mirror of https://github.com/1N3/Sn1per.git
Compare commits
No commits in common. "master" and "v9.1" have entirely different histories.
|
|
@ -1,58 +0,0 @@
|
|||
name: Build and Push
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
- development
|
||||
- feat*
|
||||
tags:
|
||||
- "v*"
|
||||
pull_request:
|
||||
branches:
|
||||
- master
|
||||
|
||||
env:
|
||||
REGISTRY: ghcr.io
|
||||
IMAGE_NAME: ${{ github.repository }}
|
||||
|
||||
jobs:
|
||||
docker-build:
|
||||
permissions:
|
||||
contents: read
|
||||
packages: write
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
|
||||
- name: Setting environment variables
|
||||
run: |
|
||||
echo "repo_name=${{ env.IMAGE_NAME }}" >> $GITHUB_ENV
|
||||
|
||||
- uses: actions/checkout@v3
|
||||
|
||||
- name: Docker meta
|
||||
id: meta
|
||||
uses: docker/metadata-action@v4
|
||||
with:
|
||||
images: ${{ env.REGISTRY}}/${{ env.repo_name }}
|
||||
flavor: latest=true
|
||||
tags: |
|
||||
type=ref,event=branch
|
||||
type=ref,event=pr
|
||||
type=semver,pattern={{version}}
|
||||
|
||||
- name: Login to image repository
|
||||
uses: docker/login-action@v2
|
||||
with:
|
||||
registry: ${{ env.REGISTRY }}
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.GITHUB_TOKEN }}
|
||||
|
||||
- name: Build and push
|
||||
uses: docker/build-push-action@v3
|
||||
with:
|
||||
context: .
|
||||
file: Dockerfile
|
||||
push: ${{ github.ref_type == 'tag' || github.ref_name == 'main' || startsWith(github.ref_name, 'feat-')}}
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
|
|
@ -1,24 +0,0 @@
|
|||
on:
|
||||
workflow_dispatch: {}
|
||||
pull_request: {}
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
- master
|
||||
paths:
|
||||
- .github/workflows/semgrep.yml
|
||||
schedule:
|
||||
# random HH:MM to avoid a load spike on GitHub Actions at 00:00
|
||||
- cron: 2 23 * * *
|
||||
name: Semgrep
|
||||
jobs:
|
||||
semgrep:
|
||||
name: semgrep/ci
|
||||
runs-on: ubuntu-20.04
|
||||
env:
|
||||
SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
|
||||
container:
|
||||
image: returntocorp/semgrep
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
- run: semgrep ci
|
||||
|
|
@ -1,10 +1,4 @@
|
|||
## CHANGELOG:
|
||||
* v9.2 - Added Tomba.io API integration via OSINT mode (Credit: @benemohamed)
|
||||
* v9.2 - Fixed issue with gau tool not installing and updated GAU setting in confs
|
||||
* v9.2 - Updated python2 to python3
|
||||
* v9.2 - Removed Slurp tool
|
||||
* v9.2 - Added BlackArch Dockerfile (Credit: @AnonymousWP)
|
||||
* v9.2 - Updated DockerFile to latest Kali release (Credit: @AnonymousWP)
|
||||
* v9.1 - Fixed issue with dirsearch installation/command syntax update
|
||||
* v9.1 - Updated Nuclei sc0pe templates
|
||||
* v9.1 - Fixed issue with Nuclei sc0pe parsers not working
|
||||
|
|
|
|||
20
Dockerfile
20
Dockerfile
|
|
@ -1,4 +1,4 @@
|
|||
FROM docker.io/kalilinux/kali-rolling:latest
|
||||
FROM kalilinux/kali-rolling
|
||||
|
||||
LABEL org.label-schema.name='Sn1per - Kali Linux' \
|
||||
org.label-schema.description='Automated pentest framework for offensive security experts' \
|
||||
|
|
@ -14,21 +14,21 @@ RUN echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" > /e
|
|||
ENV DEBIAN_FRONTEND noninteractive
|
||||
|
||||
RUN set -x \
|
||||
&& apt -yqq update \
|
||||
&& apt -yqq full-upgrade \
|
||||
&& apt clean
|
||||
RUN apt install --yes metasploit-framework
|
||||
&& apt-get -yqq update \
|
||||
&& apt-get -yqq dist-upgrade \
|
||||
&& apt-get clean
|
||||
RUN apt-get install -y metasploit-framework
|
||||
|
||||
RUN sed -i 's/systemctl status ${PG_SERVICE}/service ${PG_SERVICE} status/g' /usr/bin/msfdb && \
|
||||
service postgresql start && \
|
||||
msfdb reinit
|
||||
|
||||
WORKDIR /usr/src/app
|
||||
|
||||
RUN apt --yes install git bash
|
||||
RUN git clone https://github.com/1N3/Sn1per.git \
|
||||
RUN apt-get --yes install git \
|
||||
&& mkdir -p security \
|
||||
&& cd security \
|
||||
&& git clone https://github.com/1N3/Sn1per.git \
|
||||
&& cd Sn1per \
|
||||
&& ./install.sh \
|
||||
&& sniper -u force
|
||||
|
||||
CMD ["sniper"]
|
||||
CMD ["bash"]
|
||||
|
|
|
|||
|
|
@ -1,9 +0,0 @@
|
|||
FROM docker.io/blackarchlinux/blackarch:latest
|
||||
|
||||
# Upgrade system
|
||||
RUN pacman -Syu --noconfirm
|
||||
|
||||
# Install sn1per from official repository
|
||||
RUN pacman -Sy sn1per --noconfirm
|
||||
|
||||
CMD ["sn1per"]
|
||||
347
README.md
347
README.md
|
|
@ -1,164 +1,83 @@
|
|||
[](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)
|
||||
[](https://sn1persecurity.com)
|
||||
|
||||
[](https://github.com/1N3/Sn1per/releases)
|
||||
[](https://github.com/1N3/Sn1per/blob/master/LICENSE.md)
|
||||
[](https://github.com/1N3/Sn1per/issues)
|
||||
[](https://github.com/1N3/Sn1per/commits/master)
|
||||
[](https://github.com/1N3/Sn1per/graphs/contributors)
|
||||
|
||||
[](https://github.com/1N3/Sn1per/stargazers)
|
||||
[](https://github.com/1N3/Sn1per/network/members)
|
||||
[](https://github.com/1N3)
|
||||
[](https://github.com/1N3/Sn1per/)
|
||||
[](https://github.com/1N3/Sn1per/)
|
||||
[](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fdeveloper.twitter.com%2Fen%2Fdocs%2Ftwitter-for-websites%2Ftweet-button%2Foverview&ref_src=twsrc%5Etfw&text=Sn1per%20-%20Automated%20Pentest%20Recon%20Scanner&tw_p=tweetbutton&url=https%3A%2F%2Fgithub.com%2F1N3%2FSn1per)
|
||||
[](https://twitter.com/intent/follow?screen_name=xer0dayz)
|
||||
|
||||
[[Products](https://sn1persecurity.com/wordpress/shop/)] [[Attack Surface Management](https://sn1persecurity.com/wordpress/use-cases/)] [[About Sn1per](https://sn1persecurity.com/wordpress/about/)] [[News](https://sn1persecurity.com/wordpress/blog/)] [[Contact](https://sn1persecurity.com/wordpress/home/contact/)] [[Demo](https://sn1persecurity.com/wordpress/#video)] [[Pricing](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)] [[Shop](https://sn1persecurity.com/wordpress/shop/)]
|
||||
[[Website](https://sn1persecurity.com/wordpress/)] [[Blog](https://sn1persecurity.com/wordpress/blog/)] [[Shop](https://sn1persecurity.com/wordpress/shop)] [[Documentation](https://sn1persecurity.com/wordpress/documentation/)] [[Demo](https://www.youtube.com/c/Sn1perSecurity/videos)] [[Find Out More](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)]
|
||||
|
||||
# Sn1per — The Offensive-Security Platform for Modern Teams
|
||||
## Attack Surface Management
|
||||
### Discover hidden assets and vulnerabilities in your environment
|
||||
#### [[Find out more](https://sn1persecurity.com/wordpress/shop)]
|
||||
|
||||
> Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC.
