.github/workflows/build-push-ghcr.yml

@@ -1,58 +0,0 @@
-name: Build and Push
-
-on:
-  push:
-    branches:
-      - main
-      - development
-      - feat*
-    tags:
-      - "v*"
-  pull_request:
-    branches:
-      - master
-
-env:
-  REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository }}
-
-jobs:
-  docker-build:
-    permissions:
-      contents: read
-      packages: write
-    runs-on: ubuntu-latest
-    steps:
-
-      - name: Setting environment variables
-        run: |
-          echo "repo_name=${{ env.IMAGE_NAME }}" >> $GITHUB_ENV
-
-      - uses: actions/checkout@v3
-
-      - name: Docker meta
-        id: meta
-        uses: docker/metadata-action@v4
-        with:
-          images: ${{ env.REGISTRY}}/${{ env.repo_name }}
-          flavor: latest=true
-          tags: |
-            type=ref,event=branch
-            type=ref,event=pr
-            type=semver,pattern={{version}}
-
-      - name: Login to image repository
-        uses: docker/login-action@v2
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Build and push
-        uses: docker/build-push-action@v3
-        with:
-          context: .
-          file: Dockerfile
-          push: ${{ github.ref_type == 'tag' || github.ref_name == 'main' || startsWith(github.ref_name, 'feat-')}}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/semgrep.yml

@@ -1,24 +0,0 @@
-on:
-  workflow_dispatch: {}
-  pull_request: {}
-  push:
-    branches:
-    - main
-    - master
-    paths:
-    - .github/workflows/semgrep.yml
-  schedule:
-  # random HH:MM to avoid a load spike on GitHub Actions at 00:00
-  - cron: 2 23 * * *
-name: Semgrep
-jobs:
-  semgrep:
-    name: semgrep/ci
-    runs-on: ubuntu-20.04
-    env:
-      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
-    container:
-      image: returntocorp/semgrep
-    steps:
-    - uses: actions/checkout@v3
-    - run: semgrep ci

CHANGELOG.md

@@ -1,10 +1,4 @@
 ## CHANGELOG:
-* v9.2 - Added Tomba.io API integration via OSINT mode (Credit: @benemohamed)
-* v9.2 - Fixed issue with gau tool not installing and updated GAU setting in confs
-* v9.2 - Updated python2 to python3
-* v9.2 - Removed Slurp tool
-* v9.2 - Added BlackArch Dockerfile (Credit: @AnonymousWP)
-* v9.2 - Updated DockerFile to latest Kali release (Credit: @AnonymousWP)
 * v9.1 - Fixed issue with dirsearch installation/command syntax update
 * v9.1 - Updated Nuclei sc0pe templates
 * v9.1 - Fixed issue with Nuclei sc0pe parsers not working

Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/kalilinux/kali-rolling:latest
+FROM kalilinux/kali-rolling
 
 LABEL org.label-schema.name='Sn1per - Kali Linux' \
     org.label-schema.description='Automated pentest framework for offensive security experts' \
@@ -14,21 +14,21 @@ RUN echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" > /e
 ENV DEBIAN_FRONTEND noninteractive
 
 RUN set -x \
-        && apt -yqq update \
+        && apt-get -yqq update \
-        && apt -yqq full-upgrade \
+        && apt-get -yqq dist-upgrade \
-        && apt clean
+        && apt-get clean
-RUN apt install --yes metasploit-framework
+RUN apt-get install -y metasploit-framework
 
 RUN sed -i 's/systemctl status ${PG_SERVICE}/service ${PG_SERVICE} status/g' /usr/bin/msfdb && \
     service postgresql start && \
     msfdb reinit
 
-WORKDIR /usr/src/app
+RUN apt-get --yes install git \
-
+    && mkdir -p security \
-RUN apt --yes install git bash
+    && cd security \
-RUN git clone https://github.com/1N3/Sn1per.git \
+    && git clone https://github.com/1N3/Sn1per.git \
     && cd Sn1per \
     && ./install.sh \
     && sniper -u force
 
-CMD ["sniper"]
+CMD ["bash"]

Dockerfile.blackarch

@@ -1,9 +0,0 @@
-FROM docker.io/blackarchlinux/blackarch:latest
-
-# Upgrade system
-RUN pacman -Syu --noconfirm
-
-# Install sn1per from official repository
-RUN pacman -Sy sn1per --noconfirm
-
-CMD ["sn1per"]

README.md

@@ -1,164 +1,83 @@
-[![Sn1per](https://sn1persecurity.com/wordpress/wp-content/uploads/2026/04/sn1per-professional-2026-hero-banner.png)](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)
+[![Sn1perSecurity](https://sn1persecurity.com/images/Sn1perSecurity-Attack-Surface-Management-header2.png)](https://sn1persecurity.com)
 
 [![GitHub release](https://img.shields.io/github/release/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/releases)
-[![License](https://img.shields.io/github/license/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/blob/master/LICENSE.md)
 [![GitHub issues](https://img.shields.io/github/issues/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/issues)
-[![Last commit](https://img.shields.io/github/last-commit/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/commits/master)
+[![Github Stars](https://img.shields.io/github/stars/1N3/Sn1per.svg?style=social&label=Stars)](https://github.com/1N3/Sn1per/)
-[![Contributors](https://img.shields.io/github/contributors/1N3/Sn1per.svg)](https://github.com/1N3/Sn1per/graphs/contributors)
+[![GitHub Followers](https://img.shields.io/github/followers/1N3.svg?style=social&label=Follow)](https://github.com/1N3/Sn1per/)
-
+[![Tweet](https://img.shields.io/twitter/url/http/xer0dayz.svg?style=social)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fdeveloper.twitter.com%2Fen%2Fdocs%2Ftwitter-for-websites%2Ftweet-button%2Foverview&ref_src=twsrc%5Etfw&text=Sn1per%20-%20Automated%20Pentest%20Recon%20Scanner&tw_p=tweetbutton&url=https%3A%2F%2Fgithub.com%2F1N3%2FSn1per)
-[![GitHub Stars](https://img.shields.io/github/stars/1N3/Sn1per.svg?style=social&label=Stars)](https://github.com/1N3/Sn1per/stargazers)
-[![GitHub Forks](https://img.shields.io/github/forks/1N3/Sn1per.svg?style=social&label=Forks)](https://github.com/1N3/Sn1per/network/members)
-[![GitHub Followers](https://img.shields.io/github/followers/1N3.svg?style=social&label=Follow)](https://github.com/1N3)
 [![Follow on Twitter](https://img.shields.io/twitter/follow/xer0dayz.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=xer0dayz)
 
-[[Products](https://sn1persecurity.com/wordpress/shop/)] [[Attack Surface Management](https://sn1persecurity.com/wordpress/use-cases/)] [[About Sn1per](https://sn1persecurity.com/wordpress/about/)] [[News](https://sn1persecurity.com/wordpress/blog/)] [[Contact](https://sn1persecurity.com/wordpress/home/contact/)] [[Demo](https://sn1persecurity.com/wordpress/#video)] [[Pricing](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)] [[Shop](https://sn1persecurity.com/wordpress/shop/)]
+[[Website](https://sn1persecurity.com/wordpress/)] [[Blog](https://sn1persecurity.com/wordpress/blog/)] [[Shop](https://sn1persecurity.com/wordpress/shop)] [[Documentation](https://sn1persecurity.com/wordpress/documentation/)] [[Demo](https://www.youtube.com/c/Sn1perSecurity/videos)] [[Find Out More](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)]
 
-# Sn1per — The Offensive-Security Platform for Modern Teams
+## Attack Surface Management
+### Discover hidden assets and vulnerabilities in your environment
+#### [[Find out more](https://sn1persecurity.com/wordpress/shop)]
 
-> Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC.
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/05/Sn1per-Enterprise-workspace-navigator1-3.png)](https://sn1persecurity.com/)
 
