kingx48
d89b7190aa
Merge 0031036f3d into a5450bc496
2026-07-06 08:34:27 -05:00
xer0dayz
345551590b
Update normal.sh
...
Fixed samrdump.py location
2025-09-27 15:54:23 -07:00
google-labs-jules[bot]
0031036f3d
Enhance javascript-analysis.sh with custom search patterns
...
Adds functionality to `modes/javascript-analysis.sh` to scan JavaScript files for custom patterns defined by you.
Key features:
- You can provide a list of regex patterns in `/usr/share/sniper/conf/interesting_js_patterns.txt`.
- The script iterates through downloaded JavaScript files and searches for matches using the provided patterns.
- Findings are saved to `$LOOT_DIR/web/javascript-$TARGET-custom_findings.txt`.
- If the pattern file is not found, the step is skipped with a notification.
- Output file is created only if matches are found, and includes a descriptive header.
This allows you to extend JavaScript analysis with your own specific keywords and regular expressions for finding sensitive information or other items of interest.
2025-05-25 13:49:10 +00:00
xer0dayz
c66d2a158c
Update webscan.sh
...
Fixed Nuclei template scans
2024-10-21 14:36:48 -07:00
Krishna Kaushal
ca08f79ab2
Gau Syntax Fix
...
❌ `gau -subs $TARGET`
✅ `gau --subs $TARGET`
2024-05-07 16:31:52 +05:30
xer0dayz
bdb35d849a
Merge pull request #422 from benemohamed/master
...
Added tomba.io API integration to recon mode scans
2023-07-21 08:06:33 -07:00
root
5be99f8c78
v9.2 updates
2023-07-20 15:47:17 -07:00
xer0dayz
0ac270267d
Update recon.sh
...
Removed Slurp tool
2023-07-20 14:59:57 -07:00
xer0dayz
dc9fb22e65
Update recon.sh
...
Updated python to python3
2023-07-20 14:58:38 -07:00
xer0dayz
6b5b97b30b
Update osint.sh
...
Updated python to python3
2023-07-20 14:58:15 -07:00
xer0dayz
73f9b31303
Update normal_webporthttps.sh
...
Updated python to python3
2023-07-20 14:56:54 -07:00
xer0dayz
fdb5bee2fe
Update normal_webporthttp.sh
...
Updated python to python3
2023-07-20 14:56:24 -07:00
xer0dayz
5e482d121d
Update normal.sh
...
Updated python to python3
2023-07-20 14:54:55 -07:00
Mohamed Ben
23a8c393d4
Added tomba.io API integration to recon mode scans
2023-07-20 17:12:47 +01:00
root
c50af967c0
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
2022-12-11 16:50:18 -07:00
root
1c719c3486
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
2022-09-18 12:26:45 -07:00
@xer0dayz
9b411613f8
Sn1per by @sn1persecurity - https://sn1persecurity.com
2021-11-26 16:10:30 -07:00
@xer0dayz
e8d05be35b
Sn1per by @sn1persecurity - https://sn1persecurity.com
2021-11-25 09:51:03 -07:00
@xer0dayz
7420513829
Sn1per by @sn1persecurity - https://sn1persecurity.com
2021-11-09 16:22:19 -07:00
@xer0dayz
0260383787
Sn1per by @sn1persecurity - https://sn1persecurity.com
2021-09-28 14:44:29 -07:00
xer0dayz
c0c21a3a54
Sn1per by @Sn1perSecurity - https://sn1persecurity.com
2021-09-26 17:40:55 -07:00
@xer0dayz
a1fed2f8ca
* v9.1 - Fixed issue with DNS resolution in 'discover' mode scans causing duplicate hosts
2021-01-19 18:20:57 -07:00
@xer0dayz
f78aabe028
* v9.1 - Fixed issue with bruteforce running automatically due to changes in conf file
2021-01-19 09:03:57 -07:00
@xer0dayz
31df5dc44d
* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template
...
* v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template
* v9.0 - Added RabbitMQ Management Interface Detected sc0pe template
* v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX
* v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth
* v9.0 - Added Nuclei sc0pe parser
* v9.0 - Added Nuclei vulnerability scanner
* v9.0 - Added Wordpress WPScan sc0pe vulnerability parser
* v9.0 - Fixed issue with wrong WPscan API key command
* v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template
* v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode
2021-01-08 09:31:56 -07:00
@xer0dayz
95fc0361b0
* v9.0 - Added RabbitMQ Management Interface Detected sc0pe template
...