|
||||
[](https://sn1persecurity.com/)
|
||||
|
||||
> ## Sn1per Professional 2026 is here
|
||||
>
|
||||
> The largest release since v10.0 — Docker-first deployment, Bootstrap 5 / Tabler UI, Workspace Navigator, Workspace + Host Reports with CSV / Excel / PDF export, JSON API v1.0, an Offcanvas Quick Commands sidebar with 13 panels, and expanded modules for ReverseAPK, MassPwn, Threat Intel, Nessus, and Burp.
|
||||
>
|
||||
> [Read the release notes →](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/) · [View pricing →](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)
|
||||
## The ultimate pentesting toolkit.
|
||||
Integrate with the leading commercial and open source vulnerability scanners to scan for the latest CVEs and vulnerabilities.
|
||||
|
||||
## Table of Contents
|
||||
[](https://sn1persecurity.com/)
|
||||
|
||||
- [About](#about-sn1per)
|
||||
- [What Sn1per Is For](#what-sn1per-is-for)
|
||||
- [What's New in 2026](#whats-new-in-2026)
|
||||
- [Editions & Pricing](#editions--pricing)
|
||||
- [Install](#install)
|
||||
- [Quick Start](#quick-start)
|
||||
- [Usage](#usage)
|
||||
- [Scan Modes](#scan-modes)
|
||||
- [Integrations](#integrations)
|
||||
- [Documentation & Help](#documentation--help)
|
||||
- [News & Releases](#news--releases)
|
||||
- [Community & Support](#community--support)
|
||||
- [Contributing](#contributing)
|
||||
- [License & Legal](#license--legal)
|
||||
### Automate the most powerful tools.
|
||||
Security tools are expensive and time-consuming, but with Sn1per, you can save time by automating the execution of these open source and commercial tools to discover vulnerabilities across your entire attack surface.
|
||||
|
||||
## About Sn1per
|
||||
[](https://sn1persecurity.com/)
|
||||
|
||||
Sn1per is an offensive-security platform that consolidates reconnaissance, vulnerability scanning, exploitation, and reporting into a single workspace. Built by pentesters since 2015, it ships in three editions — a free Community Edition (source-available, custom EULA — see LICENSE.md) in this repository, a paid Professional edition for individual operators and small teams, and an Enterprise edition for global SOCs — all backed by the same core scanning engine.
|
||||
### Find what you can't see.
|
||||
Hacking is a problem that's only getting worse. But, with Sn1per, you can find what you can’t see—hidden assets and vulnerabilities in your environment.
|
||||
|
||||
Sn1per orchestrates 90+ third-party tools, ships with 600+ exploits and 10,000+ detections, and is used by 500+ teams worldwide. Battle-tested by the community. Built by pentesters, for pentesters.
|
||||
[](https://sn1persecurity.com/)
|
||||
|
||||
**500+** Teams · **90+** Integrations · **10,000+** Detections · **600+** Exploits · Trusted since **2015**
|
||||
### Discover and prioritize risks in your organization.
|
||||
Sn1per is a next-generation information gathering tool that provides automated, deep, and continuous security for organizations of all sizes.
|
||||
|
||||
## What Sn1per Is For
|
||||
[](https://sn1persecurity.com/)
|
||||
|
||||
Sn1per ships as one platform that covers the core jobs offensive security teams otherwise stitch together from a dozen tools:
|
||||
### See Sn1per in action!
|
||||
[](https://www.youtube.com/c/Sn1perSecurity/videos)
|
||||
|
||||
- **[External Attack Surface Management](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)** - continuous discovery, monitoring, and active exploitation of every internet-facing asset your organization owns, including the ones nobody on your team knows about.
|
||||
- **[Continuous Attack Surface Management](https://sn1persecurity.com/wordpress/continuous-attack-surface-management-with-sn1per-professional/)** - daily-cadence rescans that diff yesterday's surface against today's so new exposures hit your SOC within hours, not the next quarterly pentest.
|
||||
- **[Automated Penetration Testing](https://sn1persecurity.com/wordpress/automated-penetration-testing/)** - 600+ exploits and 10,000+ detections orchestrated as a single workflow, with active verification eliminating the false positives version-only scanners ship as "critical."
|
||||
- **[Reconnaissance & Attack Surface Discovery](https://sn1persecurity.com/wordpress/reconnaissance-methodology/)** - the full phased recon workflow, from OSINT and subdomain enumeration through live-host discovery and fingerprinting, run as one automated pass.
|
||||
### News
|
||||
- #### [5 Ways Sn1per Can Automate Your Security Workflow](https://sn1persecurity.com/wordpress/5-ways-sn1per-can-automate-your-security-workflow/)
|
||||
- #### [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)
|
||||
- #### [Sn1per Scan Engine v10.2 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-2-update/)
|
||||
- #### [Sn1per Enterprise Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-released/)
|
||||
- #### [Sn1per Professional v10.0 Released!](https://sn1persecurity.com/wordpress/sn1per-professional-v10-released/)
|
||||
|
||||
## What's New in 2026
|
||||
|
||||
[](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
|
||||
|
||||
*Workspace Navigator — switch contexts across hosts, scopes, and engagements.*
|
||||
|
||||
[](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
|
||||
|
||||
*Dashboard — at-a-glance scan posture, top findings, and exploitable assets.*
|
||||
|
||||
### Highlights
|
||||
|
||||
- **Docker-first deployment** — same image, every distro
|
||||
- **Bootstrap 5 / Tabler UI** — refreshed responsive interface with light + dark mode
|
||||
- **Workspace Navigator** — fast workspace switching with state preservation
|
||||
- **Workspace & Host Reports** — CSV, Excel, and PDF export
|
||||
- **JSON API v1.0** — programmatic access for CI / SOAR / SIEM pipelines
|
||||
- **Offcanvas Quick Commands** — 13 panels, every common action one click away
|
||||
- **Expanded modules** — ReverseAPK, MassPwn, Threat Intel, Nessus, Burp Suite
|
||||
- **Maturing SC0PE framework** — more parsers, better noise reduction
|
||||
- **Hardened PHP library stack** — modern dependencies, audited components
|
||||
- **New CLI flags** — `-v` (verbose), `-db` (debug), `-rr` (remove resume files)
|
||||
|
||||
> *"Sn1per Professional 2026 is the largest release since the v10.0 line."*
|
||||
|
||||
[Read the full release notes →](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
|
||||
|
||||
## Editions & Pricing
|
||||
|
||||
The [Community Edition](https://sn1persecurity.com/wordpress/sn1per-community-edition/) is free and lives in this repository. The Professional and Enterprise editions add a Web UI, commercial integrations, and email support.
