master

文件	最后提交记录	最后更新时间
AWS_S3_Public_Bucket_Listing.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
ApPHP_MicroBlog_Remote_Code_Execution_Vulnerability.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Apache_Solr_Scanner.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
Apache_Tomcat_Scanner.sh	Sn1per by @Sn1perSecurity - https://sn1persecurity.com	3 年前
AvantFAX_LOGIN_Detected.sh	Fixed auto-update code	5 年前
CVE-2018-13379_-_Fortigate_Pulse_Connect_Secure_Directory_Traversal.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-11510_-_Pulse_Connect_Secure_SSL_VPN_Arbitrary_File_Read.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-11580_-_Atlassian_Crowd_Data_Center_Unauthenticated_RCE.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-11581_-_Jira_Template_Injection.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-1653_-_Cisco_RV320_RV326_Configuration_Disclosure.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-16662_-_rConfig_3.9.2_Remote_Code_Execution.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
CVE-2019-16759_-_vBulletin_5.x_0-Day_Pre-Auth_Remote_Command_Execution_Bypass.sh	Updated installer	6 年前
CVE-2019-17558_-_Apache_Solr_RCE.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-19719_Tableau_Server_DOM_XSS.py	Added 20+ new Sc0pe templates	6 年前
CVE-2019-19781_-_Citrix_ADC_Directory_Traversal.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-19908_-_phpMyChat-Plus_XSS.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2019-5418_-_Rail_File_Content_Disclosure.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-6340_-_Drupal8_REST_RCE_SA-CORE-2019-003.disabled	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-7192_-_QNAP_Pre-Auth_Root_RCE.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2019-8442_-_Jira_Webroot_Directory_Traversal_1.sh	Fixed auto-update code	5 年前
CVE-2019-8442_-_Jira_Webroot_Directory_Traversal_2.sh	Fixed auto-update code	5 年前
CVE-2019-8451_Jira_SSRF_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-8451_Jira_SSRF_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-8451_Jira_SSRF_3.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-8451_Jira_SSRF_4.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-8903_-_Totaljs_Unathenticated_Directory_Traversal.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2019-8982_-_Wavemaker_Studio_6.6_LFI_SSRF.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-0618_-_Remote_Code_Execution_SQL_Server_Reporting_Services.sh	Fixed auto-update code	5 年前
CVE-2020-10204_-_Sonatype_Nexus_Repository_RCE.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-1147_-_Remote_Code_Execution_in_Microsoft_SharePoint_Server.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-11530_-_Wordpress_Chop_Slider_3_Plugin_SQL_Injection.sh	New sc0pe templates, updated Slack API integration, updated wordlists and misc changes for v8.7	5 年前
CVE-2020-11738_-_WordPress_Duplicator_plugin_Directory_Traversal.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
CVE-2020-11738_-_WordPress_Duplicator_plugin_Directory_Traversal_2.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
CVE-2020-11738_-_WordPress_Duplicator_plugin_Directory_Traversal_3.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
CVE-2020-11738_-_WordPress_Duplicator_plugin_Directory_Traversal_4.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
CVE-2020-12271_-_Sophos_XG_Firewall_Pre-Auth_SQL_Injection.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-12720_-_vBulletin_Unauthenticaed_SQLi_1.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-12720_-_vBulletin_Unauthenticaed_SQLi_2.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-12720_-_vBulletin_Unauthenticaed_SQLi_3.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-13167_-_Netsweeper_WebAdmin_Python_Code_Injection_1.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-13167_-_Netsweeper_WebAdmin_Python_Code_Injection_2.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-14181_-_User_Enumeration_Via_Insecure_Jira_Endpoint.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-14815_-_Oracle_Business_Intelligence_Enterprise_DOM_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-15129_-_Open_Redirect_In_Traefik.sh	Finalized changes for v8.7 Added CVE-2020-15129 - Open Redirect In Traefik sc0pe template	5 年前
CVE-2020-15920_-_Mida_eFramework_Unauthenticated_RCE.sh	Fixed auto-update code	5 年前
CVE-2020-17519_-_Apache_Flink_Path_Traversal.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
CVE-2020-2034_-_PAN-OS_GlobalProtect_OS_Command_Injection.sh	Fixed auto-update code	5 年前