-> ## Sn1per Professional 2026 is here
+## The ultimate pentesting toolkit.
->
+Integrate with the leading commercial and open source vulnerability scanners to scan for the latest CVEs and vulnerabilities. 
-> The largest release since v10.0 — Docker-first deployment, Bootstrap 5 / Tabler UI, Workspace Navigator, Workspace + Host Reports with CSV / Excel / PDF export, JSON API v1.0, an Offcanvas Quick Commands sidebar with 13 panels, and expanded modules for ReverseAPK, MassPwn, Threat Intel, Nessus, and Burp.
->
-> [Read the release notes →](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/) · [View pricing →](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/)
 
-## Table of Contents
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/05/Sn1per-Enterprise-workspace-report1-3.png)](https://sn1persecurity.com/)
 
-- [About](#about-sn1per)
+###  Automate the most powerful tools.
-- [What Sn1per Is For](#what-sn1per-is-for)
+Security tools are expensive and time-consuming, but with Sn1per, you can save time by automating the execution of these open source and commercial tools to discover vulnerabilities across your entire attack surface.
-- [What's New in 2026](#whats-new-in-2026)
-- [Editions & Pricing](#editions--pricing)
-- [Install](#install)
-- [Quick Start](#quick-start)
-- [Usage](#usage)
-- [Scan Modes](#scan-modes)
-- [Integrations](#integrations)
-- [Documentation & Help](#documentation--help)
-- [News & Releases](#news--releases)
-- [Community & Support](#community--support)
-- [Contributing](#contributing)
-- [License & Legal](#license--legal)
 
-## About Sn1per
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/05/Sn1per-Enterprise-host-list3-1.png)](https://sn1persecurity.com/)
 
-Sn1per is an offensive-security platform that consolidates reconnaissance, vulnerability scanning, exploitation, and reporting into a single workspace. Built by pentesters since 2015, it ships in three editions — a free Community Edition (source-available, custom EULA — see LICENSE.md) in this repository, a paid Professional edition for individual operators and small teams, and an Enterprise edition for global SOCs — all backed by the same core scanning engine.
+### Find what you can't see.
+Hacking is a problem that's only getting worse. But, with Sn1per, you can find what you can’t see—hidden assets and vulnerabilities in your environment. 
 
-Sn1per orchestrates 90+ third-party tools, ships with 600+ exploits and 10,000+ detections, and is used by 500+ teams worldwide. Battle-tested by the community. Built by pentesters, for pentesters.
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/05/Sn1per-Enterprise-host-list2-1.png)](https://sn1persecurity.com/)
 
-**500+** Teams · **90+** Integrations · **10,000+** Detections · **600+** Exploits · Trusted since **2015**
+### Discover and prioritize risks in your organization.
+Sn1per is a next-generation information gathering tool that provides automated, deep, and continuous security for organizations of all sizes.
 
-## What Sn1per Is For
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/05/Sn1per-Enterprise-vulnerability-report1-3.png)](https://sn1persecurity.com/)
 
-Sn1per ships as one platform that covers the core jobs offensive security teams otherwise stitch together from a dozen tools:
+### See Sn1per in action!
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/10/Sn1perbootcampseries1.png)](https://www.youtube.com/c/Sn1perSecurity/videos)
 
-- **[External Attack Surface Management](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)** - continuous discovery, monitoring, and active exploitation of every internet-facing asset your organization owns, including the ones nobody on your team knows about.
+### News
-- **[Continuous Attack Surface Management](https://sn1persecurity.com/wordpress/continuous-attack-surface-management-with-sn1per-professional/)** - daily-cadence rescans that diff yesterday's surface against today's so new exposures hit your SOC within hours, not the next quarterly pentest.
+- #### [5 Ways Sn1per Can Automate Your Security Workflow](https://sn1persecurity.com/wordpress/5-ways-sn1per-can-automate-your-security-workflow/)
-- **[Automated Penetration Testing](https://sn1persecurity.com/wordpress/automated-penetration-testing/)** - 600+ exploits and 10,000+ detections orchestrated as a single workflow, with active verification eliminating the false positives version-only scanners ship as "critical."
+- #### [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/)
-- **[Reconnaissance & Attack Surface Discovery](https://sn1persecurity.com/wordpress/reconnaissance-methodology/)** - the full phased recon workflow, from OSINT and subdomain enumeration through live-host discovery and fingerprinting, run as one automated pass.
+- #### [Sn1per Scan Engine v10.2 Released!](https://sn1persecurity.com/wordpress/sn1per-scan-engine-v10-2-update/)
+- #### [Sn1per Enterprise Released!](https://sn1persecurity.com/wordpress/sn1per-enterprise-released/)
+- #### [Sn1per Professional v10.0 Released!](https://sn1persecurity.com/wordpress/sn1per-professional-v10-released/)
 
-## What's New in 2026
+## Kali/Ubuntu/Debian/Parrot Linux Install
-
+```
-[![Sn1per Pro 2026 Workspace Navigator](https://sn1persecurity.com/wordpress/wp-content/uploads/2026/04/sn1per-pro-2026-workspace-navigator.png)](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
+git clone https://github.com/1N3/Sn1per
-
-*Workspace Navigator — switch contexts across hosts, scopes, and engagements.*
-
-[![Sn1per Pro 2026 Dashboard](https://sn1persecurity.com/wordpress/wp-content/uploads/2026/04/sn1per-pro-2026-dashboard.png)](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
-
-*Dashboard — at-a-glance scan posture, top findings, and exploitable assets.*
-
-### Highlights
-
-- **Docker-first deployment** — same image, every distro
-- **Bootstrap 5 / Tabler UI** — refreshed responsive interface with light + dark mode
-- **Workspace Navigator** — fast workspace switching with state preservation
-- **Workspace & Host Reports** — CSV, Excel, and PDF export
-- **JSON API v1.0** — programmatic access for CI / SOAR / SIEM pipelines
-- **Offcanvas Quick Commands** — 13 panels, every common action one click away
-- **Expanded modules** — ReverseAPK, MassPwn, Threat Intel, Nessus, Burp Suite
-- **Maturing SC0PE framework** — more parsers, better noise reduction
-- **Hardened PHP library stack** — modern dependencies, audited components
-- **New CLI flags** — `-v` (verbose), `-db` (debug), `-rr` (remove resume files)
-
-> *"Sn1per Professional 2026 is the largest release since the v10.0 line."*
-
-[Read the full release notes →](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)
-
-## Editions & Pricing
-
-The [Community Edition](https://sn1persecurity.com/wordpress/sn1per-community-edition/) is free and lives in this repository. The Professional and Enterprise editions add a Web UI, commercial integrations, and email support.
-
-| | **Sn1per Professional** | **Sn1per Enterprise** |
-|---|---|---|
-| **Price** | $984 / year (per seat) | Get a quote |
-| **Subscription** | 1 year | 1 year |
-| **— Included —** | | |
-| Web UI | Professional Web UI | Enterprise Web UI |
-| Scan Engine & UI Updates | ✓ | ✓ |
-| All Modules & Integrations | ✓ | ✓ |
-| On-Prem (Self Hosted) | ✓ | ✓ |
-| Email Support | 1 Year | 1 Year |
-| Improved Speed & Scalability | — | ✓ |
-| Cutting-Edge Features | — | ✓ |
-| **— Limits & Quotas —** | | |
-| Max Scans | Unlimited | Unlimited |
-| Max Assets / Workspace | 30 | Unlimited |
-| Max Workspaces | 5 | Unlimited |
-| Total Assets | 150 | 500+ |
-| Licensed Systems | 1 | 1 |
-
-[Buy a Sn1per Professional license →](https://sn1persecurity.com/wordpress/product/sn1per-professional-2026-license/) · [Get an Enterprise quote →](https://sn1persecurity.com/wordpress/request-a-quote/)
-
-## Install
-
-### Linux (Kali / Ubuntu / Debian / Parrot)
-
-```bash
-git clone https://github.com/1N3/Sn1per.git
 cd Sn1per
-sudo bash install.sh
+bash install.sh
 ```
 
-> Sn1per installs to `/usr/share/sniper` and requires root. Use `sudo bash install.sh force` to skip the confirmation prompt.
+## AWS AMI (Free Tier) VPS Install
+[![](https://sn1persecurity.com/wordpress/wp-content/uploads/2022/06/AWS-Marketplace.png)](https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno)
 
-### Docker
+To install Sn1per using an AWS EC2 instance:
 
-[Sn1per on Docker Hub →](https://hub.docker.com/r/sn1persecurity/sn1per)
+1. Go to https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno and click the “Continue to Subscribe” button
+2. Click the “Continue to Configuration” button
+3. Click the “Continue to Launch” button
+4. Login via SSH using the public IP of the new EC2 instance
 
-#### Kali Linux base
+## Docker Install
+[![](https://sn1persecurity.com/images/docker-logo.png)](https://hub.docker.com/r/sn1persecurity/sn1per)
 
-```bash
+From a new Docker console, run the following commands.
-sudo docker compose up
-sudo docker run --privileged -it sn1per-kali-linux /bin/bash
 ```
+Download https://raw.githubusercontent.com/1N3/Sn1per/master/Dockerfile
+docker build -t sn1per . 
+docker run -it sn1per /bin/bash
 