|
||||
|
||||
| | **Sn1per Professional** | **Sn1per Enterprise** |
|
||||
|---|---|---|
|
||||
| **Price** | $984 / year (per seat) | Get a quote |
|
||||
| **Subscription** | 1 year | 1 year |
|
||||
| **— Included —** | | |
|
||||
| Web UI | Professional Web UI | Enterprise Web UI |
|
||||
| Scan Engine & UI Updates | ✓ | ✓ |
|
||||
| All Modules & Integrations | ✓ | ✓ |
|
||||
| On-Prem (Self Hosted) | ✓ | ✓ |
|
||||
| Email Support | 1 Year | 1 Year |
|
||||
| Improved Speed & Scalability | — | ✓ |
|
||||
| Cutting-Edge Features | — | ✓ |
|
||||
| **— Limits & Quotas —** | | |
|
||||
| Max Scans | Unlimited | Unlimited |
|
||||
| Max Assets / Workspace | 30 | Unlimited |
|
||||
| Max Workspaces | 5 | Unlimited |
|
||||
| Total Assets | 150 | 500+ |
|
||||
| Licensed Systems | 1 | 1 |
|
||||
|
||||
[Buy a Sn1per Professional license →](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/) · [Get an Enterprise quote →](https://sn1persecurity.com/wordpress/request-a-quote/)
|
||||
|
||||
## Install
|
||||
|
||||
### Linux (Kali / Ubuntu / Debian / Parrot)
|
||||
|
||||
```bash
|
||||
git clone https://github.com/1N3/Sn1per.git
|
||||
## Kali/Ubuntu/Debian/Parrot Linux Install
|
||||
```
|
||||
git clone https://github.com/1N3/Sn1per
|
||||
cd Sn1per
|
||||
sudo bash install.sh
|
||||
bash install.sh
|
||||
```
|
||||
|
||||
> Sn1per installs to `/usr/share/sniper` and requires root. Use `sudo bash install.sh force` to skip the confirmation prompt.
|
||||
## AWS AMI (Free Tier) VPS Install
|
||||
[](https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno)
|
||||
|
||||
### Docker
|
||||
To install Sn1per using an AWS EC2 instance:
|
||||
|
||||
[Sn1per on Docker Hub →](https://hub.docker.com/r/sn1persecurity/sn1per)
|
||||
1. Go to https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno and click the “Continue to Subscribe” button
|
||||
2. Click the “Continue to Configuration” button
|
||||
3. Click the “Continue to Launch” button
|
||||
4. Login via SSH using the public IP of the new EC2 instance
|
||||
|
||||
#### Kali Linux base
|
||||
## Docker Install
|
||||
[](https://hub.docker.com/r/sn1persecurity/sn1per)
|
||||
|
||||
```bash
|
||||
sudo docker compose up
|
||||
sudo docker run --privileged -it sn1per-kali-linux /bin/bash
|
||||
From a new Docker console, run the following commands.
|
||||
```
|
||||
Download https://raw.githubusercontent.com/1N3/Sn1per/master/Dockerfile
|
||||
docker build -t sn1per .
|
||||
docker run -it sn1per /bin/bash
|
||||
|
||||
#### BlackArch base
|
||||
or
|
||||
|
||||
```bash
|
||||
sudo docker compose -f docker-compose-blackarch.yml up
|
||||
sudo docker run --privileged -it sn1per-blackarch /bin/bash
|
||||
docker pull xer0dayz/sn1per
|
||||
docker run -it xer0dayz/sn1per /bin/bash
|
||||
```
|
||||
|
||||
### AWS Marketplace (EC2 AMI)
|
||||
|
||||
Subscribe via [AWS Marketplace](https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno):
|
||||
|
||||
1. Click **Continue to Subscribe**
|
||||
2. Click **Continue to Configuration**, choose region/instance type
|
||||
3. Click **Continue to Launch**
|
||||
4. SSH to the EC2 public IP — Sn1per is preinstalled
|
||||
|
||||
## Quick Start
|
||||
|
||||
```bash
|
||||
sudo bash install.sh
|
||||
sniper -t example.com -m normal
|
||||
```
|
||||
|
||||
Results land in `/usr/share/sniper/loot/<workspace>/`. See [Usage](#usage) for more modes.
|
||||
|
||||
## Usage
|
||||
|
||||
```
|
||||
[*] NORMAL MODE
|
||||
sniper -t <TARGET>
|
||||
|
|
@ -170,7 +89,7 @@ sniper -t <TARGET> -o -re
|
|||
sniper -t <TARGET> -m stealth -o -re
|
||||
|
||||
[*] DISCOVER MODE
|
||||
sniper -t <CIDR> -m discover -w <WORKSPACE_ALIAS>
|
||||
sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>
|
||||
|
||||
[*] SCAN ONLY SPECIFIC PORT
|
||||
sniper -t <TARGET> -m port -p <portnum>
|
||||
|
|
@ -188,7 +107,7 @@ sniper -t <TARGET> -m webporthttp -p <port>
|
|||
sniper -t <TARGET> -m webporthttps -p <port>
|
||||
|
||||
[*] HTTP WEBSCAN MODE
|
||||
sniper -t <TARGET> -m webscan
|
||||
sniper -t <TARGET> -m webscan
|
||||
|
||||
[*] ENABLE BRUTEFORCE
|
||||
sniper -t <TARGET> -b
|
||||
|
|
@ -232,7 +151,7 @@ sniper -w <WORKSPACE_ALIAS> --reimport
|
|||
[*] LOOT REIMPORTALL FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --reimportall
|
||||
|
||||
[*] LOOT RELOAD FUNCTION
|
||||
[*] LOOT REIMPORT FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --reload
|
||||
|
||||
[*] LOOT EXPORT FUNCTION
|
||||
|
|
@ -246,130 +165,52 @@ sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>
|
|||
|
||||
[*] UPDATE SNIPER
|
||||
sniper -u|--update
|
||||
|
||||
[*] VERBOSE OUTPUT (NEW IN 2026)
|
||||
sniper -t <TARGET> -m airstrike -v
|
||||
|
||||
[*] DEBUG OUTPUT (NEW IN 2026)
|
||||
sniper -t <TARGET> -m normal -db
|
||||
|
||||
[*] REMOVE RESUME FILES (NEW IN 2026)
|
||||
sniper -t <TARGET> -m airstrike -v -rr
|
||||
```
|
||||
|
||||
## Scan Modes
|
||||
## Modes
|
||||
* **NORMAL:** Performs basic scan of targets and open ports using both active and passive checks for optimal performance.
|
||||
* **STEALTH:** Quickly enumerate single targets using mostly non-intrusive scans to avoid WAF/IPS blocking.
|
||||
* **FLYOVER:** Fast multi-threaded high level scans of multiple targets (useful for collecting high level data on many hosts quickly).
|
||||
* **AIRSTRIKE:** Quickly enumerates open ports/services on multiple hosts and performs basic fingerprinting. To use, specify the full location of the file which contains all hosts, IPs that need to be scanned and run ./sn1per /full/path/to/targets.txt airstrike to begin scanning.
|
||||
* **NUKE:** Launch full audit of multiple hosts specified in text file of choice. Usage example: ./sniper /pentest/loot/targets.txt nuke.
|
||||
* **DISCOVER:** Parses all hosts on a subnet/CIDR (ie. 192.168.0.0/16) and initiates a sniper scan against each host. Useful for internal network scans.
|
||||
* **PORT:** Scans a specific port for vulnerabilities. Reporting is not currently available in this mode.
|
||||
* **FULLPORTONLY:** Performs a full detailed port scan and saves results to XML.
|
||||
* **MASSPORTSCAN:** Runs a "fullportonly" scan on mutiple targets specified via the "-f" switch.
|
||||
* **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly.
|
||||
* **MASSWEB:** Runs "web" mode scans on multiple targets specified via the "-f" switch.
|
||||
* **WEBPORTHTTP:** Launches a full HTTP web application scan against a specific host and port.
|
||||
* **WEBPORTHTTPS:** Launches a full HTTPS web application scan against a specific host and port.
|
||||
* **WEBSCAN:** Launches a full HTTP & HTTPS web application scan against via Burpsuite and Arachni.
|
||||
* **MASSWEBSCAN:** Runs "webscan" mode scans of multiple targets specified via the "-f" switch.
