo ' sniper -t -o -re' - echo "" - echo -e "$OKBLUE[*]$RESET STEALTH MODE + OSINT + RECON" - echo ' sniper -t -m stealth -o -re' - echo "" - echo -e "$OKBLUE[*]$RESET DISCOVER MODE" - echo ' sniper -t -m discover -w ' - echo "" - echo -e "$OKBLUE[*]$RESET SCAN ONLY SPECIFIC PORT" - echo ' sniper -t -m port -p ' - echo "" - echo -e "$OKBLUE[*]$RESET FULLPORTONLY SCAN MODE" - echo ' sniper -t -fp' - echo "" - echo -e "$OKBLUE[*]$RESET WEB MODE - PORT 80 + 443 ONLY!" - echo ' sniper -t -m web' - echo "" - echo -e "$OKBLUE[*]$RESET HTTP WEB PORT MODE" - echo ' sniper -t -m webporthttp -p ' - echo "" - echo -e "$OKBLUE[*]$RESET HTTPS WEB PORT MODE" - echo ' sniper -t -m webporthttps -p ' - echo "" - echo -e "$OKBLUE[*]$RESET HTTP WEBSCAN MODE" - echo ' sniper -t -m webscan ' - echo "" - echo -e "$OKBLUE[*]$RESET ENABLE BRUTEFORCE" - echo ' sniper -t -b' - echo "" - echo -e "$OKBLUE[*]$RESET AIRSTRIKE MODE" - echo ' sniper -f targets.txt -m airstrike' - echo "" - echo -e "$OKBLUE[*]$RESET NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED" - echo ' sniper -f targets.txt -m nuke -w ' - echo "" - echo -e "$OKBLUE[*]$RESET MASS PORT SCAN MODE" - echo ' sniper -f targets.txt -m massportscan -w ' - echo "" - echo -e "$OKBLUE[*]$RESET MASS WEB SCAN MODE" - echo ' sniper -f targets.txt -m massweb -w ' - echo "" - echo -e "$OKBLUE[*]$RESET MASS WEBSCAN SCAN MODE" - echo ' sniper -f targets.txt -m masswebscan -w ' - echo "" - echo -e "$OKBLUE[*]$RESET MASS VULN SCAN MODE" - echo ' sniper -f targets.txt -m massvulnscan -w ' - echo "" - echo -e "$OKBLUE[*]$RESET PORT SCAN MODE" - echo ' sniper -t -m port -p ' - echo "" - echo -e "$OKBLUE[*]$RESET LIST WORKSPACES" - echo ' sniper --list' - echo "" - echo -e "$OKBLUE[*]$RESET DELETE WORKSPACE" - echo ' sniper -w -d' - echo "" - echo -e "$OKBLUE[*]$RESET DELETE HOST FROM WORKSPACE" - echo ' sniper -w -t -dh' - echo "" - echo -e "$OKBLUE[*]$RESET DELETE TASKS FROM WORKSPACE" - echo ' sniper -w -t -dt' - echo "" - echo -e "$OKBLUE[*]$RESET GET SNIPER SCAN STATUS" - echo ' sniper --status' - echo "" - echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION" - echo ' sniper -w --reimport' - echo "" - echo -e "$OKBLUE[*]$RESET LOOT REIMPORTALL FUNCTION" - echo ' sniper -w --reimportall' - echo "" - echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION" - echo ' sniper -w --reload' - echo "" - echo -e "$OKBLUE[*]$RESET LOOT EXPORT FUNCTION" - echo ' sniper -w --export' - echo "" - echo -e "$OKBLUE[*]$RESET SCHEDULED SCANS" - echo ' sniper -w -s daily|weekly|monthly' - echo "" - echo -e "$OKBLUE[*]$RESET USE A CUSTOM CONFIG" - echo ' sniper -c /path/to/sniper.conf -t -w ' - echo "" - echo -e "$OKBLUE[*]$RESET UPDATE SNIPER" - echo ' sniper -u|--update' - echo "" - echo "" + local star + printf -v star "$OKBLUE[*]$RESET" + cat < + +$star SPECIFY CUSTOM CONFIG FILE + sniper -c /full/path/to/sniper.conf -t -m -w + +$star NORMAL MODE + OSINT + RECON + sniper -t -o -re + +$star STEALTH MODE + OSINT + RECON + sniper -t -m stealth -o -re + +$star DISCOVER MODE + sniper -t -m discover -w + +$star SCAN ONLY SPECIFIC PORT + sniper -t -m port -p + +$star FULLPORTONLY SCAN MODE + sniper -t -fp + +$star WEB MODE - PORT 80 + 443 ONLY! + sniper -t -m web + +$star HTTP WEB PORT MODE + sniper -t -m webporthttp -p + +$star HTTPS WEB PORT MODE + sniper -t -m webporthttps -p + +$star HTTP WEBSCAN MODE + sniper -t -m webscan + +$star ENABLE BRUTEFORCE + sniper -t -b + +$star AIRSTRIKE MODE + sniper -f targets.txt -m airstrike + +$star NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED + sniper -f targets.txt -m nuke -w + +$star MASS PORT SCAN MODE + sniper -f targets.txt -m massportscan -w + +$star MASS WEB SCAN MODE + sniper -f targets.txt -m massweb -w + +$star MASS WEBSCAN