d06a47fe62
* v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool
74 lines
3.9 KiB
Bash
74 lines
3.9 KiB
Bash
# MASSWEB MODE #####################################################################################################
|
|
if [[ "$MODE" = "massweb" ]]; then
|
|
if [[ -z "$FILE" ]]; then
|
|
logo
|
|
echo "You need to specify a list of targets (ie. -f <targets.txt>) to scan."
|
|
exit
|
|
fi
|
|
if [[ "$REPORT" = "1" ]]; then
|
|
for a in `cat $FILE`;
|
|
do
|
|
if [[ ! -z "$WORKSPACE" ]]; then
|
|
args="$args -w $WORKSPACE"
|
|
WORKSPACE_DIR=$INSTALL_DIR/loot/workspace/$WORKSPACE
|
|
echo -e "$OKBLUE[*]$RESET Saving loot to $LOOT_DIR [$RESET${OKGREEN}OK${RESET}$OKBLUE]$RESET"
|
|
mkdir -p $WORKSPACE_DIR 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/domains 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/screenshots 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/nmap 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/notes 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/reports 2> /dev/null
|
|
mkdir $WORKSPACE_DIR/output 2> /dev/null
|
|
fi
|
|
args="$args -m web --noreport --noloot"
|
|
TARGET="$a"
|
|
args="$args -t $TARGET"
|
|
echo -e "$OKRED |"
|
|
echo -e "$OKRED | |"
|
|
echo -e "$OKRED | -/_\-"
|
|
echo -e "$OKRED -/_\- ______________(/ . \)______________"
|
|
echo -e "$OKRED ____________(/ . \)_____________ \___/ <>"
|
|
echo -e "$OKRED <> \___/ <> <>"
|
|
echo -e "$OKRED "
|
|
echo -e "$OKRED ||"
|
|
echo -e "$OKRED <>"
|
|
echo -e "$OKRED ||"
|
|
echo -e "$OKRED <>"
|
|
echo -e "$OKRED ||"
|
|
echo -e "$OKRED || BIG"
|
|
echo -e "$OKRED _____ __ <> (^)))^ BOOM!"
|
|
echo -e "$OKRED BOOM!/(( )\ BOOM!(( ))) ( ( )"
|
|
echo -e "$OKRED ---- (__()__)) (() ) )) ( ( ( )"
|
|
echo -e "$OKRED || |||____|------ \ (/ ___ (__\ /__)"
|
|
echo -e "$OKRED |__||| | |---|---|||___| |___-----|||||"
|
|
echo -e "$OKRED | ||. | | | ||| |||||"
|
|
echo -e "$OKRED |__||| | |---|---|||___| |___-----|||||"
|
|
echo -e "$OKRED | ||. | | | ||| |||||"
|
|
echo -e "$OKRED __________________________________________________________"
|
|
echo -e "$RESET"
|
|
if [[ ! -z "$WORKSPACE_DIR" ]]; then
|
|
#echo "$TARGET $MODE `date +"%Y-%m-%d %H:%M"`" 2> /dev/null >> $LOOT_DIR/scans/tasks.txt 2> /dev/null
|
|
echo "sniper -t $TARGET -m $MODE --noreport $args" >> $LOOT_DIR/scans/$TARGET-$MODE.txt
|
|
echo "[xerosecurity.com] •?((¯°·._.• Started Sn1per scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" >> $LOOT_DIR/scans/notifications_new.txt
|
|
if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
|
/bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• Started Sn1per scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•"
|
|
fi
|
|
sniper $args | tee $WORKSPACE_DIR/output/sniper-$TARGET-$MODE-`date +"%Y%m%d%H%M"`.txt 2>&1
|
|
else
|
|
echo "sniper -t $TARGET -m $MODE --noreport $args" >> $LOOT_DIR/scans/$TARGET-$MODE.txt
|
|
sniper $args | tee $LOOT_DIR/output/sniper-$TARGET-$MODE-`date +"%Y%m%d%H%M"`.txt 2>&1
|
|
fi
|
|
args=""
|
|
done
|
|
fi
|
|
echo "[xerosecurity.com] •?((¯°·._.• Finished Sn1per scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•" >> $LOOT_DIR/scans/notifications_new.txt
|
|
if [[ "$SLACK_NOTIFICATIONS" == "1" ]]; then
|
|
/bin/bash "$INSTALL_DIR/bin/slack.sh" "[xerosecurity.com] •?((¯°·._.• Finished Sn1per scan: $TARGET [$MODE] (`date +"%Y-%m-%d %H:%M"`) •._.·°¯))؟•"
|
|
fi
|
|
if [[ "$LOOT" = "1" ]]; then
|
|
loot
|
|
fi
|
|
|
|
exit
|
|
fi
|