|
||||
* **VULNSCAN:** Launches a OpenVAS vulnerability scan.
|
||||
* **MASSVULNSCAN:** Launches a "vulnscan" mode scans on multiple targets specified via the "-f" switch.
|
||||
|
||||
| Mode | Description |
|
||||
|------|-------------|
|
||||
| `normal` | Active + passive scan of the target and its open ports |
|
||||
| `stealth` | Quick, mostly non-intrusive enumeration to avoid WAF / IPS |
|
||||
| `flyover` | Fast multi-threaded high-level scans of many hosts |
|
||||
| `airstrike` | Open-port enumeration + basic fingerprinting against a host file |
|
||||
| `nuke` | Full audit across all targets in a host file |
|
||||
| `discover` | Walks a CIDR and runs Sn1per on every live host |
|
||||
| `port` | Targeted scan of a specific port |
|
||||
| `fullportonly` | Full TCP port scan, results saved to XML |
|
||||
| `web` | Web app scan on `80/tcp` + `443/tcp` only |
|
||||
| `webporthttp` / `webporthttps` | Web app scan on a specific HTTP / HTTPS port |
|
||||
| `webscan` | Full HTTP + HTTPS web app scan via Burp Suite + Arachni |
|
||||
| `vulnscan` | OpenVAS vulnerability scan |
|
||||
| `mass*` | Multi-target variants of the above (`-f targets.txt`) |
|
||||
## Help Topics
|
||||
- [x] Plugins & Tools (https://github.com/1N3/Sn1per/wiki/Plugins-&-Tools)
|
||||
- [x] Scheduled scans (https://github.com/1N3/Sn1per/wiki/Scheduled-Scans)
|
||||
- [x] Sn1per Configuration Options (https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Options)
|
||||
- [x] Sn1per Configuration Templates (https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Templates)
|
||||
- [x] Sc0pe Templates (https://github.com/1N3/Sn1per/wiki/Sc0pe-Templates)
|
||||
|
||||
## Integrations
|
||||
## Integration Guides
|
||||
- [x] Github API integration (https://github.com/1N3/Sn1per/wiki/Github-API-Integration)
|
||||
- [x] Burpsuite Professional 2.x integration (https://github.com/1N3/Sn1per/wiki/Burpsuite-Professional-2.x-Integration)
|
||||
- [x] OWASP ZAP integration (https://github.com/1N3/Sn1per/wiki/OWASP-ZAP-Integration)
|
||||
- [x] Shodan API integration (https://github.com/1N3/Sn1per/wiki/Shodan-Integration)
|
||||
- [x] Censys API integration (https://github.com/1N3/Sn1per/wiki/Censys-API-Integration)
|
||||
- [x] Hunter.io API integration (https://github.com/1N3/Sn1per/wiki/Hunter.io-API-Integration)
|
||||
- [x] Metasploit integration (https://github.com/1N3/Sn1per/wiki/Metasploit-Integration)
|
||||
- [x] Nessus integration (https://github.com/1N3/Sn1per/wiki/Nessus-Integration)
|
||||
- [x] OpenVAS API integration (https://github.com/1N3/Sn1per/wiki/OpenVAS-Integration)
|
||||
- [x] GVM 21.x integration (https://github.com/1N3/Sn1per/wiki/GVM-21.x-Integration)
|
||||
- [x] Slack API integration (https://github.com/1N3/Sn1per/wiki/Slack-API-Integration)
|
||||
- [x] WPScan API integration (https://github.com/1N3/Sn1per/wiki/WPScan-API-Integration)
|
||||
|
||||
Sn1per ships with native integrations for **90+ tools and services**. Featured partners:
|
||||
## License & Legal Agreement
|
||||
For license and legal information, refer to the LICENSE.md (https://github.com/1N3/Sn1per/blob/master/LICENSE.md) file in this repository.
|
||||
|
||||
| Category | Integrations |
|
||||
|----------|--------------|
|
||||
| **Vulnerability scanners** | [Nessus](https://github.com/1N3/Sn1per/wiki/Nessus-Integration) · [OpenVAS](https://github.com/1N3/Sn1per/wiki/OpenVAS-Integration) · [GVM 21.x](https://github.com/1N3/Sn1per/wiki/GVM-21.x-Integration) · Nuclei |
|
||||
| **Web app testing** | [Burp Suite Pro](https://github.com/1N3/Sn1per/wiki/Burpsuite-Professional-2.x-Integration) · [OWASP ZAP](https://github.com/1N3/Sn1per/wiki/OWASP-ZAP-Integration) · [WPScan](https://github.com/1N3/Sn1per/wiki/WPScan-API-Integration) |
|
||||
| **Exploitation** | [Metasploit](https://github.com/1N3/Sn1per/wiki/Metasploit-Integration) |
|
||||
| **Reconnaissance** | [Shodan](https://github.com/1N3/Sn1per/wiki/Shodan-Integration) · [Censys](https://github.com/1N3/Sn1per/wiki/Censys-API-Integration) · [Hunter.io](https://github.com/1N3/Sn1per/wiki/Hunter.io-API-Integration) · VirusTotal · Nmap |
|
||||
| **AI / LLM** | OpenAI · Claude · Gemini |
|
||||
| **Notifications & DevOps** | [Slack](https://github.com/1N3/Sn1per/wiki/Slack-API-Integration) · [GitHub API](https://github.com/1N3/Sn1per/wiki/Github-API-Integration) |
|
||||
## Purchase Sn1per Professional
|
||||
To obtain a Sn1per Professional license, go to https://sn1persecurity.com.
