Sn1per Professional v8.0 – What’s New?

Sn1per Professional v8.0 Box
Sn1per Professional v8.0

If you’re a new or returning customer, you might be wondering what’s new in Sn1per Professional v8.0. In this post, I’ve highlighted the key features and differences compared to Sn1per Professional v7.0 and below.

Secure Web UI & Dynamic Reporting

One of the biggest changes you’ll notice is a complete transition from static client-side HTML reports to dynamic server side PHP code. This has several advantages:

  • Improved reporting performance (no need to regenerate reports after each scan).
  • View multiple remote and local Sn1per instances from a secure HTTPS enabled web UI with built-in authentication. This includes utilizing Sn1per on remote VPS instances where you might only have SSH and web access with no X windows GUI environment.
Sn1per Professional v8.0 Secure Web UI
Sn1per Professional v8.0 Secure Web UI
  • Compatibility with Docker on any OS (ie. Mac/Linux/Windows, etc). Simply map port 1337/tcp on your Docker instance to your local IP (ie. docker run -p 1337:1337 -it sn1per /bin/bash) and navigate to the web UI (ie. https://127.0.0.1:1337).
Sn1per Professional v8.0 Docker VPS
Sn1per Professional v8.0 Docker VPS

Modular Design & Add-ons

Another big improvement in v8.0 is a new modular design which allows importing of additional features and add-ons without modifying the core code (ie. Sn1per Professional Command Execution Add-on).

Command Execution Add-on

With the Command Execution Add-on, you can now easily manage multiple Sn1per Professional instances from the web interface without ever touching the command line.

  • Initiate Sn1per scans from the web UI.
    • Single & multi target selections.
    • Mode selection.
    • Auxiliary mode selection.
    • Scheduled/recurring scan selection.
  • Manage workspaces from the web UI.
    • Create workspaces.
    • Add hosts.
    • Delete hosts.
    • Delete workspaces.
  • View scan status and command output.
  • Check for Sn1per updates.
Sn1per-v8.0-command-exec-addon1
Sn1per Professional v8.0 Command Execution Add-on
Sn1per Professional v8.0 Command Execution Add-on Task Manager
Sn1per Professional v8.0 Command Execution Add-on Task Manager

New Viewing Options

New split screen or single pane views were added for easy navigation and viewing of workspaces, host reports and command status. This allows you to simultaneously view the workspace report in one panel while you browse each individual host report in the other panel. Alternatively, you can also choose 100% responsive single panel for full screen width viewing.

Sn1per-Professional-v8.0-command-execution-addon2
Sn1per Professional v8.0 Command Execution Add-on

CSV Exporting

Another big change in v8.0 was the addition of CSV reporting and exports of all inventory (ie. domain, IP, server headers, HTTP status codes & open ports) via the workspace host list. This allows full text searching, sorting and advanced filtering options of all inventory.

Sn1per Professional v8.0 CSV Report
Sn1per Professional v8.0 CSV Report

Host Filters

New host filters and views were added to show “All Hosts”, “Open Ports” and “Web Hosts”. This makes finding interesting hosts much easier when browsing the host table and improved performance dramatically.

Sn1per Professional v8.0 Host List
Sn1per Professional v8.0 Host List

Host Table Sorting

Improved host table allows filtering and sorting for domain/IP, DNS, HTTP headers, HTTP status codes and open ports. Use the filter input to further narrow the search.

Sn1per Professional v8.0 Web Hosts View
Sn1per Professional v8.0 Web Hosts View

Host Jump

The new host jump input field allows you to enter the hostname or IP address of the target to view the detailed host report. This is handy when you need to view the exact targets report immediately. No need to search, sort or filter!

Sn1per Professional v8.0 Host Jump
Sn1per Professional v8.0 Host Jump

NMap Vulnerability Reporting

NMap CVE vulnerability reporting was also added to the “Vulnerabilities” section using the “Vulners” CVE scripting engine to report open CVE’s based on service banners detected.

Sn1per Professional v8.0 NMap Vulnerabilities
Sn1per Professional v8.0 NMap Vulnerabilities

Updates Panel

A new “Updates” panel was added to the workspace navigator to view all add-on modules and updates for Sn1per. This allows seamless notifications and updates for all Sn1per updates and new modules as they get released. This will become increasingly useful as we add more modules or release more updates in the future.

Sn1per-v8.0-updates-panel1
Sn1per Professional v8.0 Updates Panel

Web Links

Prior to version 8.0, the “Web Files” and “Web URL’s” section of the report contained text based output of all links detected. Now in version 8.0, we changed to links to actual web links to easily view all hosted content from the detailed host reports. This makes viewing discovered content extremely easy and fluid.