SCAN MODE + sniper -f targets.txt -m masswebscan -w + +$star MASS VULN SCAN MODE + sniper -f targets.txt -m massvulnscan -w + +$star PORT SCAN MODE + sniper -t -m port -p + +$star LIST WORKSPACES + sniper --list + +$star DELETE WORKSPACE + sniper -w -d + +$star DELETE HOST FROM WORKSPACE + sniper -w -t -dh + +$star DELETE TASKS FROM WORKSPACE + sniper -w -t -dt + +$star GET SNIPER SCAN STATUS + sniper --status + +$star LOOT REIMPORT FUNCTION + sniper -w --reimport + +$star LOOT REIMPORTALL FUNCTION + sniper -w --reimportall + +$star LOOT REIMPORT FUNCTION + sniper -w --reload + +$star LOOT EXPORT FUNCTION + sniper -w --export + +$star SCHEDULED SCANS + sniper -w -s daily|weekly|monthly + +$star USE A CUSTOM CONFIG + sniper -c /path/to/sniper.conf -t -w + +$star UPDATE SNIPER + sniper -u|--update + + +EOHELP exit } From ff3df6149e4d66971c9cc9043c2d641c4c95e478 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 29 Nov 2024 06:31:38 -0700 Subject: [PATCH 14/25] Update README.md --- README.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/README.md b/README.md index 5f0cd36..b350d0a 100644 --- a/README.md +++ b/README.md @@ -48,14 +48,10 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News +- #### [Sn1per Scan Engine v10.7 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-7-released/) - #### [Sn1per Enterprise v20240608 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20240608-released/) - #### [Sn1per Scan Engine v10.6 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-6-released/) - #### [Sn1per Enterprise v20231025 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20231025-released/) -- #### [Automated Penetration Testing Guide - Your Ultimate Resource](https://sn1persecurity.com/wordpress/penetration-testing-guide/) -- #### [Dark Web Monitoring: Securing Your External Attack Surface](https://sn1persecurity.com/wordpress/dark-web-monitoring-securing-your-external-attack-surface/) -- #### [Sn1per: The Next Generation of Tools for Security Professionals](https://sn1persecurity.com/wordpress/sn1per-the-next-generation-of-tools-for-security-professionals/) -- #### [5 Ways Sn1per Can Automate Your Security Workflow](https://sn1persecurity.com/wordpress/5-ways-sn1per-can-automate-your-security-workflow/) -- #### [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/) - #### [Sn1per Enterprise Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-released/) - #### [Sn1per Professional v10.0 Released!](https://sn1persecurity.com/wordpress/sn1per-professional-v10-released/) From b40999a39b5f160ba4008593264d6b1efb8b71dc Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 29 Nov 2024 06:32:49 -0700 Subject: [PATCH 15/25] Update sniper --- sniper | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sniper b/sniper index bba2d94..fb19b81 100755 --- a/sniper +++ b/sniper @@ -590,7 +590,7 @@ function loot { echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" - echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.6 ${RESET}) offers unparalleled features, including: $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.7 ${RESET}) offers unparalleled features, including: $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💻 Sleek Web UI $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛠️ Extensive add-ons $RESET" From 699fa61051db281228af3aa44ceaaa41c856a448 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 28 Feb 2025 06:29:04 -0700 Subject: [PATCH 16/25] Update README.md --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index b350d0a..a181968 100644 --- a/README.md +++ b/README.md @@ -48,6 +48,7 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News +- #### [Sn1per Scan Engine v10.8 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-8-released/) - #### [Sn1per