|
||||
|
||||
[Browse all integrations on the wiki →](https://github.com/1N3/Sn1per/wiki)
|
||||
|
||||
## Documentation & Help
|
||||
|
||||
- [Getting Started](docs/getting-started.md)
|
||||
- [Installation](docs/installation.md)
|
||||
- [Configuration](docs/configuration.md)
|
||||
- [Usage](docs/usage.md)
|
||||
- [Architecture](docs/architecture.md)
|
||||
- [Integrations](docs/integrations.md)
|
||||
- [Troubleshooting](docs/troubleshooting.md)
|
||||
- [Wiki — full reference](https://github.com/1N3/Sn1per/wiki)
|
||||
- [Sn1per Documentation Hub](https://sn1persecurity.com/wordpress/documentation/)
|
||||
- [Passive Reconnaissance Techniques for Penetration Testers](https://sn1persecurity.com/wordpress/passive-reconnaissance-techniques-for-penetration-testing/)
|
||||
- [CVE-2024-21733 — Apache Tomcat HTTP Request Smuggling writeup](https://sn1persecurity.com/wordpress/cve-2024-21733-apache-tomcat-http-request-smuggling/)
|
||||
|
||||
### Configuration & Templates
|
||||
|
||||
- [Plugins & Tools](https://github.com/1N3/Sn1per/wiki/Plugins-&-Tools)
|
||||
- [Scheduled Scans](https://github.com/1N3/Sn1per/wiki/Scheduled-Scans)
|
||||
- [Sn1per Configuration Options](https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Options)
|
||||
- [Sn1per Configuration Templates](https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Templates)
|
||||
- [Sc0pe Templates](https://github.com/1N3/Sn1per/wiki/Sc0pe-Templates)
|
||||
|
||||
## News & Releases
|
||||
|
||||
- **[Sn1per Professional 2026 Released](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)** - April 26, 2026
|
||||
- [Introducing SILENTCHAIN AI Community Edition v1.1.3](https://sn1persecurity.com/wordpress/introducing-silentchain-ai-community-edition-v1-1-3/) - February 11, 2026
|
||||
- [Sn1per SE v11.0 Now Available](https://sn1persecurity.com/wordpress/sn1per-se-v11-released/) - January 8, 2026
|
||||
|
||||
### Guides & deep dives (2026)
|
||||
|
||||
**Reconnaissance**
|
||||
|
||||
- [Reconnaissance Methodology](https://sn1persecurity.com/wordpress/reconnaissance-methodology/) - Sn1per's full recon-to-report workflow, phase by phase, from OSINT to reporting
|
||||
- [Subdomain Enumeration](https://sn1persecurity.com/wordpress/subdomain-enumeration/) - passive sources, active brute force, and subdomain-takeover checks
|
||||
- [Active Reconnaissance](https://sn1persecurity.com/wordpress/active-reconnaissance/) - port scanning, service and technology fingerprinting, and endpoint discovery
|
||||
|
||||
**Penetration testing**
|
||||
|
||||
- [Automated Penetration Testing](https://sn1persecurity.com/wordpress/automated-penetration-testing/) - the method, the tooling, and the continuous-testing model
|
||||
- [Best Automated Pentest Tools](https://sn1persecurity.com/wordpress/automated-pentest-tools/) - the 2026 open-source and all-in-one pentest tooling landscape
|
||||
- [Continuous Penetration Testing (PTaaS)](https://sn1persecurity.com/wordpress/continuous-penetration-testing/) - the always-on model beyond the once-a-year pentest
|
||||
|
||||
**Attack surface management**
|
||||
|
||||
- [Red Team Attack Surface Management](https://sn1persecurity.com/wordpress/red-team-attack-surface-management/) - running Sn1per as a continuous red-team and adversarial-exposure-validation workflow
|
||||
- [Adversarial Exposure Validation](https://sn1persecurity.com/wordpress/adversarial-exposure-validation/) - proving which exposures are actually exploitable, not just present
|
||||
- [Continuous Attack Surface Testing](https://sn1persecurity.com/wordpress/continuous-attack-surface-testing/) - daily-cadence rescans that diff yesterday's surface against today's
|
||||
- [On-Prem External Attack Surface Management](https://sn1persecurity.com/wordpress/best-on-prem-external-attack-surface-management-platform/) - self-hosted, air-gapped ASM with zero data leaving your perimeter
|
||||
- [Open-Source Self-Hosted ASM Tools](https://sn1persecurity.com/wordpress/open-source-self-hosted-attack-surface-management-tools/) - the self-hosted attack surface management tooling landscape
|
||||
- [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/) - background reading on the ASM use case
|
||||
|
||||
[All releases & blog posts →](https://sn1persecurity.com/wordpress/blog/)
|
||||
|
||||
## Community & Support
|
||||
|
||||
- **Bugs:** [Open an issue](https://github.com/1N3/Sn1per/issues)
|
||||
- **Twitter:** [@xer0dayz](https://twitter.com/xer0dayz)
|
||||
- **YouTube:** [Sn1per Security](https://www.youtube.com/c/Sn1perSecurity/videos) - latest demo: [Continuous Attack Surface Testing](https://youtu.be/GBr7vjbGRBA)
|
||||
- **Email (Pro / Enterprise customers):** see your license email
|
||||
|
||||
## Contributing
|
||||
|
||||
Pull requests welcome. For substantial changes, open an issue first to discuss the design.
|
||||
|
||||
- Mode scripts live in [`modes/`](modes/) — one bash file per scan mode
|
||||
- Test changes against a controlled target before opening a PR
|
||||
- Follow [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format in [`CHANGELOG.md`](CHANGELOG.md)
|
||||
|
||||
35 contributors and counting. Thank you.
|
||||
|
||||
## License & Legal
|
||||
|
||||
- **Code:** see [`LICENSE.md`](LICENSE.md) and [`THIRD_PARTY_LICENSES.md`](THIRD_PARTY_LICENSES.md)
|
||||
- **Notices:** see [`NOTICE`](NOTICE)
|
||||
- **Trademark:** "Sn1per" and the Sn1per logo are trademarks of Sn1perSecurity LLC. Use in derivative works requires permission. Contact: [sn1persecurity.com](https://sn1persecurity.com)
|
||||
|
||||
---
|
||||
|
||||
## About Sn1perSecurity
|
||||
|
||||
Sn1per is built and maintained by [Sn1perSecurity](https://sn1persecurity.com), the team behind the [Sn1per attack surface management and automated penetration testing platform](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/). Small team of pentesters shipping offensive-security tooling since 2015. We focus on the workflows we want to use ourselves — fast recon, ergonomic reporting, honest pricing, and a Community Edition that genuinely keeps up with the commercial editions. If that resonates, [say hi](https://twitter.com/xer0dayz).
|
||||
|
||||
**Topics:** `penetration-testing` · `offensive-security` · `attack-surface-management` · `vulnerability-scanner` · `recon` · `osint` · `red-team` · `bug-bounty` · `security-tools`
|
||||
Attack Surface Management (ASM) | Continuous Attack Surface Testing (CAST) | Attack Surface Software | Attack Surface Platform | Continuous Automated Red Teaming (CART) | Vulnerability & Attack Surface Management | Red Team | Threat Intel | Application Security | Cybersecurity | IT Asset Discovery | Automated Penetration Testing | Hacking Tools | Recon Tool | Bug Bounty Tool | Vulnerability Scanner | Attack Surface Analysis | Attack Surface Reduction | Attack Surface Detector | Attack Surface Monitoring | Attack Surface Review | Attack Surface Discovery | Digital Threat Management | Risk Assessment | Threat Remediation | Offensive Security Framework | Automated Penetration Testing Framework | External Threat Management | Internal IT Asset Discovery | Security Orchestration and Automation (SOAR) | Sn1per tutorial | Sn1per tool | Sn1per metasploit | Sn1per for windows | Sn1per review | Sn1per download | how to use Sn1per | Sn1per professional download | Sn1per professional crack | automated pentesting framework | pentest-tools github | ad pentest tools | pentest-tools review | security testing tools | ubuntu pentesting tools | pentesting tools for mac | cloud-based pen-testing tools
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
Binary file not shown.