-#### BlackArch base
+or 
 
-```bash
+docker pull xer0dayz/sn1per
-sudo docker compose -f docker-compose-blackarch.yml up
+docker run -it xer0dayz/sn1per /bin/bash
-sudo docker run --privileged -it sn1per-blackarch /bin/bash
 ```
 
-### AWS Marketplace (EC2 AMI)
-
-Subscribe via [AWS Marketplace](https://aws.amazon.com/marketplace/pp/prodview-rmloab6wnymno):
-
-1. Click **Continue to Subscribe**
-2. Click **Continue to Configuration**, choose region/instance type
-3. Click **Continue to Launch**
-4. SSH to the EC2 public IP — Sn1per is preinstalled
-
-## Quick Start
-
-```bash
-sudo bash install.sh
-sniper -t example.com -m normal
-```
-
-Results land in `/usr/share/sniper/loot/<workspace>/`. See [Usage](#usage) for more modes.
-
 ## Usage
-
 ```
 [*] NORMAL MODE
 sniper -t <TARGET>
@@ -170,7 +89,7 @@ sniper -t <TARGET> -o -re
 sniper -t <TARGET> -m stealth -o -re
 
 [*] DISCOVER MODE
-sniper -t <CIDR> -m discover -w <WORKSPACE_ALIAS>
+sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>
 
 [*] SCAN ONLY SPECIFIC PORT
 sniper -t <TARGET> -m port -p <portnum>
@@ -232,7 +151,7 @@ sniper -w <WORKSPACE_ALIAS> --reimport
 [*] LOOT REIMPORTALL FUNCTION
 sniper -w <WORKSPACE_ALIAS> --reimportall
 
-[*] LOOT RELOAD FUNCTION
+[*] LOOT REIMPORT FUNCTION
 sniper -w <WORKSPACE_ALIAS> --reload
 
 [*] LOOT EXPORT FUNCTION
@@ -246,130 +165,52 @@ sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>
 
