2015-11-30 14:16:59 -05:00
2015-09-06 11:45:45 -04:00
2015-11-30 14:12:31 -05:00
2015-11-30 14:10:14 -05:00
2015-11-30 14:05:59 -05:00
2015-11-30 14:16:30 -05:00

Sn1per - Automated Pentest Recon Scanner

ABOUT:

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities.

FEATURES:

  • Automatically collects basic recon (ie. whois, ping, DNS, etc.)
  • Automatically launches Google hacking queries against a target domain
  • Automatically enumerates open ports
  • Automatically brute forces sub-domains and DNS info
  • Automatically runs targeted nmap scripts against open ports
  • Automatically scans all web applications for common vulnerabilities
  • Automatically brute forces all open services

INSTALL:

./install.sh - Installs all dependencies. Best run from Kali Linux. 

USAGE:

./sn1per <target>

SAMPLE REPORT:

https://goo.gl/96LCAg

CHANGELOG:

  • v1.4 - Added Yasou for automatic web form brute forcing
  • v1.4 - Added MassBleed for SSL vulnerability detection
  • v1.4 - Added Breach-Miner for detection of breached accounts
  • v1.4 - Fixed minor errors with nmap
  • v1.4 - Removed debug output from goohak from displaying on console
Languages
Shell 53.7%
Lua 36.8%
Python 7.2%
XSLT 1.5%
JavaScript 0.5%
Other 0.3%