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -146,7 +142,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="1"
|
||||
TOMBAIO="1"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -187,7 +182,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -64,10 +64,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -172,7 +168,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -185,7 +180,7 @@ URLSCANIO="1"
|
|||
# DYNAMIC APPLICATION SCANNERS
|
||||
BURP_SCAN="0"
|
||||
ARACHNI_SCAN="0"
|
||||
ZAP_SCAN="1"
|
||||
ZAP_SCAN="0"
|
||||
|
||||
# ACTIVE WEB PLUGINS
|
||||
SC0PE_VULNERABLITY_SCANNER="1"
|
||||
|
|
@ -211,7 +206,7 @@ SMUGGLER="1"
|
|||
WAYBACKMACHINE="1"
|
||||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
HACKERTARGET="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -146,7 +142,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="1"
|
||||
TOMBAIO="1"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -186,7 +181,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="1"
|
||||
TOMBAIO="1"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="1"
|
||||
TOMBAIO="1"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="0"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -181,7 +176,7 @@ WAYBACKMACHINE="0"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="0"
|
||||
HACKERTARGET="0"
|
||||
GAU="0"
|
||||
GUA="0"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="0"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -142,7 +138,6 @@ INURLBR="0"
|
|||
THEHARVESTER="0"
|
||||
METAGOOFIL="0"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="0"
|
||||
EMAILFORMAT="0"
|
||||
ULTRATOOLS="0"
|
||||
|
|
@ -181,7 +176,7 @@ WAYBACKMACHINE="0"
|
|||
SSL="0"
|
||||
PASSIVE_SPIDER="0"
|
||||
HACKERTARGET="0"
|
||||
GAU="0"
|
||||
GUA="0"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="0"
|
||||
|
||||
|
|
|
|||
|
|
@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -146,7 +142,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="1"
|
||||
TOMBAIO="1"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -187,7 +182,7 @@ WAYBACKMACHINE="1"
|
|||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
HACKERTARGET="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
||||
|
|
|
|||
|
|
@ -1,14 +0,0 @@
|
|||
version: '3.9'
|
||||
|
||||
x-logging: &default-logging
|
||||
options:
|
||||
max-size: "40m"
|
||||
max-file: "10"
|
||||
driver: json-file
|
||||
|
||||
services:
|
||||
blackarch:
|
||||
container_name: blackarch
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile.blackarch
|
||||
|
|
@ -1,14 +0,0 @@
|
|||
version: '3.9'
|
||||
|
||||
x-logging: &default-logging
|
||||
options:
|
||||
max-size: "40m"
|
||||
max-file: "10"
|
||||
driver: json-file
|
||||
|
||||
services:
|
||||
kali-linux:
|
||||
container_name: kali-linux
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile
|
||||
1291
install.sh
1291
install.sh
File diff suppressed because it is too large
Load Diff
|
|
@ -258,7 +258,7 @@ else
|
|||
echo -e "$OKRED RUNNING SSH AUDIT $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd $PLUGINS_DIR/ssh-audit
|
||||
python3 ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt
|
||||
python ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt
|
||||
fi
|
||||
fi
|
||||
cd $INSTALL_DIR
|
||||
|
|
@ -511,7 +511,7 @@ else
|
|||
echo -e "$OKRED RUNNING SMB ENUMERATION $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port139.txt
|
||||
python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt
|
||||
python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt
|
||||
nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port139.txt
|
||||
fi
|
||||
if [[ "$NMAP_SCRIPTS" = "1" ]]; then
|
||||
|
|
@ -616,7 +616,7 @@ else
|
|||
echo -e "$OKRED ENUMERATING SMB/NETBIOS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port445.txt
|
||||
python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt
|
||||
python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt
|
||||
nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port445.txt
|
||||
fi
|
||||
if [[ "$NMAP_SCRIPTS" = "1" ]]; then
|
||||
|
|
@ -1256,4 +1256,4 @@ if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
|||
fi
|
||||
if [[ "$LOOT" = "1" ]] && [[ -z "$NOLOOT" ]]; then
|
||||
loot
|
||||
fi
|
||||
fi
|
||||
|
|
@ -24,7 +24,7 @@ wpif [[ "$MODE" = "web" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -166,14 +166,14 @@ wpif [[ "$MODE" = "web" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt
|
||||
python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt
|
||||
fi
|
||||
if [[ "$JEXBOSS" = "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING JEXBOSS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd /tmp/
|
||||
python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw
|
||||
python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw
|
||||
sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port80.raw > $LOOT_DIR/web/jexboss-$TARGET-port80.txt 2> /dev/null
|
||||
rm -f $LOOT_DIR/web/jexboss-$TARGET-port80.raw 2> /dev/null
|
||||
cd $INSTALL_DIR
|
||||
|
|
@ -197,4 +197,4 @@ wpif [[ "$MODE" = "web" ]]; then
|
|||
if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
||||
/bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per HTTP web scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
|
@ -24,7 +24,7 @@ if [[ "$MODE" = "web" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -163,14 +163,14 @@ if [[ "$MODE" = "web" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt
|
||||
python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt
|
||||
fi
|
||||
if [[ "$JEXBOSS" = "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING JEXBOSS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd /tmp/
|
||||
python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw
|
||||
python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw
|
||||
sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port443.raw > $LOOT_DIR/web/jexboss-$TARGET-port443.txt 2> /dev/null
|
||||
rm -f $LOOT_DIR/web/jexboss-$TARGET-port443.raw 2> /dev/null
|
||||
cd $INSTALL_DIR
|
||||
|
|
@ -193,4 +193,4 @@ if [[ "$MODE" = "web" ]]; then
|
|||
if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
||||
/bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per HTTPS web scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
|
@ -76,7 +76,7 @@ if [[ "$OSINT" = "1" ]]; then
|
|||
echo -e "$OKRED COLLECTING OSINT FROM ONLINE DOCUMENTS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd $INSTALL_DIR/plugins/metagoofil/
|
||||
python3 metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null
|
||||
python metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null
|
||||
cd $INSTALL_DIR
|
||||
if [[ "$SLACK_NOTIFICATIONS_METAGOOFIL" == "1" ]]; then
|
||||
/bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/osint/metagoofil-$TARGET.txt"
|
||||
|
|
@ -94,12 +94,6 @@ if [[ "$OSINT" = "1" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -s "https://api.hunter.io/v2/domain-search?domain=$TARGET&api_key=$HUNTERIO_KEY" | egrep "name|value|domain|company|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/hunterio-$TARGET.txt 2> /dev/null
|
||||
fi
|
||||
if [[ "$TOMBAIO" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED GATHERING EMAILS VIA TOMBA.IO $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -H "X-Tomba-Key: $TOMBAIO_KEY" -H "X-Tomba-Secret: $TOMBAIO_SECRET" -s "https://api.tomba.io/v1/domain-search?domain=$TARGET" | egrep "email|organization|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/tombaio$TARGET.txt 2> /dev/null
|
||||
fi
|
||||
if [[ "$METASPLOIT_EXPLOIT" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED GATHERING EMAILS VIA METASPLOIT $RESET"
|
||||
|
|
|
|||
|
|
@ -11,7 +11,7 @@ if [[ "$RECON" = "1" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED GATHERING DNS SUBDOMAINS VIA SUBLIST3R $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null
|
||||
python /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null
|
||||
sed -ie 's/<BR>/\n/g' domains-$TARGET-full.txt 2> /dev/null
|
||||
mv -f $LOOT_DIR/domains/domains-$TARGET.txte $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null
|
||||
wc -l $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null
|
||||
|
|
@ -77,7 +77,7 @@ if [[ "$RECON" = "1" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED GATHERING CENSYS SUBDOMAINS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null
|
||||
python $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null
|
||||
wc -l $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null
|
||||
fi
|
||||
if [[ "$SHODAN" = "1" ]]; then
|
||||
|
|
@ -129,7 +129,7 @@ if [[ "$RECON" = "1" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED GATHERING SUBBRUTE SUBDOMAINS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
