From 09f75f5b5c49cacb5a47101513e4b10be15a9f82 Mon Sep 17 00:00:00 2001
From: xer0dayz <1N3@hushmail.com>
Date: Wed, 10 Jun 2020 18:08:55 -0700
Subject: [PATCH] Added Sc0pe Templates

---
 Sc0pe-Templates.md | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 Sc0pe-Templates.md

diff --git a/Sc0pe-Templates.md b/Sc0pe-Templates.md
new file mode 100644
index 0000000..0007375
--- /dev/null
+++ b/Sc0pe-Templates.md
@@ -0,0 +1,34 @@
+![](https://i1.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-Sc0pe-templates1.png?w=990&ssl=1)
+
+For anyone interested in writing or porting existing exploits over to Sc0pe, the process is super simple. First, you will need to create a new template.sh file under ```/usr/share/sniper/templates/active/``` for active scanners and ```/usr/share/sniper/templates/passive/``` for passive scanners. You can now copy an existing template to rename or create a new file with the following format:
+
+```
+AUTHOR='@xer0dayz'
+VULN_NAME='Apache Solr Detected'
+URI='/'
+METHOD='GET'
+MATCH='Solr Admin'
+SEVERITY='P5 - INFO'
+CURL_OPTS="--user-agent '' -s -L --insecure"
+SECONDARY_COMMANDS=''
+GREP_OPTIONS='-i'
+```
+
+Passive scanners use grep regex matching of any local file to determine vulnerability detection and use the following format:
+
+```
+AUTHOR='@xer0dayz'
+VULN_NAME='CORS Policy - Allow-Credentials Enabled'
+FILENAME="$LOOT_DIR/web/headers-htt*-$TARGET.txt"
+MATCH='Access-Control-Allow-Credentials: true'
+SEVERITY='P4 - LOW'
+GREP_OPTIONS='-i'
+SEARCH='positive'
+SECONDARY_COMMANDS=''
+```
+
+One thing to note is that when saving template.sh file you created, be sure to not use spaces in the files (ie. CORS Policy – Allow-Credentials Enabled.sh). Instead, use underscores like “CORS_Policy_-_Allow-Credentials_Enabled.sh”.
+
+Once your new template is created, all you need to do is run a scan. For active checks, you can choose from ‘normal’, ‘web’, ‘vulnscan’, ‘webporthttp’ and ‘webporthttps’ as well as any of the mass scan modes (ie. massweb, etc.). All other modes will only use passive scan modules to detect vulnerabilities. 
+
+![](https://i0.wp.com/xerosecurity.com/wordpress/wp-content/uploads/2020/06/Sn1per-Sc0pe-vulnerability-cve-scanner2.png?w=1009&ssl=1)
\ No newline at end of file