 [*] UPDATE SNIPER
 sniper -u|--update
-
-[*] VERBOSE OUTPUT (NEW IN 2026)
-sniper -t <TARGET> -m airstrike -v
-
-[*] DEBUG OUTPUT (NEW IN 2026)
-sniper -t <TARGET> -m normal -db
-
-[*] REMOVE RESUME FILES (NEW IN 2026)
-sniper -t <TARGET> -m airstrike -v -rr
 ```
 
-## Scan Modes
+## Modes
+* **NORMAL:** Performs basic scan of targets and open ports using both active and passive checks for optimal performance.
+* **STEALTH:** Quickly enumerate single targets using mostly non-intrusive scans to avoid WAF/IPS blocking.
+* **FLYOVER:** Fast multi-threaded high level scans of multiple targets (useful for collecting high level data on many hosts quickly).
+* **AIRSTRIKE:** Quickly enumerates open ports/services on multiple hosts and performs basic fingerprinting. To use, specify the full location of the file which contains all hosts, IPs that need to be scanned and run ./sn1per /full/path/to/targets.txt airstrike to begin scanning.
+* **NUKE:** Launch full audit of multiple hosts specified in text file of choice. Usage example: ./sniper /pentest/loot/targets.txt nuke.
+* **DISCOVER:** Parses all hosts on a subnet/CIDR (ie. 192.168.0.0/16) and initiates a sniper scan against each host. Useful for internal network scans.
+* **PORT:** Scans a specific port for vulnerabilities. Reporting is not currently available in this mode.
+* **FULLPORTONLY:** Performs a full detailed port scan and saves results to XML.
+* **MASSPORTSCAN:** Runs a "fullportonly" scan on mutiple targets specified via the "-f" switch.
+* **WEB:** Adds full automatic web application scans to the results (port 80/tcp & 443/tcp only). Ideal for web applications but may increase scan time significantly.
+* **MASSWEB:** Runs "web" mode scans on multiple targets specified via the "-f" switch.
+* **WEBPORTHTTP:** Launches a full HTTP web application scan against a specific host and port.
+* **WEBPORTHTTPS:** Launches a full HTTPS web application scan against a specific host and port.
+* **WEBSCAN:** Launches a full HTTP & HTTPS web application scan against via Burpsuite and Arachni.
+* **MASSWEBSCAN:** Runs "webscan" mode scans of multiple targets specified via the "-f" switch.
+* **VULNSCAN:** Launches a OpenVAS vulnerability scan.
+* **MASSVULNSCAN:** Launches a "vulnscan" mode scans on multiple targets specified via the "-f" switch.
 
-| Mode | Description |
+## Help Topics
-|------|-------------|
+- [x] Plugins & Tools (https://github.com/1N3/Sn1per/wiki/Plugins-&-Tools)
-| `normal` | Active + passive scan of the target and its open ports |
+- [x] Scheduled scans (https://github.com/1N3/Sn1per/wiki/Scheduled-Scans)
-| `stealth` | Quick, mostly non-intrusive enumeration to avoid WAF / IPS |
+- [x] Sn1per Configuration Options (https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Options)
-| `flyover` | Fast multi-threaded high-level scans of many hosts |
+- [x] Sn1per Configuration Templates (https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Templates)
-| `airstrike` | Open-port enumeration + basic fingerprinting against a host file |
+- [x] Sc0pe Templates (https://github.com/1N3/Sn1per/wiki/Sc0pe-Templates)
-| `nuke` | Full audit across all targets in a host file |
-| `discover` | Walks a CIDR and runs Sn1per on every live host |
-| `port` | Targeted scan of a specific port |
-| `fullportonly` | Full TCP port scan, results saved to XML |
-| `web` | Web app scan on `80/tcp` + `443/tcp` only |
-| `webporthttp` / `webporthttps` | Web app scan on a specific HTTP / HTTPS port |
-| `webscan` | Full HTTP + HTTPS web app scan via Burp Suite + Arachni |
-| `vulnscan` | OpenVAS vulnerability scan |
-| `mass*` | Multi-target variants of the above (`-f targets.txt`) |
 
-## Integrations
+## Integration Guides
+- [x] Github API integration (https://github.com/1N3/Sn1per/wiki/Github-API-Integration)
+- [x] Burpsuite Professional 2.x integration (https://github.com/1N3/Sn1per/wiki/Burpsuite-Professional-2.x-Integration)
+- [x] OWASP ZAP integration (https://github.com/1N3/Sn1per/wiki/OWASP-ZAP-Integration)
+- [x] Shodan API integration (https://github.com/1N3/Sn1per/wiki/Shodan-Integration)
+- [x] Censys API integration (https://github.com/1N3/Sn1per/wiki/Censys-API-Integration)
+- [x] Hunter.io API integration (https://github.com/1N3/Sn1per/wiki/Hunter.io-API-Integration)
+- [x] Metasploit integration (https://github.com/1N3/Sn1per/wiki/Metasploit-Integration)
+- [x] Nessus integration (https://github.com/1N3/Sn1per/wiki/Nessus-Integration)
+- [x] OpenVAS API integration (https://github.com/1N3/Sn1per/wiki/OpenVAS-Integration)
+- [x] GVM 21.x integration (https://github.com/1N3/Sn1per/wiki/GVM-21.x-Integration)
+- [x] Slack API integration (https://github.com/1N3/Sn1per/wiki/Slack-API-Integration)
+- [x] WPScan API integration (https://github.com/1N3/Sn1per/wiki/WPScan-API-Integration)
 
-Sn1per ships with native integrations for **90+ tools and services**. Featured partners:
+## License & Legal Agreement
+For license and legal information, refer to the LICENSE.md (https://github.com/1N3/Sn1per/blob/master/LICENSE.md) file in this repository.
 
-| Category | Integrations |
+## Purchase Sn1per Professional
-|----------|--------------|
+To obtain a Sn1per Professional license, go to https://sn1persecurity.com.
-| **Vulnerability scanners** | [Nessus](https://github.com/1N3/Sn1per/wiki/Nessus-Integration) · [OpenVAS](https://github.com/1N3/Sn1per/wiki/OpenVAS-Integration) · [GVM 21.x](https://github.com/1N3/Sn1per/wiki/GVM-21.x-Integration) · Nuclei |
-| **Web app testing** | [Burp Suite Pro](https://github.com/1N3/Sn1per/wiki/Burpsuite-Professional-2.x-Integration) · [OWASP ZAP](https://github.com/1N3/Sn1per/wiki/OWASP-ZAP-Integration) · [WPScan](https://github.com/1N3/Sn1per/wiki/WPScan-API-Integration) |
-| **Exploitation** | [Metasploit](https://github.com/1N3/Sn1per/wiki/Metasploit-Integration) |
-| **Reconnaissance** | [Shodan](https://github.com/1N3/Sn1per/wiki/Shodan-Integration) · [Censys](https://github.com/1N3/Sn1per/wiki/Censys-API-Integration) · [Hunter.io](https://github.com/1N3/Sn1per/wiki/Hunter.io-API-Integration) · VirusTotal · Nmap |
-| **AI / LLM** | OpenAI · Claude · Gemini |
-| **Notifications & DevOps** | [Slack](https://github.com/1N3/Sn1per/wiki/Slack-API-Integration) · [GitHub API](https://github.com/1N3/Sn1per/wiki/Github-API-Integration) |
 
-[Browse all integrations on the wiki →](https://github.com/1N3/Sn1per/wiki)
+Attack Surface Management (ASM) | Continuous Attack Surface Testing (CAST) | Attack Surface Software | Attack Surface Platform | Continuous Automated Red Teaming (CART) |  Vulnerability & Attack Surface Management | Red Team | Threat Intel | Application Security | Cybersecurity | IT Asset Discovery | Automated Penetration Testing | Hacking Tools | Recon Tool | Bug Bounty Tool | Vulnerability Scanner | Attack Surface Analysis | Attack Surface Reduction | Attack Surface Detector | Attack Surface Monitoring | Attack Surface Review | Attack Surface Discovery | Digital Threat Management | Risk Assessment | Threat Remediation | Offensive Security Framework | Automated Penetration Testing Framework | External Threat Management | Internal IT Asset Discovery | Security Orchestration and Automation (SOAR) | Sn1per tutorial | Sn1per tool | Sn1per metasploit | Sn1per for windows | Sn1per review | Sn1per download | how to use Sn1per | Sn1per professional download | Sn1per professional crack | automated pentesting framework | pentest-tools github | ad pentest tools | pentest-tools review | security testing tools | ubuntu pentesting tools | pentesting tools for mac | cloud-based pen-testing tools
-
-## Documentation & Help
-
-- [Getting Started](docs/getting-started.md)
-- [Installation](docs/installation.md)
-- [Configuration](docs/configuration.md)
-- [Usage](docs/usage.md)
-- [Architecture](docs/architecture.md)
-- [Integrations](docs/integrations.md)
-- [Troubleshooting](docs/troubleshooting.md)
-- [Wiki — full reference](https://github.com/1N3/Sn1per/wiki)
-- [Sn1per Documentation Hub](https://sn1persecurity.com/wordpress/documentation/)
-- [Passive Reconnaissance Techniques for Penetration Testers](https://sn1persecurity.com/wordpress/passive-reconnaissance-techniques-for-penetration-testing/)