|
||||
python "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
|
||||
wc -l $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
|
||||
fi
|
||||
if [[ "$ALT_DNS" = "1" ]]; then
|
||||
|
|
@ -231,6 +231,16 @@ if [[ "$RECON" = "1" ]]; then
|
|||
/bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/subjack_new-$TARGET.txt"
|
||||
fi
|
||||
fi
|
||||
if [[ "$SLURP" = "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED STARTING PUBLIC S3 BUCKET SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd $PLUGINS_DIR/slurp/
|
||||
./slurp-linux-amd64 domain --domain $TARGET | tee $LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt 2>/dev/null
|
||||
if [[ "$SLACK_NOTIFICATIONS_S3_BUCKETS" == "1" ]]; then
|
||||
/bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt"
|
||||
fi
|
||||
fi
|
||||
if [[ "$ASN_CHECK" = "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RETRIEVING ASN INFO $RESET"
|
||||
|
|
@ -260,4 +270,4 @@ if [[ "$RECON" = "1" ]]; then
|
|||
if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
||||
/bin/bash "$INSTALL_DIR/bin/slack.sh" "[sn1persecurity.com] •?((¯°·._.• Finished Sn1per scan: $TARGET [recon] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•"
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
|
@ -225,11 +225,11 @@ if [[ "$MODE" = "stealth" ]]; then
|
|||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
|
||||
echo " "
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
|
||||
gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$BLACKWIDOW" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -383,11 +383,11 @@ if [[ "$MODE" = "stealth" ]]; then
|
|||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
|
||||
echo " "
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
|
||||
gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$BLACKWIDOW" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -528,4 +528,4 @@ if [[ "$MODE" = "stealth" ]]; then
|
|||
loot
|
||||
fi
|
||||
exit
|
||||
fi
|
||||
fi
|
||||
|
|
@ -179,7 +179,7 @@ if [[ "$MODE" = "webporthttp" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -325,14 +325,14 @@ if [[ "$MODE" = "webporthttp" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
|
||||
python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
|
||||
fi
|
||||
if [[ "$JEXBOSS" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING JEXBOSS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd /tmp/
|
||||
python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
|
||||
python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
|
||||
sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null
|
||||
rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null
|
||||
cd $INSTALL_DIR
|
||||
|
|
|
|||
|
|
@ -195,7 +195,7 @@ if [[ "$MODE" = "webporthttps" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
|
||||
fi
|
||||
if [[ "$GAU" == "1" ]]; then
|
||||
if [[ "$GUA" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED FETCHING GUA URLS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -334,14 +334,14 @@ if [[ "$MODE" = "webporthttps" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
|
||||
python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
|
||||
fi
|
||||
if [[ "$JEXBOSS" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING JEXBOSS $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
cd /tmp/
|
||||
python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
|
||||
python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
|
||||
sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null
|
||||
rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null
|
||||
cd $INSTALL_DIR
|
||||
|
|
|
|||
|
|
@ -130,8 +130,8 @@ if [[ "$MODE" = "webscan" ]]; then
|
|||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
echo -e "$OKRED RUNNING NUCLEI SCAN $RESET"
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt
|
||||
nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt
|
||||
nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt
|
||||
nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt
|
||||
fi
|
||||
if [[ "$SC0PE_VULNERABLITY_SCANNER" == "1" ]]; then
|
||||
echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
|
||||
|
|
@ -162,4 +162,4 @@ if [[ "$MODE" = "webscan" ]]; then
|
|||
fi
|
||||
loot
|
||||
exit
|
||||
fi
|
||||
fi
|
||||
234
sniper
234
sniper
|
|
@ -8,7 +8,7 @@ if [[ $EUID -ne 0 ]]; then
|
|||
exit 1
|
||||
fi
|
||||
|
||||
VER="9.2"
|
||||
VER="9.1"
|
||||
INSTALL_DIR="/usr/share/sniper"
|
||||
LOOT_DIR="$INSTALL_DIR/loot/$TARGET"
|
||||
SNIPER_PRO=$INSTALL_DIR/pro.sh
|
||||
|
|
@ -46,105 +46,101 @@ DISTRO=$(cat /etc/*-release | grep DISTRIB_ID= | cut -d'=' -f2)
|
|||
|
||||
function help {
|
||||
logo
|
||||
local star
|
||||
printf -v star "$OKBLUE[*]$RESET"
|
||||
cat <<EOHELP
|
||||
|
||||
$star NORMAL MODE
|
||||
sniper -t <TARGET>
|
||||
|
||||
$star SPECIFY CUSTOM CONFIG FILE
|
||||
sniper -c /full/path/to/sniper.conf -t <TARGET> -m <MODE> -w <WORKSPACE>
|
||||
|
||||
$star NORMAL MODE + OSINT + RECON
|
||||
sniper -t <TARGET> -o -re
|
||||
|
||||
$star STEALTH MODE + OSINT + RECON
|
||||
sniper -t <TARGET> -m stealth -o -re
|
||||
|
||||
$star DISCOVER MODE
|
||||
sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>
|
||||
|
||||
$star SCAN ONLY SPECIFIC PORT
|
||||
sniper -t <TARGET> -m port -p <portnum>
|
||||
|
||||
$star FULLPORTONLY SCAN MODE
|
||||
sniper -t <TARGET> -fp
|
||||
|
||||
$star WEB MODE - PORT 80 + 443 ONLY!
|
||||
sniper -t <TARGET> -m web
|
||||
|
||||
$star HTTP WEB PORT MODE
|
||||
sniper -t <TARGET> -m webporthttp -p <port>
|
||||
|
||||
$star HTTPS WEB PORT MODE
|
||||
sniper -t <TARGET> -m webporthttps -p <port>
|
||||
|
||||
$star HTTP WEBSCAN MODE
|
||||
sniper -t <TARGET> -m webscan
|
||||
|
||||
$star ENABLE BRUTEFORCE
|
||||
sniper -t <TARGET> -b
|
||||
|
||||
$star AIRSTRIKE MODE
|
||||
sniper -f targets.txt -m airstrike
|
||||
|
||||
$star NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED
|
||||
sniper -f targets.txt -m nuke -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star MASS PORT SCAN MODE
|
||||
sniper -f targets.txt -m massportscan -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star MASS WEB SCAN MODE
|
||||
sniper -f targets.txt -m massweb -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star MASS WEBSCAN SCAN MODE
|
||||
sniper -f targets.txt -m masswebscan -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star MASS VULN SCAN MODE
|
||||
sniper -f targets.txt -m massvulnscan -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star PORT SCAN MODE
|
||||
sniper -t <TARGET> -m port -p <PORT_NUM>
|
||||
|
||||
$star LIST WORKSPACES
|
||||
sniper --list
|
||||
|
||||
$star DELETE WORKSPACE
|
||||
sniper -w <WORKSPACE_ALIAS> -d
|
||||
|
||||
$star DELETE HOST FROM WORKSPACE
|
||||
sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dh
|
||||
|
||||
$star DELETE TASKS FROM WORKSPACE
|
||||
sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dt
|
||||
|
||||
$star GET SNIPER SCAN STATUS
|
||||
sniper --status
|
||||
|
||||
$star LOOT REIMPORT FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --reimport
|
||||
|
||||
$star LOOT REIMPORTALL FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --reimportall
|
||||
|
||||
$star LOOT REIMPORT FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --reload
|
||||
|
||||
$star LOOT EXPORT FUNCTION
|
||||
sniper -w <WORKSPACE_ALIAS> --export
|
||||
|
||||
$star SCHEDULED SCANS
|
||||
sniper -w <WORKSPACE_ALIAS> -s daily|weekly|monthly
|
||||
|
||||
$star USE A CUSTOM CONFIG
|
||||
sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>
|
||||
|
||||
$star UPDATE SNIPER
|
||||
sniper -u|--update
|
||||
|
||||
|
||||
EOHELP
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET NORMAL MODE"
|
||||
echo ' sniper -t <TARGET>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET SPECIFY CUSTOM CONFIG FILE"
|
||||
echo ' sniper -c /full/path/to/sniper.conf -t <TARGET> -m <MODE> -w <WORKSPACE>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET NORMAL MODE + OSINT + RECON"
|
||||
echo ' sniper -t <TARGET> -o -re'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET STEALTH MODE + OSINT + RECON"
|
||||
echo ' sniper -t <TARGET> -m stealth -o -re'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET DISCOVER MODE"
|
||||
echo ' sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET SCAN ONLY SPECIFIC PORT"
|
||||
echo ' sniper -t <TARGET> -m port -p <portnum>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET FULLPORTONLY SCAN MODE"
|
||||
echo ' sniper -t <TARGET> -fp'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET WEB MODE - PORT 80 + 443 ONLY!"