* v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX
* v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth
* v9.0 - Added Nuclei sc0pe parser
* v9.0 - Added Nuclei vulnerability scanner
* v9.0 - Added Wordpress WPScan sc0pe vulnerability parser
* v9.0 - Fixed issue with wrong WPscan API key command
* v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template
2021-01-04 09:15:06 -07:00
@xer0dayz
d06a47fe62
* v8.9 - Tuned sniper.conf around performance for all scans and recon modes
...
* v8.9 - Added out of scope options to config
* v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode
* v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template
* v8.9 - Added SolarWinds Orion Panel sc0pe template
* v8.9 - Fixed issue with theHarvester not running on Kali 2020.4
* v8.9 - Added WPScan API support
* v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template
* v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template
* v8.9 - Removed verbose error for chromium on Ubuntu
* v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template
* v8.9 - Fixed F+ in CSP Not Enforced sc0pe template
* v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template
* v8.9 - Fixed issue with dnscan not working in Kali 2020.3
* v8.9 - Fixed issue with screenshots not working in Ubuntu 2020
* v8.9 - Added Frontpage Service Password Disclosure sc0pe template
* v8.9 - Removed Yasuo tool
2020-12-18 10:02:40 -07:00
@xer0dayz
f29caa4e33
* v8.8 - Fixed issue with webscreenshot on Kali 2020.3+
2020-10-21 13:12:40 -07:00
@xer0dayz
4907e39cce
* v8.9 - Fixed error in install.sh for theharvester sym link
...
* v8.9 - Fixed issue with flyover mode not capturing web screenshots
2020-10-20 15:55:05 -07:00
@xer0dayz
dae095c78c
Fixed auto-update code
2020-10-19 13:52:53 -07:00
@xer0dayz
8d7c2bda16
* v8.7 - Updated web file bruteforce lists
...
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
2020-09-14 13:54:36 -07:00
@xer0dayz
eaadde00dc
* v8.7 - Updated web file bruteforce lists
...
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
2020-09-14 12:36:54 -07:00
@xer0dayz
1a96b105db
* v8.7 - Updated web file bruteforce lists
...
* v8.7 - Added updated Slack API integration/notifications
* v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers
2020-09-14 08:25:38 -07:00
@xer0dayz
7adb5b3998
New sc0pe templates, updated Slack API integration, updated wordlists and misc changes for v8.7
2020-09-13 18:08:30 -07:00
@xer0dayz
7c7b8a3a6b
Fixed/added Nessus integration (Pro only)
2020-08-26 08:51:01 -07:00
@xer0dayz
4adbb24a48
* v8.7 - Fixed logic error in stealth mode recon scans not running
...
* v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset
* v8.7 - Fixed F- detection in Wordpress Sc0pe templates
* v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection
* v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE
2020-08-23 16:48:13 -07:00
@xer0dayz
837fb24763
Updated osint mode theharvester options
2020-07-22 16:59:31 -07:00
@xer0dayz
0ef5c0d5be
Removed verbose comment from stealth scan
2020-07-03 11:16:54 -07:00
@xer0dayz
1dddc8686c
Merged several changes for v8.5
2020-07-01 17:43:48 -07:00
@xer0dayz
de0df1f8bd
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-06-07 19:33:19 -07:00
@xer0dayz
ea9422db7b
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-06-07 19:24:36 -07:00
@xer0dayz
9eb7db3764
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-06-07 19:09:51 -07:00
@xer0dayz
bdcdfa4380
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-06-07 16:14:39 -07:00
@xer0dayz
2d1e7241cf
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-04-23 20:01:28 -07:00
@xer0dayz
a66fde3e22
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-04-20 07:53:23 -07:00
@xer0dayz
058326f750
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-04-19 13:19:23 -07:00
xer0dayz
b59467344f
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-04-19 12:00:02 -07:00
xer0dayz
3a78c9f489
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-04-19 11:58:47 -07:00
@xer0dayz
1dbb5663de
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-03-02 09:30:16 -07:00
xer0dayz
a59df3321f
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-02-21 15:10:02 -07:00
xer0dayz
1cb3f7ab77
Sn1per Community Edition by @xer0dayz - https://xerosecurity.com
2020-02-20 10:20:09 -07:00