-- [CVE-2024-21733 — Apache Tomcat HTTP Request Smuggling writeup](https://sn1persecurity.com/wordpress/cve-2024-21733-apache-tomcat-http-request-smuggling/)
-
-### Configuration & Templates
-
-- [Plugins & Tools](https://github.com/1N3/Sn1per/wiki/Plugins-&-Tools)
-- [Scheduled Scans](https://github.com/1N3/Sn1per/wiki/Scheduled-Scans)
-- [Sn1per Configuration Options](https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Options)
-- [Sn1per Configuration Templates](https://github.com/1N3/Sn1per/wiki/Sn1per-Configuration-Templates)
-- [Sc0pe Templates](https://github.com/1N3/Sn1per/wiki/Sc0pe-Templates)
-
-## News & Releases
-
-- **[Sn1per Professional 2026 Released](https://sn1persecurity.com/wordpress/sn1per-professional-2026-release/)** - April 26, 2026
-- [Introducing SILENTCHAIN AI Community Edition v1.1.3](https://sn1persecurity.com/wordpress/introducing-silentchain-ai-community-edition-v1-1-3/) - February 11, 2026
-- [Sn1per SE v11.0 Now Available](https://sn1persecurity.com/wordpress/sn1per-se-v11-released/) - January 8, 2026
-
-### Guides & deep dives (2026)
-
-**Reconnaissance**
-
-- [Reconnaissance Methodology](https://sn1persecurity.com/wordpress/reconnaissance-methodology/) - Sn1per's full recon-to-report workflow, phase by phase, from OSINT to reporting
-- [Subdomain Enumeration](https://sn1persecurity.com/wordpress/subdomain-enumeration/) - passive sources, active brute force, and subdomain-takeover checks
-- [Active Reconnaissance](https://sn1persecurity.com/wordpress/active-reconnaissance/) - port scanning, service and technology fingerprinting, and endpoint discovery
-
-**Penetration testing**
-
-- [Automated Penetration Testing](https://sn1persecurity.com/wordpress/automated-penetration-testing/) - the method, the tooling, and the continuous-testing model
-- [Best Automated Pentest Tools](https://sn1persecurity.com/wordpress/automated-pentest-tools/) - the 2026 open-source and all-in-one pentest tooling landscape
-- [Continuous Penetration Testing (PTaaS)](https://sn1persecurity.com/wordpress/continuous-penetration-testing/) - the always-on model beyond the once-a-year pentest
-
-**Attack surface management**
-
-- [Red Team Attack Surface Management](https://sn1persecurity.com/wordpress/red-team-attack-surface-management/) - running Sn1per as a continuous red-team and adversarial-exposure-validation workflow
-- [Adversarial Exposure Validation](https://sn1persecurity.com/wordpress/adversarial-exposure-validation/) - proving which exposures are actually exploitable, not just present
-- [Continuous Attack Surface Testing](https://sn1persecurity.com/wordpress/continuous-attack-surface-testing/) - daily-cadence rescans that diff yesterday's surface against today's
-- [On-Prem External Attack Surface Management](https://sn1persecurity.com/wordpress/best-on-prem-external-attack-surface-management-platform/) - self-hosted, air-gapped ASM with zero data leaving your perimeter
-- [Open-Source Self-Hosted ASM Tools](https://sn1persecurity.com/wordpress/open-source-self-hosted-attack-surface-management-tools/) - the self-hosted attack surface management tooling landscape
-- [External Attack Surface Management with Sn1per](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/) - background reading on the ASM use case
-
-[All releases & blog posts →](https://sn1persecurity.com/wordpress/blog/)
-
-## Community & Support
-
-- **Bugs:** [Open an issue](https://github.com/1N3/Sn1per/issues)
-- **Twitter:** [@xer0dayz](https://twitter.com/xer0dayz)
-- **YouTube:** [Sn1per Security](https://www.youtube.com/c/Sn1perSecurity/videos) - latest demo: [Continuous Attack Surface Testing](https://youtu.be/GBr7vjbGRBA)
-- **Email (Pro / Enterprise customers):** see your license email
-
-## Contributing
-
-Pull requests welcome. For substantial changes, open an issue first to discuss the design.
-
-- Mode scripts live in [`modes/`](modes/) — one bash file per scan mode
-- Test changes against a controlled target before opening a PR
-- Follow [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format in [`CHANGELOG.md`](CHANGELOG.md)
-
-35 contributors and counting. Thank you.
-
-## License & Legal
-
-- **Code:** see [`LICENSE.md`](LICENSE.md) and [`THIRD_PARTY_LICENSES.md`](THIRD_PARTY_LICENSES.md)
-- **Notices:** see [`NOTICE`](NOTICE)
-- **Trademark:** "Sn1per" and the Sn1per logo are trademarks of Sn1perSecurity LLC. Use in derivative works requires permission. Contact: [sn1persecurity.com](https://sn1persecurity.com)
-
----
-
-## About Sn1perSecurity
-
-Sn1per is built and maintained by [Sn1perSecurity](https://sn1persecurity.com), the team behind the [Sn1per attack surface management and automated penetration testing platform](https://sn1persecurity.com/wordpress/external-attack-surface-management-with-sn1per/). Small team of pentesters shipping offensive-security tooling since 2015. We focus on the workflows we want to use ourselves — fast recon, ergonomic reporting, honest pricing, and a Community Edition that genuinely keeps up with the commercial editions. If that resonates, [say hi](https://twitter.com/xer0dayz).
-
-**Topics:** `penetration-testing` · `offensive-security` · `attack-surface-management` · `vulnerability-scanner` · `recon` · `osint` · `red-team` · `bug-bounty` · `security-tools`

conf/bug_bounty_full_brute

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/bug_bounty_max_javascript_files

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/bug_bounty_quick

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/bug_bounty_quick_port_80_443_only

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -183,7 +178,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/deep_active_recon

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -146,7 +142,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
-TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -187,7 +182,7 @@ WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/default

@@ -64,10 +64,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -172,7 +168,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -185,7 +180,7 @@ URLSCANIO="1"
 # DYNAMIC APPLICATION SCANNERS
 BURP_SCAN="0"
 ARACHNI_SCAN="0"
-ZAP_SCAN="1"
+ZAP_SCAN="0"
 
 # ACTIVE WEB PLUGINS
 SC0PE_VULNERABLITY_SCANNER="1"
@@ -211,7 +206,7 @@ SMUGGLER="1"
 WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
-GAU="1"
+GUA="1"
 HACKERTARGET="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"

conf/fast_service_portscan

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -146,7 +142,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
-TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -186,7 +181,7 @@ WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/super_stealth_mode

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/super_stealth_mode_OSINT

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
-TOMBAIO="1"
 INTODNS="0"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
 SSL="0"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/web_mode_all_plugins

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
-TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -182,7 +177,7 @@ WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

conf/webpwn_only

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="0"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -181,7 +176,7 @@ WAYBACKMACHINE="0"
 SSL="0"
 PASSIVE_SPIDER="0"
 HACKERTARGET="0"
-GAU="0"
+GUA="0"
 CUTYCAPT="0"
 WEBSCREENSHOT="0"
 

conf/webpwn_only_metasploit_disabled

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -142,7 +138,6 @@ INURLBR="0"
 THEHARVESTER="0"
 METAGOOFIL="0"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="0"
 EMAILFORMAT="0"
 ULTRATOOLS="0"
@@ -181,7 +176,7 @@ WAYBACKMACHINE="0"
 SSL="0"
 PASSIVE_SPIDER="0"
 HACKERTARGET="0"
-GAU="0"
+GUA="0"
 CUTYCAPT="0"
 WEBSCREENSHOT="0"
 

conf/zap_only_webscan

@@ -55,10 +55,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -146,7 +142,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="1"
-TOMBAIO="1"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -187,7 +182,7 @@ WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