|
||||
echo ' sniper -t <TARGET> -m web'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET HTTP WEB PORT MODE"
|
||||
echo ' sniper -t <TARGET> -m webporthttp -p <port>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET HTTPS WEB PORT MODE"
|
||||
echo ' sniper -t <TARGET> -m webporthttps -p <port>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET HTTP WEBSCAN MODE"
|
||||
echo ' sniper -t <TARGET> -m webscan '
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET ENABLE BRUTEFORCE"
|
||||
echo ' sniper -t <TARGET> -b'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET AIRSTRIKE MODE"
|
||||
echo ' sniper -f targets.txt -m airstrike'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED"
|
||||
echo ' sniper -f targets.txt -m nuke -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET MASS PORT SCAN MODE"
|
||||
echo ' sniper -f targets.txt -m massportscan -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET MASS WEB SCAN MODE"
|
||||
echo ' sniper -f targets.txt -m massweb -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET MASS WEBSCAN SCAN MODE"
|
||||
echo ' sniper -f targets.txt -m masswebscan -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET MASS VULN SCAN MODE"
|
||||
echo ' sniper -f targets.txt -m massvulnscan -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET PORT SCAN MODE"
|
||||
echo ' sniper -t <TARGET> -m port -p <PORT_NUM>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET LIST WORKSPACES"
|
||||
echo ' sniper --list'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET DELETE WORKSPACE"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> -d'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET DELETE HOST FROM WORKSPACE"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dh'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET DELETE TASKS FROM WORKSPACE"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dt'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET GET SNIPER SCAN STATUS"
|
||||
echo ' sniper --status'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> --reimport'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET LOOT REIMPORTALL FUNCTION"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> --reimportall'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> --reload'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET LOOT EXPORT FUNCTION"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> --export'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET SCHEDULED SCANS"
|
||||
echo ' sniper -w <WORKSPACE_ALIAS> -s daily|weekly|monthly'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET USE A CUSTOM CONFIG"
|
||||
echo ' sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>'
|
||||
echo ""
|
||||
echo -e "$OKBLUE[*]$RESET UPDATE SNIPER"
|
||||
echo ' sniper -u|--update'
|
||||
echo ""
|
||||
echo ""
|
||||
exit
|
||||
}
|
||||
|
||||
|
|
@ -168,6 +164,15 @@ function sniper_status {
|
|||
# CHECK FOR UPDATES
|
||||
function check_update {
|
||||
if [[ "$ENABLE_AUTO_UPDATES" == "1" ]] && [[ "$ONLINE" == "1" ]]; then
|
||||
if [[ -f "$INSTALL_DIR/pro/settings.php" ]]; then
|
||||
LICENSE_KEY=$(grep "LICENSE_KEY" $INSTALL_DIR/pro/settings.php | cut -d\" -f2 2> /dev/null)
|
||||
VERSION=$(grep 9.0 $INSTALL_DIR/pro.sh | wc -c)
|
||||
if [[ $VERSION = "71" ]]; then
|
||||
PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/9.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
|
||||
else
|
||||
PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/8.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
|
||||
fi
|
||||
fi
|
||||
LATEST_VER=$(curl --connect-timeout 5 -s https://api.github.com/repos/1N3/Sn1per/tags | grep -Po '"name":.*?[^\\]",'| head -1 | cut -c11-13)
|
||||
if [[ "$LATEST_VER" != "$VER" ]]; then
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE] sniper v$LATEST_VER is available to download... To update, type$OKRED \"sniper -u\" $RESET"
|
||||
|
|
@ -183,6 +188,15 @@ function update {
|
|||
if [[ "$ONLINE" == "0" ]]; then
|
||||
echo "You will need to download the latest release manually at https://github.com/1N3/Sn1per/"
|
||||
else
|
||||
if [[ -f "$INSTALL_DIR/pro/settings.php" ]]; then
|
||||
LICENSE_KEY=$(grep "LICENSE_KEY" $INSTALL_DIR/pro/settings.php | cut -d\" -f2 )
|
||||
VERSION=$(grep 9.0 $INSTALL_DIR/pro.sh | wc -c)
|
||||
if [[ $VERSION = "71" ]]; then
|
||||
PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/9.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
|
||||
else
|
||||
PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/8.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
|
||||
fi
|
||||
fi
|
||||
LATEST_VER=$(curl --connect-timeout 5 -s https://api.github.com/repos/1N3/Sn1per/tags | grep -Po '"name":.*?[^\\]",'| head -1 | cut -c11-13)
|
||||
if [[ "$LATEST_VER" != "$VER" ]]; then
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE] Sn1per $LATEST_VER is available to download...Do you want to update? (y or n)$RESET"
|
||||
|
|
@ -464,7 +478,7 @@ function init {
|
|||
service postgresql start 2> /dev/null > /dev/null
|
||||
msfdb start 2> /dev/null > /dev/null
|
||||
chown root /run/user/1000/gdm/Xauthority 2> /dev/null
|
||||
LAST_USER=$(last 2> /dev/null | head -n 1 | awk '{print $1}')
|
||||
LAST_USER=$(last | head -n 1 | awk '{print $1}')
|
||||
sudo cp -a /home/$LAST_USER/.Xauthority /root/.Xauthority 2> /dev/null
|
||||
sudo cp -a /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
||||
sudo cp -a /home/$USER/.Xauthority /root/.Xauthority 2> /dev/null
|
||||
|
|
@ -590,23 +604,7 @@ function loot {
|
|||
source $INSTALL_DIR/pro.sh
|
||||
fi
|
||||
else
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET ⚡ Upgrade to Sn1per Professional and unlock a world of powerful benefits! 🚀 $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}11.0 ${RESET}) offers unparalleled features, including: $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💻 Sleek Web UI $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛠️ Extensive add-ons $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔄 Seamless integrations $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🤝 Experience priority support, continuous updates, and enhanced capabilities tailored for professionals like you. $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💰 Maximize your investment and achieve exceptional results with Sn1per Professional. $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔍 Learn more about the differences between the versions at: ${OKBLUE}https://sn1persecurity.com/wordpress/sn1per-community-vs-professional-whats-the-difference/ $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET $RESET"
|
||||
echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛒 Purchase your Sn1per Professional license now at: ${OKBLUE}https://sn1persecurity.com/ $RESET"
|
||||
echo -e "$OKRED + -- --=[ Sn1per Professional is not installed. To download Sn1per Professional, go to https://sn1persecurity.com. $RESET"
|
||||
sudo $LAST_USER -c $BROWSER https://sn1persecurity.com 2> /dev/null > /dev/null &
|
||||
fi
|
||||
rm -f $UPDATED_TARGETS 2> /dev/null
|
||||
|
|
|
|||
|
|
@ -66,10 +66,6 @@ CENSYS_API_SECRET=""
|
|||
# HUNTER.IO API KEY
|
||||
HUNTERIO_KEY=""
|
||||
|
||||
# TOMBA.IO API
|
||||
TOMBAIO_KEY=""
|
||||
TOMBAIO_SECRET=""
|
||||
|
||||
# GITHUB API KEY
|
||||
GITHUB_API_KEY=""
|
||||
|
||||
|
|
@ -177,7 +173,6 @@ INURLBR="1"
|
|||
THEHARVESTER="1"
|
||||
METAGOOFIL="1"
|
||||
HUNTERIO="0"
|
||||
TOMBAIO="0"
|
||||
INTODNS="1"
|
||||
EMAILFORMAT="1"
|
||||
ULTRATOOLS="1"
|
||||
|
|
@ -217,7 +212,7 @@ SMUGGLER="1"
|
|||
WAYBACKMACHINE="1"
|
||||
SSL="1"
|
||||
PASSIVE_SPIDER="1"
|
||||
GAU="1"
|
||||
GUA="1"
|
||||
HACKERTARGET="1"
|
||||
CUTYCAPT="0"
|
||||
WEBSCREENSHOT="1"
|
||||
|
|
|
|||
Loading…
Reference in New Issue