root
|
027b1bcf0b
|
v9.2 updates
|
2023-07-22 14:08:10 -07:00 |
root
|
31dcb606e4
|
v9.2 updates
|
2023-07-21 08:05:46 -07:00 |
root
|
ea8110e87d
|
v9.2 updates
|
2023-07-20 15:49:32 -07:00 |
root
|
5be99f8c78
|
v9.2 updates
|
2023-07-20 15:47:17 -07:00 |
xer0dayz
|
56e54ea9c5
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2022-12-12 10:33:04 -07:00 |
root
|
c50af967c0
|
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
|
2022-12-11 16:50:18 -07:00 |
root
|
1c719c3486
|
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
|
2022-09-18 12:26:45 -07:00 |
root
|
db53483876
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2022-06-14 15:59:37 -07:00 |
@xer0dayz
|
9b411613f8
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2021-11-26 16:10:30 -07:00 |
@xer0dayz
|
e8d05be35b
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2021-11-25 09:51:03 -07:00 |
@xer0dayz
|
7420513829
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2021-11-09 16:22:19 -07:00 |
@xer0dayz
|
326c2170ae
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2021-11-09 16:04:06 -07:00 |
@xer0dayz
|
0260383787
|
Sn1per by @sn1persecurity - https://sn1persecurity.com
|
2021-09-28 14:44:29 -07:00 |
xer0dayz
|
c0c21a3a54
|
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
|
2021-09-26 17:40:55 -07:00 |
@xer0dayz
|
cfcf17e057
|
* v9.1 - Fixed issue with carriage returns in conf
|
2021-01-20 08:26:34 -07:00 |
@xer0dayz
|
a1fed2f8ca
|
* v9.1 - Fixed issue with DNS resolution in 'discover' mode scans causing duplicate hosts
|
2021-01-19 18:20:57 -07:00 |
@xer0dayz
|
f78aabe028
|
* v9.1 - Fixed issue with bruteforce running automatically due to changes in conf file
|
2021-01-19 09:03:57 -07:00 |
@xer0dayz
|
76b5b34b75
|
Updated README with arch diagram
|
2021-01-12 15:58:22 -07:00 |
@xer0dayz
|
31df5dc44d
|
* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template
* v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template
* v9.0 - Added RabbitMQ Management Interface Detected sc0pe template
* v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX
* v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth
* v9.0 - Added Nuclei sc0pe parser
* v9.0 - Added Nuclei vulnerability scanner
* v9.0 - Added Wordpress WPScan sc0pe vulnerability parser
* v9.0 - Fixed issue with wrong WPscan API key command
* v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template
* v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode
|
2021-01-08 09:31:56 -07:00 |
@xer0dayz
|
95fc0361b0
|
* v9.0 - Added RabbitMQ Management Interface Detected sc0pe template
* v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX
* v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth
* v9.0 - Added Nuclei sc0pe parser
* v9.0 - Added Nuclei vulnerability scanner
* v9.0 - Added Wordpress WPScan sc0pe vulnerability parser
* v9.0 - Fixed issue with wrong WPscan API key command
* v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template
|
2021-01-04 09:15:06 -07:00 |
@xer0dayz
|
d06a47fe62
|
* v8.9 - Tuned sniper.conf around performance for all scans and recon modes
* v8.9 - Added out of scope options to config
* v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode
* v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template
* v8.9 - Added SolarWinds Orion Panel sc0pe template
* v8.9 - Fixed issue with theHarvester not running on Kali 2020.4
* v8.9 - Added WPScan API support
* v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template
* v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template
* v8.9 - Removed verbose error for chromium on Ubuntu
* v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template
* v8.9 - Fixed F+ in CSP Not Enforced sc0pe template
* v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template
* v8.9 - Fixed issue with dnscan not working in Kali 2020.3
* v8.9 - Fixed issue with screenshots not working in Ubuntu 2020
* v8.9 - Added Frontpage Service Password Disclosure sc0pe template
* v8.9 - Removed Yasuo tool
|
2020-12-18 10:02:40 -07:00 |
@xer0dayz
|
f29caa4e33
|
* v8.8 - Fixed issue with webscreenshot on Kali 2020.3+
|
2020-10-21 13:12:40 -07:00 |
@xer0dayz
|
4907e39cce
|
* v8.9 - Fixed error in install.sh for theharvester sym link
* v8.9 - Fixed issue with flyover mode not capturing web screenshots
|
2020-10-20 15:55:05 -07:00 |
@xer0dayz
|
dae095c78c
|
Fixed auto-update code
|
2020-10-19 13:52:53 -07:00 |
@xer0dayz
|
05c60b4a09
|
Finalized changes for v8.7