CVE-2020-2096_-_Jenkins_Gitlab_Hook_XSS.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-2096_Jenkins_Gitlab_XSS_1.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-2096_Jenkins_Gitlab_XSS_2.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-2096_Jenkins_Gitlab_XSS_3.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-2096_Jenkins_Gitlab_XSS_4.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-2140_-_Jenkin_AuditTrailPlugin_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-24223_-_Mara_CMS_7.5_Reflective_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-25213_-_WP_File_Manager_File_Upload.sh	Fixed auto-update code	5 年前
CVE-2020-2551_-_Unauthenticated_Oracle_WebLogic_Server_Remote_Code_Execution.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-2555_-_WebLogic_Server_Deserialization_RCE.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-3187_-_Citrix_Unauthenticated_File_Deletion.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-3452_-_Cisco_ASA-FTD_Arbitrary_File_Reading_Vulnerability.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-5284_-_Next_JS_Limited_Path_Traversal.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-5405_-_Spring_Directory_Traversal_1.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-5405_-_Spring_Directory_Traversal_2.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-5405_-_Spring_Directory_Traversal_3.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-5412_-_Full-read_SSRF_in_Spring_Cloud_Netflix.sh	Fixed auto-update code	5 年前
CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_1.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
CVE-2020-5902_-_F5_BIG-IP_Remote_Code_Execution_2.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-5902_-_F5_BIG-IP_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-6287_-_Create_an_Administrative_User_in_SAP_NetWeaver_AS_JAVA.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-7048_-_WP_Database_Reset_3.15_Unauthenticated_Database_Reset.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-7209_-_LinuxKI_Toolset_6.01_Remote_Command_Execution.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-7246_-_qdPM_Authenticated_Remote_Code_Execution.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-7473_Citrix_ShareFile_StorageZones.disabled	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
CVE-2020-8115_-_Revive_Adserver_XSS.py	Added 20+ new Sc0pe templates	6 年前
CVE-2020-8115_-_Revive_Adserver_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-8163_-_Rails_5.0.1_Remote_Code_Execution.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
CVE-2020-8191_-_Citrix_ADC_NetScaler_Gateway_Reflected_XSS.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-8193_-_Citrix_Unauthenticated_LFI.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-8194_-_Citrix_ADC_NetScaler_Gateway_Reflected_Code_Injection.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
CVE-2020-8209_-_Citrix_XenMobile_Server_Path_Traversal.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-8209_-_XenMobile-Citrix_Endpoint_Management_Config_Password_Disclosure.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-8209_-_XenMobile-Citrix_Endpoint_Management_Path_Traversal.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-8512_-_IceWarp_WebMail_XSS.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-8772_-_IfiniteWP_Client_1.9.4.5_Authentication_Bypass_1.sh	* v8.7 - Fixed logic error in stealth mode recon scans not running * v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset * v8.7 - Fixed F- detection in Wordpress Sc0pe templates * v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection * v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE	6 年前
CVE-2020-8982_-_Citrix_ShareFile_StorageZones_Unauthenticated_Arbitrary_File_Read.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
CVE-2020-9047_-_exacqVision_Web_Service_Remote_Code_Execution.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-9054_-_ZyXEL_NAS_Remote_Code_Execution.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
CVE-2020-9484_-_Apache_Tomcat_RCE_by_deserialization.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
CVE-2020-9757_-_SEOmatic_3.3.0_Server-Side_Template_Injection.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
Cisco_VPN_Login_Scanner.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
Cisco_VPN_Scanner.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
Citrix-Access-Gateway_Detected.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Citrix_VPN_Scanner.sh	Added 20+ new Sc0pe templates	6 年前
Citrix_VPN_Scanner_2.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
Clear-text_Communications_HTTP.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Clickjacking.sh	Added 20+ new Sc0pe templates	6 年前