Scan Engine v10.7 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-7-released/) - #### [Sn1per Enterprise v20240608 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20240608-released/) - #### [Sn1per Scan Engine v10.6 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-6-released/) From 4ff7c0cc8953792f7405c5674968b478a8c71116 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Fri, 28 Feb 2025 14:52:43 -0700 Subject: [PATCH 17/25] Update sniper --- sniper | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sniper b/sniper index 603a71e..c290e0c 100755 --- a/sniper +++ b/sniper @@ -594,7 +594,7 @@ function loot { echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" - echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.7 ${RESET}) offers unparalleled features, including: $RESET" + echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}10.8 ${RESET}) offers unparalleled features, including: $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💻 Sleek Web UI $RESET" echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛠️ Extensive add-ons $RESET" From 3d458e7b2b4640526a17e10df7dc653436f6da6d Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sun, 18 May 2025 14:34:24 -0700 Subject: [PATCH 18/25] Update README.md Updated Docker privileges --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index a181968..5908e31 100644 --- a/README.md +++ b/README.md @@ -90,7 +90,7 @@ To install Sn1per using an AWS EC2 instance: 1. Run the container ```bash - sudo docker run -it sn1per-kali-linux /bin/bash + sudo docker run --privileged -it sn1per-kali-linux /bin/bash ``` ### BlackArch-based Sn1per @@ -104,7 +104,7 @@ To install Sn1per using an AWS EC2 instance: 1. Run the container ```bash - sudo docker run -it sn1per-blackarch /bin/bash + sudo docker run --privileged -it sn1per-blackarch /bin/bash ``` ## Usage From 179ac1e783de9ddc5b08e60e3dbd36e2e5399d00 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Tue, 27 May 2025 15:36:10 -0700 Subject: [PATCH 19/25] Update README.md --- README.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 5908e31..8ee58fb 100644 --- a/README.md +++ b/README.md @@ -48,11 +48,8 @@ Sn1per is a next-generation information gathering tool that provides automated, ### News -- #### [Sn1per Scan Engine v10.8 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-8-released/) -- #### [Sn1per Scan Engine v10.7 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-7-released/) -- #### [Sn1per Enterprise v20240608 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20240608-released/) -- #### [Sn1per Scan Engine v10.6 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-6-released/) -- #### [Sn1per Enterprise v20231025 Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20231025-released/) +- #### [🔐 Sn1per Enterprise v20250522 Released – Next-Level Offensive Security & Vulnerability Scanning](https://sn1persecurity.com/wordpress/sn1per-enterprise-v20250522-released/) +- #### [Sn1per SE v10.8 Now Available – New Features, Tools & Enhancements!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-8-released/) - #### [Sn1per Enterprise Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-released/) - #### [Sn1per Professional v10.0 Released!](https://sn1persecurity.com/wordpress/sn1per-professional-v10-released/) From ed440db38c7e7c2d1aa2132e3a0bd8f1095532f9 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Tue, 3 Jun 2025 14:26:40 -0700 Subject: [PATCH 20/25] Updated Kali repo GPG key --- install.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/install.sh b/install.sh index 699e6d2..17cdeb7 100755 --- a/install.sh +++ b/install.sh @@ -70,6 +70,9 @@ if [[ $UBUNTU_CHECK == "DISTRIB_ID=Ubuntu" ]]; then apt install golang fi +echo -e "$OKBLUE[*]$RESET Updating repositories... $OKBLUE[$RESET${OKGREEN}OK${RESET}$OKBLUE]$RESET" +curl -fsSL https://archive.kali.org/archive-key.asc | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/kali.gpg --yes + echo -e "$OKBLUE[*]$RESET Installing package dependencies...