Added CVE-2020-15129 - Open Redirect In Traefik sc0pe template
|
2020-09-15 08:13:14 -07:00 |
@xer0dayz
|
3d76ffa9fc
|
* v8.7 - Updated web file bruteforce lists
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
|
2020-09-14 09:00:40 -07:00 |
@xer0dayz
|
1a96b105db
|
* v8.7 - Updated web file bruteforce lists
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
|
2020-09-14 08:25:38 -07:00 |
@xer0dayz
|
7adb5b3998
|
New sc0pe templates, updated Slack API integration, updated wordlists and misc changes for v8.7
|
2020-09-13 18:08:30 -07:00 |
@xer0dayz
|
7c7b8a3a6b
|
Fixed/added Nessus integration (Pro only)
|
2020-08-26 08:51:01 -07:00 |
@xer0dayz
|
4adbb24a48
|
* v8.7 - Fixed logic error in stealth mode recon scans not running
* v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset
* v8.7 - Fixed F- detection in Wordpress Sc0pe templates
* v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection
* v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE
|
2020-08-23 16:48:13 -07:00 |
@xer0dayz
|
e8e3e9ecbe
|
Added CVE-2019-16759 - vBulletin 5.x 0-Day Pre-Auth Remote Command Execution Bypass
|
2020-08-10 08:55:46 -07:00 |
@xer0dayz
|
6e13c6ffb9
|
* v8.6 - Added new Sn1per configuration flow that allows persistent user configurations and API key transfer
* v8.6 - Updated port lists to remove duplicate ports error and slim down list
* v8.6 - Updated PHP to 7.4
|
2020-08-06 12:37:07 -07:00 |
@xer0dayz
|
4c810f5ced
|
* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi
* v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection
* v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server
* v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion
* v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI
* v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection
* v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read
* v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization
* v8.6 - Added Cisco VPN scanner template
* v8.6 - Added Tiki Wiki CMS scanner template
* v8.6 - Added Palo Alto PAN OS Portal scanner template
* v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection
* v8.6 - Added delete task workspace function to remove running tasks
|
2020-08-02 16:51:11 -07:00 |
@xer0dayz
|
312188a26c
|
Added CVE-2020-3452 - Cisco ASA/FTD Arbitrary File Reading Vulnerability Sc0pe template
|
2020-07-23 11:35:16 -07:00 |
@xer0dayz
|
837fb24763
|
Updated osint mode theharvester options
|
2020-07-22 16:59:31 -07:00 |
@xer0dayz
|
d181fdbc1b
|
Updated install.sh with latest theharvester package
|
2020-07-21 13:08:13 -07:00 |
@xer0dayz
|
9aca40c716
|
Updated README
|
2020-07-20 19:06:12 -07:00 |
@xer0dayz
|
df3228766d
|
* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template
* v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template
* v8.6 - Added F5 BIG-IP detection sc0pe template
* v8.6 - Added interesting ports sc0pe template
* v8.6 - Added components with known vulnerabilities sc0pe template
* v8.6 - Added server header disclosure sc0pe template
* v8.6 - Added SMBv1 enabled sc0pe template
* v8.6 - Removed verbose comment from stealth scan
|
2020-07-05 09:10:08 -07:00 |
@xer0dayz
|
0ef5c0d5be
|
Removed verbose comment from stealth scan
|
2020-07-03 11:16:54 -07:00 |
@xer0dayz
|
8d3b7d3210
|
Merged several changes for v8.5
|
2020-07-01 18:38:29 -07:00 |
@xer0dayz
|
e306c9ee8a
|
Merged several changes for v8.5
|
2020-07-01 18:17:35 -07:00 |
@xer0dayz
|
1dddc8686c
|
Merged several changes for v8.5
|
2020-07-01 17:43:48 -07:00 |
@xer0dayz
|
0b9638f19c
|
Updated installer & dependencies. Reduced base repo size by removing large wordlists. Updated console output for installer and removed Ubuntu installer.
|
2020-07-01 12:58:05 -07:00 |
@xer0dayz
|
43550cf2c3
|
* v8.5 - Fixed issue with installer on latest Kali and Docker builds * v8.5 - Fixed custom installer for Arachni
|
2020-06-23 09:36:29 -07:00 |
xer0dayz
|
b4403a9873
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-06-08 13:21:22 -07:00 |
@xer0dayz
|
97b67064e7
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-06-08 10:05:12 -07:00 |
@xer0dayz
|
9eb7db3764
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-06-07 19:09:51 -07:00 |
@xer0dayz
|
bdcdfa4380
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-06-07 16:14:39 -07:00 |
@xer0dayz
|
896806fa8c
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-05-01 18:14:27 -07:00 |
xer0dayz
|
ecf7293ba1
|
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
|
2020-04-19 13:01:48 -07:00 |