diff --git a/CHANGELOG.md b/CHANGELOG.md index e5a976b..5654c92 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,7 @@ ## CHANGELOG: +* v9.1 - Updated subfinder to latest version +* v9.1 - Added new email spoofing security checks to OSINT mode (-o) +* v9.1 - Removed spoofcheck.py * v9.1 - Updated timeout settings for curl which was causing sockets/scans to hang * v9.1 - Fixed issue with Nuclei symlink missing in installer * v9.1 - Fixed issue with Nuclei sc0pe parser not parsing results correctly diff --git a/README.md b/README.md index 9fbfbfa..d9791d5 100644 --- a/README.md +++ b/README.md @@ -14,8 +14,6 @@ Discover the attack surface and prioritize risks with our continuous Attack Surf [![](https://sn1persecurity.com/images/Sn1perSecurity-attack-surface-management-header2.png)](https://sn1persecurity.com/) [![](https://sn1persecurity.com/images/Sn1perSecurity-sn1per3.PNG)](https://sn1persecurity.com/) -[![](https://sn1persecurity.com/images/Sn1perSecurity-sn1per-4.PNG)](https://sn1persecurity.com/) -[![](https://sn1persecurity.com/images/Sn1perSecurity-sn1per5.PNG)](https://sn1persecurity.com/) ## FEATURES: diff --git a/install.sh b/install.sh index 29d48e5..2b03a69 100755 --- a/install.sh +++ b/install.sh @@ -319,7 +319,8 @@ cd /root/go/bin/ # SUBFINDER INSTALLER echo -e "$OKBLUE[*]$RESET Installing SubFinder...$RESET" -cd ~/go/bin; wget https://github.com/projectdiscovery/subfinder/releases/download/v2.2.4/subfinder-linux-amd64.tar; tar -xvf subfinder-linux-amd64.tar; rm -f subfinder-linux-amd64.tar; mv subfinder-linux-amd64 /usr/local/bin/subfinder +GO111MODULE=on go get -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest +ln -s /root/go/bin/subfinder /usr/local/bin/subfinder 2> /dev/null # DIRDAR INSTALLER echo -e "$OKBLUE[*]$RESET Installing DirDar...$RESET" diff --git a/modes/osint.sh b/modes/osint.sh index a0e38f3..dfe16ac 100644 --- a/modes/osint.sh +++ b/modes/osint.sh @@ -15,6 +15,18 @@ if [[ "$OSINT" = "1" ]]; then /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/osint/whois-$TARGET.txt" fi fi + if [[ "$SPOOF_CHECK" = "1" ]]; then + echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" + echo -e "$OKRED CHECKING FOR EMAIL SECURITY $RESET" + echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" + dig $TARGET txt | egrep -i 'spf|DMARC|dkim' | tee $LOOT_DIR/nmap/email-$TARGET.txt 2>/dev/null + dig iport._domainkey.${TARGET} txt | egrep -i 'spf|DMARC|DKIM' | tee -a $LOOT_DIR/nmap/email-$TARGET.txt 2>/dev/null + dig _dmarc.${TARGET} txt | egrep -i 'spf|DMARC|DKIM' | tee -a $LOOT_DIR/nmap/email-$TARGET.txt 2>/dev/null + echo "" + if [[ "$SLACK_NOTIFICATIONS_EMAIL_SECURITY" == "1" ]]; then + /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/email-$TARGET.txt" + fi + fi if [[ "$ULTRATOOLS" == "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED GATHERING ULTATOOLS DNS INFO $RESET" diff --git a/modes/recon.sh b/modes/recon.sh index 0cf8499..a2ec23b 100644 --- a/modes/recon.sh +++ b/modes/recon.sh @@ -33,9 +33,10 @@ if [[ "$RECON" = "1" ]]; then fi if [[ "$SUBFINDER" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - echo -e "$OKRED GATHERING DNS SUBDOMAINS VIA SUBFINDER (THIS COULD TAKE A WHILE...) $RESET" + echo -e "$OKRED GATHERING DNS SUBDOMAINS VIA SUBFINDER $RESET" + echo -e "$OKBLUE[*]$RESET Running: subfinder -o $LOOT_DIR/domains/domains-$TARGET-subfinder.txt -d $TARGET -t 100 $RESET" echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - subfinder -o $LOOT_DIR/domains/domains-$TARGET-subfinder.txt -b -d $TARGET -w $DOMAINS_DEFAULT -t 100 2>/dev/null + subfinder -o $LOOT_DIR/domains/domains-$TARGET-subfinder.txt -d $TARGET -nW -rL /sniper/wordlists/resolvers.txt -t $THREADS 2>/dev/null > /dev/null wc -l $LOOT_DIR/domains/domains-$TARGET-subfinder.txt 2> /dev/null fi if [[ "$DNSCAN" = "1" ]]; then @@ -191,16 +192,6 @@ if [[ "$RECON" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" egrep -iE "GREP_INTERESTING_SUBDOMAINS" $LOOT_DIR/domains/domains-$TARGET-full.txt 2> /dev/null | tee $LOOT_DIR/domains/domains_interesting-$TARGET.txt | head -n "$GREP_MAX_LINES" fi - if [[ "$SPOOF_CHECK" = "1" ]]; then - echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - echo -e "$OKRED CHECKING FOR EMAIL SECURITY $RESET" - echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" - python $PLUGINS_DIR/spoofcheck/spoofcheck.py $TARGET | tee $LOOT_DIR/nmap/email-$TARGET.txt 2>/dev/null - echo "" - if [[ "$SLACK_NOTIFICATIONS_EMAIL_SECURITY" == "1" ]]; then - /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/email-$TARGET.txt" - fi - fi if [[ "$SUBHIJACK_CHECK" = "1" ]]; then echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•" echo -e "$OKRED CHECKING FOR CNAME SUBDOMAIN HIJACKING $RESET"