RomanNum3ral
/
Sn1per
mirror of https://github.com/1N3/Sn1per.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.
37 Commits 2 Branches 53 Tags 44 MiB
Shell 54.3%
Lua 36.4%
Python 7.1%
XSLT 1.4%
JavaScript 0.5%
Other 0.3%
Go to file
root 2905038f7a Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:23:16 -05:00
bin Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:09:20 -05:00
loot Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:23:16 -05:00
README.md Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:23:16 -05:00
Sn1per-logo.png Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:23:16 -05:00
install.sh Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:09:20 -05:00
sniper Sn1per v1.5 by 1N3@CrowdShield 2015-12-28 12:09:20 -05:00

README.md

Sn1per - Automated Pentest Recon Scanner

alt tag

ABOUT:

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities.

FEATURES:

  • Automatically collects basic recon (ie. whois, ping, DNS, etc.)
  • Automatically launches Google hacking queries against a target domain
  • Automatically enumerates open ports
  • Automatically brute forces sub-domains and DNS info
  • Automatically runs targeted NMap scripts against open ports
  • Automatically runs targeted Metasploit scan and exploit modules
  • Automatically scans all web applications for common vulnerabilities
  • Automatically brute forces all open services

INSTALL:

./install.sh - Installs all dependencies OR upgrades existing Sn1per installations. Best run from Kali Linux.

USAGE:

./sn1per <target>

SAMPLE REPORT:

https://goo.gl/96LCAg

CHANGELOG:

  • v1.5 - Added Metasploit scan and auto-exploit modules
  • v1.5 - Added additional port checks
  • v1.5 - Added full TCP/UDP NMap XML output
  • v1.5 - Auto tune scan for either IP or hostname/domain
  • v1.4h - Added auto IP/domain name scan configurations
  • v1.4g - Added finger enumeration scripts
  • v1.4g - Fixed nmap -p 445 target issue
  • v1.4g - Fixed smtp-enum target issue
  • v1.4f - Fixed BruteX directory bug
  • v1.4e - Fixed reported errors install.sh
  • v1.4e - Added auto-upgrade option to install.sh for existing Sn1per installs
  • v1.4d - Fixed missing rake gem install dependency
  • v1.4c - Reordered 3rd party extensions
  • v1.4b - Fixed install.sh executable references
  • v1.4b - Fixed Yasou dependencies in install.sh
  • v1.4b - Fixed minor issues with BruteX loot directory
  • v1.4 - Added Yasou for automatic web form brute forcing
  • v1.4 - Added MassBleed for SSL vulnerability detection
  • v1.4 - Added Breach-Miner for detection of breached accounts
  • v1.4 - Fixed minor errors with nmap
  • v1.4 - Removed debug output from goohak from displaying on console

FUTURE:

  • Add in detection and auto exploitation for Apache Tomcat, PHPMyAdmin, Webmin, MS08-067, Open Proxy, etc.
  • Add in Juniper backdoor password to password list
  • Add auth bypass string to password list
  • Add in OpenVAS integration
  • Look into HTML reporting or text based output options to save scan data