 HACKERTARGET="1"
-GAU="1"
+GUA="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"
 

docker-compose-blackarch.yml

@@ -1,14 +0,0 @@
-version: '3.9'
-
-x-logging: &default-logging
-  options:
-    max-size: "40m"
-    max-file: "10"
-  driver: json-file
-
-services:
-  blackarch:
-    container_name: blackarch
-    build:
-      context: .
-      dockerfile: Dockerfile.blackarch

docker-compose.yml

@@ -1,14 +0,0 @@
-version: '3.9'
-
-x-logging: &default-logging
-  options:
-    max-size: "40m"
-    max-file: "10"
-  driver: json-file
-
-services:
-  kali-linux:
-    container_name: kali-linux
-    build:
-      context: .
-      dockerfile: Dockerfile

modes/normal.sh

@@ -258,7 +258,7 @@ else
       echo -e "$OKRED RUNNING SSH AUDIT $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       cd $PLUGINS_DIR/ssh-audit
-      python3 ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt
+      python ssh-audit.py $TARGET:22 | tee $LOOT_DIR/output/sshaudit-$TARGET-port22.txt
     fi
   fi
   cd $INSTALL_DIR
@@ -511,7 +511,7 @@ else
     echo -e "$OKRED RUNNING SMB ENUMERATION $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port139.txt
-    python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt
+    python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port139.txt
     nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port139.txt
   fi
   if [[ "$NMAP_SCRIPTS" = "1" ]]; then
@@ -616,7 +616,7 @@ else
     echo -e "$OKRED ENUMERATING SMB/NETBIOS $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     enum4linux $TARGET | tee $LOOT_DIR/output/enum4linux-$TARGET-port445.txt
-    python3 /usr/share/doc/python3-impacket/examples/samrdump.py $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt
+    python $SAMRDUMP $TARGET | tee $LOOT_DIR/output/samrdump-$TARGET-port445.txt
     nbtscan $TARGET | tee $LOOT_DIR/output/nbtscan-$TARGET-port445.txt
   fi
   if [[ "$NMAP_SCRIPTS" = "1" ]]; then

modes/normal_webporthttp.sh

@@ -24,7 +24,7 @@ wpif [[ "$MODE" = "web" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
   fi
-  if [[ "$GAU" == "1" ]]; then
+  if [[ "$GUA" == "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED FETCHING GUA URLS $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
@@ -166,14 +166,14 @@ wpif [[ "$MODE" = "web" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt
+      python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port 80 | tee $LOOT_DIR/web/shocker-$TARGET-port80.txt
   fi
   if [[ "$JEXBOSS" = "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING JEXBOSS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       cd /tmp/
-      python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw
+      python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port80.raw
       sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port80.raw > $LOOT_DIR/web/jexboss-$TARGET-port80.txt 2> /dev/null
       rm -f $LOOT_DIR/web/jexboss-$TARGET-port80.raw 2> /dev/null
       cd $INSTALL_DIR

modes/normal_webporthttps.sh

@@ -24,7 +24,7 @@ if [[ "$MODE" = "web" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
   fi
-  if [[ "$GAU" == "1" ]]; then
+  if [[ "$GUA" == "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED FETCHING GUA URLS $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
@@ -163,14 +163,14 @@ if [[ "$MODE" = "web" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt
+      python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --ssl --port 443 | tee $LOOT_DIR/web/shocker-$TARGET-port443.txt
   fi
   if [[ "$JEXBOSS" = "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING JEXBOSS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       cd /tmp/
-      python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw
+      python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET | tee $LOOT_DIR/web/jexboss-$TARGET-port443.raw
       sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port443.raw > $LOOT_DIR/web/jexboss-$TARGET-port443.txt 2> /dev/null
       rm -f $LOOT_DIR/web/jexboss-$TARGET-port443.raw 2> /dev/null
       cd $INSTALL_DIR

modes/osint.sh

@@ -76,7 +76,7 @@ if [[ "$OSINT" = "1" ]]; then
 		echo -e "$OKRED COLLECTING OSINT FROM ONLINE DOCUMENTS $RESET"
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		cd $INSTALL_DIR/plugins/metagoofil/
-		python3 metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null 
+		python metagoofil.py -d $TARGET -t doc,pdf,xls,csv,txt -l 25 -n 25 -o $LOOT_DIR/osint/ -f $LOOT_DIR/osint/$TARGET.html 2> /dev/null | tee $LOOT_DIR/osint/metagoofil-$TARGET.txt 2> /dev/null 
 		cd $INSTALL_DIR
 		if [[ "$SLACK_NOTIFICATIONS_METAGOOFIL" == "1" ]]; then
 			/bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/osint/metagoofil-$TARGET.txt"
@@ -94,12 +94,6 @@ if [[ "$OSINT" = "1" ]]; then
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		curl -s "https://api.hunter.io/v2/domain-search?domain=$TARGET&api_key=$HUNTERIO_KEY" | egrep "name|value|domain|company|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/hunterio-$TARGET.txt 2> /dev/null
 	fi
-	if [[ "$TOMBAIO" == "1" ]]; then
-		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-		echo -e "$OKRED GATHERING EMAILS VIA TOMBA.IO $RESET"
-		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-		curl -H "X-Tomba-Key: $TOMBAIO_KEY" -H "X-Tomba-Secret: $TOMBAIO_SECRET" -s "https://api.tomba.io/v1/domain-search?domain=$TARGET" | egrep "email|organization|uri|position|phone" 2> /dev/null | tee $LOOT_DIR/osint/tombaio$TARGET.txt 2> /dev/null
-	fi
 	if [[ "$METASPLOIT_EXPLOIT" == "1" ]]; then
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		echo -e "$OKRED GATHERING EMAILS VIA METASPLOIT $RESET"

modes/recon.sh

@@ -11,7 +11,7 @@ if [[ "$RECON" = "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED GATHERING DNS SUBDOMAINS VIA SUBLIST3R $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-    python3 /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null
+    python /usr/share/sniper/plugins/Sublist3r/sublist3r.py -d $TARGET -vvv -o $LOOT_DIR/domains/domains-$TARGET.txt 2>/dev/null > /dev/null
     sed -ie 's/<BR>/\n/g' domains-$TARGET-full.txt 2> /dev/null
     mv -f $LOOT_DIR/domains/domains-$TARGET.txte $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null
     wc -l $LOOT_DIR/domains/domains-$TARGET.txt 2> /dev/null
@@ -77,7 +77,7 @@ if [[ "$RECON" = "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED GATHERING CENSYS SUBDOMAINS $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-    python3 $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null 
+    python $PLUGINS_DIR/censys-subdomain-finder/censys_subdomain_finder.py --censys-api-id $CENSYS_APP_ID --censys-api-secret $CENSYS_API_SECRET $TARGET | egrep "\-" | awk '{print $2}' | egrep -v "Searching|Found" > $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null 
     wc -l $LOOT_DIR/domains/domains-$TARGET-censys.txt 2> /dev/null
   fi
   if [[ "$SHODAN" = "1" ]]; then
@@ -129,7 +129,7 @@ if [[ "$RECON" = "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED GATHERING SUBBRUTE SUBDOMAINS $RESET"
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-    python3 "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
+    python "$INSTALL_DIR/plugins/massdns/scripts/subbrute.py" $INSTALL_DIR/wordlists/domains-all.txt $TARGET 2> /dev/null > $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
     wc -l $LOOT_DIR/domains/domains-$TARGET-subbrute.txt 2> /dev/null
   fi
   if [[ "$ALT_DNS" = "1" ]]; then
@@ -231,6 +231,16 @@ if [[ "$RECON" = "1" ]]; then
       /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/subjack_new-$TARGET.txt"
     fi
   fi
+  if [[ "$SLURP" = "1" ]]; then
+    echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
+    echo -e "$OKRED STARTING PUBLIC S3 BUCKET SCAN $RESET"
+    echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
+    cd $PLUGINS_DIR/slurp/
+    ./slurp-linux-amd64 domain --domain $TARGET | tee $LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt 2>/dev/null
+    if [[ "$SLACK_NOTIFICATIONS_S3_BUCKETS" == "1" ]]; then