Common_Status_File_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Common_Status_File_Scanner_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Common_Status_File_Scanner_3.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Confluence_Scanner.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Contact_Form_7_Wordpress_Plugin_Found_1.sh	Added 20+ new Sc0pe templates	6 年前
Contact_Form_7_Wordpress_Plugin_Found_2.sh	Added 20+ new Sc0pe templates	6 年前
Directory_Listing_Enabled.sh	* v8.7 - Fixed logic error in stealth mode recon scans not running * v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset * v8.7 - Fixed F- detection in Wordpress Sc0pe templates * v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection * v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE	6 年前
Drupal_Install_Found.sh	Added 20+ new Sc0pe templates	6 年前
Drupal_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Drupal_Scanner_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Drupal_Scanner_3.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Drupal_User_Login.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Drupal_Version_Disclosure.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
F5_BIG-IP_Scanner.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
F5_BIG-IP_Scanner_2.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
Fortigate_Pulse_Connect_Secure_Scanner.sh	* v8.6 - Added CVE-2020-5902 F5 BIG-IP RCE sc0pe template * v8.6 - Added CVE-2020-5902 F5 BIG-IP XSS sc0pe template * v8.6 - Added F5 BIG-IP detection sc0pe template * v8.6 - Added interesting ports sc0pe template * v8.6 - Added components with known vulnerabilities sc0pe template * v8.6 - Added server header disclosure sc0pe template * v8.6 - Added SMBv1 enabled sc0pe template * v8.6 - Removed verbose comment from stealth scan	6 年前
Fortinet_FortiGate_SSL_VPN_Panel_Detected.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
Fortinet_FortiGate_SSL_VPN_Panel_Detected_1.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
Fortinet_FortiGate_SSL_VPN_Panel_Detected_2.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
Fortinet_FortiGate_SSL_VPN_Panel_Detected_3.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
Frontpage_Service_Password_Disclosure.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
Git_Config_Detected.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
JK_Status_Manager.sh	Added 20+ new Sc0pe templates	6 年前
Jaspersoft_Detected.sh	Fixed auto-update code	5 年前
Jenkins_Scanner.sh	Added 20+ new Sc0pe templates	6 年前
Jetty_Version_Disclosure.sh	Added 20+ new Sc0pe templates	6 年前
Jira_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Jira_Scanner_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Jira_Scanner_3.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Jolokia_Version_Disclosure.sh	Added 20+ new Sc0pe templates	6 年前
Joomla_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Joomla_Scanner_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Joomla_Version_Disclosure.sh	Merged several changes for v8.5	6 年前
Laraval_Environment_File_Found.sh	Fixed auto-update code	5 年前
MS_SQL_Reporting_Server_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
MS_SQL_Reporting_Server_Scanner_2.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Magento_2.3.0_SQL_Injection.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
Mailman_Version_Disclosure.sh	Fixed auto-update code	5 年前
MobileIron_Login_1.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
MobileIron_Login_2.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
MobileIron_Login_3.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
PHP_Composer_Disclosure.sh	Fixed auto-update code	5 年前
PHP_Info.sh	Sn1per by @Sn1perSecurity - https://sn1persecurity.com	3 年前
Palo_Alto_GlobalProtect_PAN-OS_Portal_Scanner.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
PulseSecure_VPN_Detected.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
RabbitMQ_Management_Default_Credentials.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
RabbitMQ_Management_Interface_Detected.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
Robots.txt_Detected.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
SAP_NetWeaver_AS_JAVA_LM_Configuration_Wizard_Detection.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
SQLiteManager_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Sitemap.xml_Detected.sh	* v8.7 - Updated web file bruteforce lists * v8.7 - Added updated Slack API integration/notifications * v8.7 - Added Arachni, Nikto, Nessus, NMap + 20 passive sc0pe vulnerability parsers	5 年前
SolarWinds_Orion_Default_Credentials_1.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
SolarWinds_Orion_Default_Credentials_2.sh	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
SolarWinds_Orion_Panel.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