$RESET" apt update apt install -y nfs-common From e93d435a54365408d5eb636b4a19f0412602a664 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Tue, 23 Sep 2025 13:44:42 -0700 Subject: [PATCH 21/25] Update install.sh Fix python dependencies --- install.sh | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/install.sh b/install.sh index 17cdeb7..326feb7 100755 --- a/install.sh +++ b/install.sh @@ -130,7 +130,7 @@ curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/t chmod 755 /tmp/msfinstall /tmp/msfinstall -pip3 install dnspython colorama tldextract urllib3 ipaddress requests +pip3 install dnspython colorama tldextract urllib3 ipaddress requests --break-system-packages curl -o- https://raw.githubusercontent.com/creationix/nvm/v0.33.8/install.sh | bash echo -e "$OKBLUE[*]$RESET Installing gem dependencies...$RESET" @@ -145,7 +145,7 @@ echo -e "$OKBLUE[*]$RESET Setting up Ruby...$RESET" dpkg-reconfigure ruby echo -e "$OKBLUE[*]$RESET Upgrading Pip...$RESET" -python3 -m pip install --upgrade pip +python3 -m pip install --upgrade pip --break-system-packages echo -e "$OKBLUE[*]$RESET Cleaning up old extensions...$RESET" rm -Rf $PLUGINS_DIR 2> /dev/null @@ -207,13 +207,13 @@ wget https://github.com/maurosoria/dirsearch/archive/refs/tags/v0.4.2.tar.gz tar -zxvf v0.4.2.tar.gz mv dirsearch-0.4.2/ dirsearch/ cd dirsearch/ -pip3 install -r requirements.txt +pip3 install -r requirements.txt --break-system-packages cd $PLUGINS_DIR # SECRETFINDER INSTALLER echo -e "$OKBLUE[*]$RESET Installing SecretFinder...$RESET" git clone https://github.com/m4ll0k/SecretFinder.git secretfinder -pip install -r $PLUGINS_DIR/secretfinder/requirements.txt +pip install -r $PLUGINS_DIR/secretfinder/requirements.txt --break-system-packages # LINKFINDER INSTALLER echo -e "$OKBLUE[*]$RESET Installing LinkFinder...$RESET" @@ -225,25 +225,25 @@ cd .. # GITGRABER INSTALLER echo -e "$OKBLUE[*]$RESET Installing GitGrabber...$RESET" git clone https://github.com/hisxo/gitGraber.git -pip3 install -r $PLUGINS_DIR/gitGraber/requirements.txt 2> /dev/null +pip3 install -r $PLUGINS_DIR/gitGraber/requirements.txt --break-system-packages 2> /dev/null # CENSYS-SUBDOMAIN-FINDER INSTALLER echo -e "$OKBLUE[*]$RESET Installing Censys-Subdomain-Finder...$RESET" git clone https://github.com/christophetd/censys-subdomain-finder.git -pip3 install -r $PLUGINS_DIR/censys-subdomain-finder/requirements.txt +pip3 install -r $PLUGINS_DIR/censys-subdomain-finder/requirements.txt --break-system-packages # DNSCAN INSTALLER echo -e "$OKBLUE[*]$RESET Installing DNScan...$RESET" git clone https://github.com/rbsec/dnscan.git -pip3 install -r $PLUGINS_DIR/dnscan/requirements.txt +pip3 install -r $PLUGINS_DIR/dnscan/requirements.txt --break-system-packages # ALTDNS INSTALLER echo -e "$OKBLUE[*]$RESET Installing AltDNS...$RESET" git clone https://github.com/infosec-au/altdns.git cd altdns -pip3 install -r requirements.txt +pip3 install -r requirements.txt --break-system-packages python3 setup.py install -pip3 install py-altdns +pip3 install py-altdns --break-system-packages cd .. # MASSDNS INSTALLER @@ -257,7 +257,7 @@ cd .. echo -e "$OKBLUE[*]$RESET Installing DNSGen...$RESET" git clone https://github.com/ProjectAnte/dnsgen cd dnsgen -pip3 install -r requirements.txt +pip3 install -r requirements.txt --break-system-packages python3 setup.py install cd .. @@ -270,7 +270,7 @@ nuclei # INSTALL WEBTECH echo -e "$OKBLUE[*]$RESET Installing WebTech...