+      /bin/bash "$INSTALL_DIR/bin/slack.sh" postfile "$LOOT_DIR/nmap/takeovers-$TARGET-s3-buckets.txt"
+    fi
+  fi
   if [[ "$ASN_CHECK" = "1" ]]; then
     echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
     echo -e "$OKRED RETRIEVING ASN INFO $RESET"

modes/stealth.sh

@@ -225,11 +225,11 @@ if [[ "$MODE" = "stealth" ]]; then
       curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
       echo " "
     fi
-    if [[ "$GAU" == "1" ]]; then
+    if [[ "$GUA" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED FETCHING GUA URLS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
+      gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
     fi
     if [[ "$BLACKWIDOW" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
@@ -383,11 +383,11 @@ if [[ "$MODE" = "stealth" ]]; then
       curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
       echo " "
     fi
-    if [[ "$GAU" == "1" ]]; then
+    if [[ "$GUA" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED FETCHING GUA URLS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      gau --subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
+      gau -subs $TARGET | tee $LOOT_DIR/web/gua-$TARGET.txt 2> /dev/null | head -n 250
     fi
     if [[ "$BLACKWIDOW" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"

modes/webporthttp.sh

@@ -179,7 +179,7 @@ if [[ "$MODE" = "webporthttp" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       curl -s GET "https://api.hackertarget.com/pagelinks/?q=http://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-http-$TARGET.txt 2> /dev/null | head -n 250
     fi
-    if [[ "$GAU" == "1" ]]; then
+    if [[ "$GUA" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED FETCHING GUA URLS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
@@ -325,14 +325,14 @@ if [[ "$MODE" = "webporthttp" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
+      python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
     fi
     if [[ "$JEXBOSS" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING JEXBOSS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       cd /tmp/
-      python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
+      python /usr/share/sniper/plugins/jexboss/jexboss.py -u http://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
       sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null
       rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null
       cd $INSTALL_DIR

modes/webporthttps.sh

@@ -195,7 +195,7 @@ if [[ "$MODE" = "webporthttps" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       curl -s GET "https://api.hackertarget.com/pagelinks/?q=https://$TARGET" | egrep -v "API count|no links found|input url is invalid|API count|no links found|input url is invalid|error getting links" | tee $LOOT_DIR/web/hackertarget-https-$TARGET.txt 2> /dev/null | head -n 250
     fi
-    if [[ "$GAU" == "1" ]]; then
+    if [[ "$GUA" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED FETCHING GUA URLS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
@@ -334,14 +334,14 @@ if [[ "$MODE" = "webporthttps" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING SHELLSHOCK EXPLOIT SCAN $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-      python3 $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
+      python $PLUGINS_DIR/shocker/shocker.py -H $TARGET --cgilist $PLUGINS_DIR/shocker/shocker-cgi_list --sVl --port ${PORT} | tee $LOOT_DIR/web/shocker-$TARGET-port${PORT}.txt
     fi
     if [[ "$JEXBOSS" == "1" ]]; then
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       echo -e "$OKRED RUNNING JEXBOSS $RESET"
       echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
       cd /tmp/
-      python3 /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
+      python /usr/share/sniper/plugins/jexboss/jexboss.py -u https://$TARGET:${PORT} | tee $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw
       sed -r "s/\x1B\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw > $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.txt 2> /dev/null
       rm -f $LOOT_DIR/web/jexboss-$TARGET-port${PORT}.raw 2> /dev/null
       cd $INSTALL_DIR

modes/webscan.sh

@@ -130,8 +130,8 @@ if [[ "$MODE" = "webscan" ]]; then
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
 		echo -e "$OKRED RUNNING NUCLEI SCAN $RESET"
 		echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"
-		nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt
+		nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target http://$TARGET -o $LOOT_DIR/web/nuclei-http-${TARGET}-port80.txt
-		nuclei -silent -t /root/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt 
+		nuclei -silent -t /usr/share/sniper/plugins/nuclei-templates/ -c $THREADS -target https://$TARGET -o $LOOT_DIR/web/nuclei-https-${TARGET}-port443.txt 
 	fi
 	if [[ "$SC0PE_VULNERABLITY_SCANNER" == "1" ]]; then
 	    echo -e "${OKGREEN}====================================================================================${RESET}•x${OKGREEN}[`date +"%Y-%m-%d](%H:%M)"`${RESET}x•"

sniper

@@ -8,7 +8,7 @@ if [[ $EUID -ne 0 ]]; then
    exit 1
 fi
 
-VER="9.2"
+VER="9.1"
 INSTALL_DIR="/usr/share/sniper"
 LOOT_DIR="$INSTALL_DIR/loot/$TARGET"
 SNIPER_PRO=$INSTALL_DIR/pro.sh
@@ -46,105 +46,101 @@ DISTRO=$(cat /etc/*-release | grep DISTRIB_ID= | cut -d'=' -f2)
 
 function help {
   logo
-  local star
+  echo ""
-  printf -v star "$OKBLUE[*]$RESET"
+  echo -e "$OKBLUE[*]$RESET NORMAL MODE"
-  cat <<EOHELP
+  echo ' sniper -t <TARGET>'
-
+  echo ""
-$star NORMAL MODE
+  echo -e "$OKBLUE[*]$RESET SPECIFY CUSTOM CONFIG FILE"
- sniper -t <TARGET>
+  echo ' sniper -c /full/path/to/sniper.conf -t <TARGET> -m <MODE> -w <WORKSPACE>'
-
+  echo ""
-$star SPECIFY CUSTOM CONFIG FILE
+  echo -e "$OKBLUE[*]$RESET NORMAL MODE + OSINT + RECON"
- sniper -c /full/path/to/sniper.conf -t <TARGET> -m <MODE> -w <WORKSPACE>
+  echo ' sniper -t <TARGET> -o -re'
-
+  echo ""
-$star NORMAL MODE + OSINT + RECON
+  echo -e "$OKBLUE[*]$RESET STEALTH MODE + OSINT + RECON"
- sniper -t <TARGET> -o -re
+  echo ' sniper -t <TARGET> -m stealth -o -re'
-
+  echo ""
-$star STEALTH MODE + OSINT + RECON
+  echo -e "$OKBLUE[*]$RESET DISCOVER MODE"
- sniper -t <TARGET> -m stealth -o -re
+  echo ' sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>'
-
+  echo ""
-$star DISCOVER MODE
+  echo -e "$OKBLUE[*]$RESET SCAN ONLY SPECIFIC PORT"
- sniper -t <CIDR> -m discover -w <WORSPACE_ALIAS>
+  echo ' sniper -t <TARGET> -m port -p <portnum>'
-
+  echo ""
-$star SCAN ONLY SPECIFIC PORT
+  echo -e "$OKBLUE[*]$RESET FULLPORTONLY SCAN MODE"
- sniper -t <TARGET> -m port -p <portnum>
+  echo ' sniper -t <TARGET> -fp'
-
+  echo ""
-$star FULLPORTONLY SCAN MODE
+  echo -e "$OKBLUE[*]$RESET WEB MODE - PORT 80 + 443 ONLY!"
- sniper -t <TARGET> -fp
+  echo ' sniper -t <TARGET> -m web'
-
+  echo ""
-$star WEB MODE - PORT 80 + 443 ONLY!
+  echo -e "$OKBLUE[*]$RESET HTTP WEB PORT MODE"
- sniper -t <TARGET> -m web
+  echo ' sniper -t <TARGET> -m webporthttp -p <port>'
-
+  echo ""
-$star HTTP WEB PORT MODE
+  echo -e "$OKBLUE[*]$RESET HTTPS WEB PORT MODE"
- sniper -t <TARGET> -m webporthttp -p <port>
+  echo ' sniper -t <TARGET> -m webporthttps -p <port>'
-
+  echo ""
-$star HTTPS WEB PORT MODE
+  echo -e "$OKBLUE[*]$RESET HTTP WEBSCAN MODE"
- sniper -t <TARGET> -m webporthttps -p <port>
+  echo ' sniper -t <TARGET> -m webscan '
-
+  echo ""
-$star HTTP WEBSCAN MODE
+  echo -e "$OKBLUE[*]$RESET ENABLE BRUTEFORCE"
- sniper -t <TARGET> -m webscan
+  echo ' sniper -t <TARGET> -b'
-
+  echo ""
-$star ENABLE BRUTEFORCE
+  echo -e "$OKBLUE[*]$RESET AIRSTRIKE MODE"
- sniper -t <TARGET> -b
+  echo ' sniper -f targets.txt -m airstrike'
-
+  echo ""
-$star AIRSTRIKE MODE
+  echo -e "$OKBLUE[*]$RESET NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED"
- sniper -f targets.txt -m airstrike
+  echo ' sniper -f targets.txt -m nuke -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star NUKE MODE WITH TARGET LIST, BRUTEFORCE ENABLED, FULLPORTSCAN ENABLED, OSINT ENABLED, RECON ENABLED, WORKSPACE & LOOT ENABLED
+  echo -e "$OKBLUE[*]$RESET MASS PORT SCAN MODE"
- sniper -f targets.txt -m nuke -w <WORKSPACE_ALIAS>