TeamQuest_Login_Found.sh	Merged several changes for v8.5	6 年前
Telerik_File_Upload_Web_UI.sh	Merged several changes for v8.5	6 年前
Tiki_Wiki_CMS_Groupware_Scanner.sh	* v8.6 - Added CVE-2020-12720 - vBulletin Unauthenticaed SQLi * v8.6 - Added CVE-2020-9757 - SEOmatic < 3.3.0 Server-Side Template Injection * v8.6 - Added CVE-2020-1147 - Remote Code Execution in Microsoft SharePoint Server * v8.6 - Added CVE-2020-3187 - Citrix Unauthenticated File Deletion * v8.6 - Added CVE-2020-8193 - Citrix Unauthenticated LFI * v8.6 - Added CVE-2020-8194 - Citrix ADC & NetScaler Gateway Reflected Code Injection * v8.6 - Added CVE-2020-8982 - Citrix ShareFile StorageZones Unauthenticated Arbitrary File Read * v8.6 - Added CVE-2020-9484 - Apache Tomcat RCE by deserialization * v8.6 - Added Cisco VPN scanner template * v8.6 - Added Tiki Wiki CMS scanner template * v8.6 - Added Palo Alto PAN OS Portal scanner template * v8.6 - Added SAP NetWeaver AS JAVA LM Configuration Wizard Detection * v8.6 - Added delete task workspace function to remove running tasks	6 年前
Unauthenticated_Jenkins_Dashboard_Detected.sh	Fixed auto-update code	5 年前
VMware_vCenter_Unauthenticated_Arbitrary_File_Read.sh	Sn1per by @Sn1perSecurity - https://sn1persecurity.com	3 年前
Weak_Authentication_Scanner.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
WebLogic_Scanner.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Web_Config_Detected.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前
Weblogic_Application_Server_Detected.sh	Added 20+ new Sc0pe templates	6 年前
Wordpres_Scanner_1.sh	* v8.7 - Fixed logic error in stealth mode recon scans not running * v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset * v8.7 - Fixed F- detection in Wordpress Sc0pe templates * v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection * v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE	6 年前
Wordpres_Scanner_2.sh	* v8.7 - Fixed logic error in stealth mode recon scans not running * v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset * v8.7 - Fixed F- detection in Wordpress Sc0pe templates * v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection * v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE	6 年前
Wordpres_Scanner_3.sh	* v8.7 - Fixed logic error in stealth mode recon scans not running * v8.7 - Added CVE-2020-7048 - WP Database Reset 3.15 Unauthenticated Database Reset * v8.7 - Fixed F- detection in Wordpress Sc0pe templates * v8.7 - Added CVE-2020-11530 - Wordpress Chop Slider 3 Plugin SQL Injection * v8.7 - Added CVE-2019-11580 - Atlassian Crowd Data Center Unauthenticated RCE	6 年前
Wordpress_WP-File-Manager_Version_Detected.sh	Fixed auto-update code	5 年前
XSS.py	* v9.0 - Added Fortinet FortiGate SSL VPN Panel Detected sc0pe template * v9.0 - Added CVE-2020-17519 - Apache Flink Path Traversal sc0pe template * v9.0 - Added RabbitMQ Management Interface Detected sc0pe template * v9.0 - Added CVE-2020-29583 Zyxel SSH Hardcoded Credentials via BruteX * v9.0 - Removed vulnscan NMap CSV updates/downloads to save space/bandwidth * v9.0 - Added Nuclei sc0pe parser * v9.0 - Added Nuclei vulnerability scanner * v9.0 - Added Wordpress WPScan sc0pe vulnerability parser * v9.0 - Fixed issue with wrong WPscan API key command * v9.0 - Added CVE-2020-11738 - WordPress Duplicator plugin Directory Traversal sc0pe template * v9.0 - Renamed AUTO_VULNSCAN setting to "VULNSCAN" in sniper.conf to perform vulnerability scans via 'normal' mode	5 年前
cPanel_Login_Found.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
cPanel_Login_Found_2.sh	* v8.9 - Tuned sniper.conf around performance for all scans and recon modes * v8.9 - Added out of scope options to config * v8.9 - Added automatic HTTP/HTTPS web scans and vulnerability scans to 'normal' mode * v8.9 - Added SolarWinds Orion Panel Default Credentials sc0pe template * v8.9 - Added SolarWinds Orion Panel sc0pe template * v8.9 - Fixed issue with theHarvester not running on Kali 2020.4 * v8.9 - Added WPScan API support * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Config Password Disclosure sc0pe template * v8.9 - Added CVE-2020-8209 - XenMobile-Citrix Endpoint Management Path Traversal sc0pe template * v8.9 - Removed verbose error for chromium on Ubuntu * v8.9 - Added CVE-2020-8209 - Citrix XenMobile Server Path Traversal sc0pe template * v8.9 - Fixed F+ in CSP Not Enforced sc0pe template * v8.9 - Added CVE-2020-14815 - Oracle Business Intelligence Enterprise DOM XSS sc0pe template * v8.9 - Fixed issue with dnscan not working in Kali 2020.3 * v8.9 - Fixed issue with screenshots not working in Ubuntu 2020 * v8.9 - Added Frontpage Service Password Disclosure sc0pe template * v8.9 - Removed Yasuo tool	5 年前
phpMyAdmin_Scanner_1.sh	Sn1per Community Edition by @xer0dayz - https://xerosecurity.com	6 年前