$RESET" -pip3 install -U webtech +pip3 install -U webtech --break-system-packages # INSTALL SUBJACK echo -e "$OKBLUE[*]$RESET Installing SubJack...$RESET" @@ -346,11 +346,11 @@ cd .. # H8MAIL INSTALLER echo -e "$OKBLUE[*]$RESET Installing H8Mail...$RESET" -pip3 install h8mail 2> /dev/null +pip3 install h8mail --break-system-packages 2> /dev/null # CMSMAP INSTALLER echo -e "$OKBLUE[*]$RESET Installing CMSMap...$RESET" -cd $PLUGINS_DIR/CMSmap/ && pip3 install . && python3 setup.py install +cd $PLUGINS_DIR/CMSmap/ && pip3 install . --break-system-packages && python3 setup.py install cd $PLUGINS_DIR From 163a6adf2b8f8eae0abae8c3fcde838fa6eb4d6d Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sat, 27 Sep 2025 15:24:19 -0700 Subject: [PATCH 22/25] Update install.sh Updated base dependencies for minimal images --- install.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/install.sh b/install.sh index 326feb7..b67cb01 100755 --- a/install.sh +++ b/install.sh @@ -70,6 +70,9 @@ if [[ $UBUNTU_CHECK == "DISTRIB_ID=Ubuntu" ]]; then apt install golang fi +echo -e "$OKBLUE[*]$RESET Installing base dependencies...$RESET" +apt install -y sudo gpg curl + echo -e "$OKBLUE[*]$RESET Updating repositories... $OKBLUE[$RESET${OKGREEN}OK${RESET}$OKBLUE]$RESET" curl -fsSL https://archive.kali.org/archive-key.asc | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/kali.gpg --yes From 0b464aeb32453bcf0bd9af96fdf47191dabb00e7 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sat, 27 Sep 2025 15:51:02 -0700 Subject: [PATCH 23/25] Update install.sh Updated vulners installer script --- install.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/install.sh b/install.sh index b67cb01..11b4e1e 100755 --- a/install.sh +++ b/install.sh @@ -331,6 +331,10 @@ echo -e "$OKBLUE[*]$RESET Installing Vulners...$RESET" cd /usr/share/nmap/scripts/ rm -f /usr/share/nmap/scripts/vulners.nse wget https://raw.githubusercontent.com/vulnersCom/nmap-vulners/master/vulners.nse +# ensure readable permissions +sudo chmod 644 /usr/share/nmap/scripts/vulners.nse +# update Nmap's script DB so --script-help and autocompletion see it +sudo nmap --script-updatedb # GOBUSTER INSTALLER echo -e "$OKBLUE[*]$RESET Installing GoBuster...$RESET" From 345551590b7efd0c2ebf66d095fc5ac1afb11b72 Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sat, 27 Sep 2025 15:54:23 -0700 Subject: [PATCH 24/25] Update normal.sh Fixed samrdump.py location --- modes/normal.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modes/normal.sh b/modes/normal.sh index 43e2e8f..b0eda1d 100644 --- a/modes/normal.sh +++ b/modes/normal.sh @@ -511,7 +511,7 @@ else echo -e "$OKRED RUNNING SMB ENUMERATION $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port139.txt - python3 $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt + python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port139.txt fi if [[ "$NMAP_SCRIPTS" = "1" ]]; then @@ -616,7 +616,7 @@ else echo -e "$OKRED ENUMERATING SMB/NETBIOS $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port445.txt - python3 $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt + python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port445.txt fi if [[ "$NMAP_SCRIPTS" = "1" ]]; then From feeb5c65811fc33914692e7ce9e14cf4dcb195eb Mon Sep 17 00:00:00 2001 From: xer0dayz <1N3@hushmail.com> Date: Sat, 27 Sep 2025 15:57:43 -0700 Subject: [PATCH 25/25] Update install.sh Fixed webtech error --- install.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/install.sh b/install.sh index 11b4e1e..df99b3e 100755 --- a/install.sh +++ b/install.sh @@ -274,6 +274,7 @@ nuclei # INSTALL WEBTECH echo -e "$OKBLUE[*]$RESET Installing WebTech...$RESET" pip3 install -U webtech --break-system-packages +mkdir -p /root/.local/share/webtech # INSTALL SUBJACK echo -e "$OKBLUE[*]$RESET Installing SubJack...$RESET"