+  echo ' sniper -f targets.txt -m massportscan -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star MASS PORT SCAN MODE
+  echo -e "$OKBLUE[*]$RESET MASS WEB SCAN MODE"
- sniper -f targets.txt -m massportscan -w <WORKSPACE_ALIAS>
+  echo ' sniper -f targets.txt -m massweb -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star MASS WEB SCAN MODE
+  echo -e "$OKBLUE[*]$RESET MASS WEBSCAN SCAN MODE"
- sniper -f targets.txt -m massweb -w <WORKSPACE_ALIAS>
+  echo ' sniper -f targets.txt -m masswebscan -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star MASS WEBSCAN SCAN MODE
+  echo -e "$OKBLUE[*]$RESET MASS VULN SCAN MODE"
- sniper -f targets.txt -m masswebscan -w <WORKSPACE_ALIAS>
+  echo ' sniper -f targets.txt -m massvulnscan -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star MASS VULN SCAN MODE
+  echo -e "$OKBLUE[*]$RESET PORT SCAN MODE"
- sniper -f targets.txt -m massvulnscan -w <WORKSPACE_ALIAS>
+  echo ' sniper -t <TARGET> -m port -p <PORT_NUM>'
-
+  echo ""
-$star PORT SCAN MODE
+  echo -e "$OKBLUE[*]$RESET LIST WORKSPACES"
- sniper -t <TARGET> -m port -p <PORT_NUM>
+  echo ' sniper --list'
-
+  echo ""
-$star LIST WORKSPACES
+  echo -e "$OKBLUE[*]$RESET DELETE WORKSPACE"
- sniper --list
+  echo ' sniper -w <WORKSPACE_ALIAS> -d'
-
+  echo ""
-$star DELETE WORKSPACE
+  echo -e "$OKBLUE[*]$RESET DELETE HOST FROM WORKSPACE"
- sniper -w <WORKSPACE_ALIAS> -d
+  echo ' sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dh'
-
+  echo ""
-$star DELETE HOST FROM WORKSPACE
+  echo -e "$OKBLUE[*]$RESET DELETE TASKS FROM WORKSPACE"
- sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dh
+  echo ' sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dt'
-
+  echo ""
-$star DELETE TASKS FROM WORKSPACE
+  echo -e "$OKBLUE[*]$RESET GET SNIPER SCAN STATUS"
- sniper -w <WORKSPACE_ALIAS> -t <TARGET> -dt
+  echo ' sniper --status'
-
+  echo ""
-$star GET SNIPER SCAN STATUS
+  echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION"
- sniper --status
+  echo ' sniper -w <WORKSPACE_ALIAS> --reimport'
-
+  echo ""
-$star LOOT REIMPORT FUNCTION
+  echo -e "$OKBLUE[*]$RESET LOOT REIMPORTALL FUNCTION"
- sniper -w <WORKSPACE_ALIAS> --reimport
+  echo ' sniper -w <WORKSPACE_ALIAS> --reimportall'
-
+  echo ""
-$star LOOT REIMPORTALL FUNCTION
+  echo -e "$OKBLUE[*]$RESET LOOT REIMPORT FUNCTION"
- sniper -w <WORKSPACE_ALIAS> --reimportall
+  echo ' sniper -w <WORKSPACE_ALIAS> --reload'
-
+  echo ""
-$star LOOT REIMPORT FUNCTION
+  echo -e "$OKBLUE[*]$RESET LOOT EXPORT FUNCTION"
- sniper -w <WORKSPACE_ALIAS> --reload
+  echo ' sniper -w <WORKSPACE_ALIAS> --export'
-
+  echo ""
-$star LOOT EXPORT FUNCTION
+  echo -e "$OKBLUE[*]$RESET SCHEDULED SCANS"
- sniper -w <WORKSPACE_ALIAS> --export
+  echo ' sniper -w <WORKSPACE_ALIAS> -s daily|weekly|monthly'
-
+  echo ""
-$star SCHEDULED SCANS
+  echo -e "$OKBLUE[*]$RESET USE A CUSTOM CONFIG"
- sniper -w <WORKSPACE_ALIAS> -s daily|weekly|monthly
+  echo ' sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>'
-
+  echo ""
-$star USE A CUSTOM CONFIG
+  echo -e "$OKBLUE[*]$RESET UPDATE SNIPER"
- sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>
+  echo ' sniper -u|--update'
-
+  echo ""
-$star UPDATE SNIPER
+  echo ""
- sniper -u|--update
-
-
-EOHELP
   exit
 }
 
@@ -168,6 +164,15 @@ function sniper_status {
 # CHECK FOR UPDATES
 function check_update {
   if [[ "$ENABLE_AUTO_UPDATES" == "1" ]] && [[ "$ONLINE" == "1" ]]; then
+    if [[ -f "$INSTALL_DIR/pro/settings.php" ]]; then
+      LICENSE_KEY=$(grep "LICENSE_KEY" $INSTALL_DIR/pro/settings.php | cut -d\" -f2 2> /dev/null)
+      VERSION=$(grep 9.0 $INSTALL_DIR/pro.sh | wc -c)
+      if [[ $VERSION = "71" ]]; then
+        PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/9.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
+      else
+        PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/8.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
+      fi
+    fi
     LATEST_VER=$(curl --connect-timeout 5 -s https://api.github.com/repos/1N3/Sn1per/tags | grep -Po '"name":.*?[^\\]",'| head -1 | cut -c11-13)
     if [[ "$LATEST_VER" != "$VER" ]]; then
       echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE] sniper v$LATEST_VER is available to download... To update, type$OKRED \"sniper -u\" $RESET"
@@ -183,6 +188,15 @@ function update {
   if [[ "$ONLINE" == "0" ]]; then
     echo "You will need to download the latest release manually at https://github.com/1N3/Sn1per/"
   else
+    if [[ -f "$INSTALL_DIR/pro/settings.php" ]]; then
+      LICENSE_KEY=$(grep "LICENSE_KEY" $INSTALL_DIR/pro/settings.php | cut -d\" -f2 )
+      VERSION=$(grep 9.0 $INSTALL_DIR/pro.sh | wc -c)
+      if [[ $VERSION = "71" ]]; then
+        PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/9.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
+      else
+        PRO_UPDATE=$(curl --insecure --connect-timeout 5 -s --user-agent "`hostname` - `uname -a`" "https://sn1persecurity.com/pro/8.0/$LICENSE_KEY/updates.txt?ver=$VER&mid=$(cat /etc/machine-id)" 2> /dev/null | bash - 2> /dev/null > /dev/null)
+      fi
+    fi
     LATEST_VER=$(curl --connect-timeout 5 -s https://api.github.com/repos/1N3/Sn1per/tags | grep -Po '"name":.*?[^\\]",'| head -1 | cut -c11-13)
     if [[ "$LATEST_VER" != "$VER" ]]; then
       echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE] Sn1per $LATEST_VER is available to download...Do you want to update? (y or n)$RESET"
@@ -464,7 +478,7 @@ function init {
   service postgresql start 2> /dev/null > /dev/null
   msfdb start 2> /dev/null > /dev/null
   chown root /run/user/1000/gdm/Xauthority 2> /dev/null
-  LAST_USER=$(last 2> /dev/null | head -n 1 | awk '{print $1}')
+  LAST_USER=$(last | head -n 1 | awk '{print $1}')
   sudo cp -a /home/$LAST_USER/.Xauthority /root/.Xauthority 2> /dev/null
   sudo cp -a /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
   sudo cp -a /home/$USER/.Xauthority /root/.Xauthority 2> /dev/null
@@ -590,23 +604,7 @@ function loot {
         source $INSTALL_DIR/pro.sh
       fi
     else
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET ⚡ Upgrade to Sn1per Professional and unlock a world of powerful benefits! 🚀 $RESET"
+      echo -e "$OKRED + -- --=[ Sn1per Professional is not installed. To download Sn1per Professional, go to https://sn1persecurity.com. $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💡 Don't miss out on important updates by using the Community version. $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔝 The latest Professional version ( ${OKRED}11.0 ${RESET}) offers unparalleled features, including: $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET     💻 Sleek Web UI $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET     🛠️ Extensive add-ons $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET     🔄 Seamless integrations $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🤝 Experience priority support, continuous updates, and enhanced capabilities tailored for professionals like you. $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 💰 Maximize your investment and achieve exceptional results with Sn1per Professional. $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🔍 Learn more about the differences between the versions at: ${OKBLUE}https://sn1persecurity.com/wordpress/sn1per-community-vs-professional-whats-the-difference/ $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET  $RESET"
-      echo -e "$OKBLUE[$RESET${OKRED}i${RESET}$OKBLUE]$RESET 🛒 Purchase your Sn1per Professional license now at: ${OKBLUE}https://sn1persecurity.com/ $RESET"
       sudo $LAST_USER -c $BROWSER https://sn1persecurity.com 2> /dev/null > /dev/null &
     fi
     rm -f $UPDATED_TARGETS 2> /dev/null

sniper.conf

@@ -66,10 +66,6 @@ CENSYS_API_SECRET=""
 # HUNTER.IO API KEY
 HUNTERIO_KEY=""
 
-# TOMBA.IO API
-TOMBAIO_KEY=""
-TOMBAIO_SECRET=""
-
 # GITHUB API KEY
 GITHUB_API_KEY=""
 
@@ -177,7 +173,6 @@ INURLBR="1"
 THEHARVESTER="1"
 METAGOOFIL="1"
 HUNTERIO="0"
-TOMBAIO="0"
 INTODNS="1"
 EMAILFORMAT="1"
 ULTRATOOLS="1"
@@ -217,7 +212,7 @@ SMUGGLER="1"
 WAYBACKMACHINE="1"
 SSL="1"
 PASSIVE_SPIDER="1"
-GAU="1"
+GUA="1"
 HACKERTARGET="1"
 CUTYCAPT="0"
 WEBSCREENSHOT="1"