Sn1per Professional v8.0 Web File Links
Sn1per Professional v8.0 Web File Links

Additional Features

In this post, we’ve outlined the major changes of Sn1per Professional version 8.0, but it’s important to note that we have kept all the existing features and functionality from version 7.0 and below as well. If you are not familiar with all of these features, feel free to check our blog post for more details here.

Buy now!

As always, feel free to reach out to us at [email protected] with any questions!

Sn1per Professional v7.0 Released!

Sn1per Professional v7.0

Sn1per Professional v7.0 is now available from the XeroSecurity website!

Buy Now

Features

  • New workspace navigator with sortable/searchable tables and usage stats
Sn1per Professional v7.0 Workspace Navigator

Sn1per Professional v7.0 Workspace Navigator

  • Added quick links to view scan tasks, unique IP’s, live hosts, like web hosts, subnets and discovered IP’s to top menu
Sn1per Professional v7.0 Workspace Dashboard

Sn1per Professional v7.0 Workspace Dashboard

  • New sortable/searchable Bootstrap 4 host list table with pagination, screenshots and full web and network meta data
Sn1per Professional v7.0 Host Table

Sn1per Professional v7.0 Host Table

  • New scan tags added for “Vulnerable”, “Takeover”, “New”, “Shelled”, “Cracked”, “Updated”, “Live”
  • Added collapsible functional sections to main report for more streamlined viewing (ie. Quick Commands, Scan Tasks, Scheduled Scans, OSINT, Takeovers, etc.)
Sn1per Professional v7.0 Accordion1

Sn1per Professional v7.0 Accordion

  • New “Quick Commands” section for quick copy/paste Sn1per commands
Sn1per Professional v7.0 Quick Commands

Sn1per Professional v7.0 Quick Commands

  • New “Scan Tasks” section to view all Sn1per scan times/dates
Sn1per Professional v7.0 Scan Tasks

Sn1per Professional v7.0 Scan Tasks

  • New “Scheduled Tasks” section to view all Sn1per scheduled scan tasks
Sn1per Professional v7.0 Scheduled Tasks

Sn1per Professional v7.0 Scheduled Tasks

  • New “OSINT” section to view OSINT data for the workspace
Sn1per Professional v7.0 OSINT1

Sn1per Professional v7.0 OSINT

  • New “Credentials” section to view all successful brute force credentials
Sn1per Professional v7.0 Credentials1

Sn1per Professional v7.0 Credentials

  • New “Vulnerabilities” section to view all vulnerabilities from various tools for the entire workspace
Sn1per Professional v7.0 Vulnerabilities1

Sn1per Professional v7.0 Vulnerabilities

  • Improved wide-screen visibility of reports
  • Added quick links to view loot folders and files
  • Added command to regenerate all detailed host reports in a workspace ‘sniper –reimportall’ command
  • Improved report generation performance via ‘sniper –reimport’ command for differential report generation
  • 100% responsive web UI resizes to fit any resolution or device.
  • Scan progress bar indicates overall scan status to ensure 100% scan coverage of the entire workspace.
  • Scan dashboard gives high level overview of workspace, including downloadable lists to all domains, scanned targets and unscanned targets. These can be easily referenced and used to scan the entire attack surface using Sn1per.
  • Reports menu includes links to all Sn1per console reports which can be downloaded and viewed from the main report.
  • Sidebar shortcuts added to both the main Sn1per report and all detailed host reports to quickly jump to each section of the report.
  • Slideshow for all gathered screenshots
  • Improved host table allows searching for scan mode tags, IP/DNS, HTTP titles, status codes, HTTP headers, WAF detection and open ports.
  • Quick links for both the HTTP and HTTPS versions for each host in the host table.
  • Scan tags to indicate which hosts has been scanned and which mode (ie. Stealth, Web, Portscan, Bruteforce, etc.) and which are new in the host table section of the report.
  • Email security section indicates any email spoofing vulnerabilities for the workspace.
  • Improved takeovers security section indicates any potential domain takeovers or hijacking vulnerabilities.
Sn1per Professional v7.0 Email Takeovers1

Sn1per Professional v7.0 Email Takeovers

  • HTML5 notepad saves automatically to the main report elevating the need to save your work (keep in mind, it uses the local browser cache, so switching browsers or clearing your browser cache will remove your notes!).
  • Detailed host reports are now separate from the main report and include the following features:
    • Updated recon and google dork links
    • 34 customized recon links.
    • 26 customized Google dork links.
    • HTTP/HTTPS quick links.
    • Reports menu to download the full HTML console reports for each host.
    • Added Arachni HTML report imports for all “webscan” mode scans
    • Sn1per Professional v7.0 Arachni Report1

      Sn1per Professional v7.0 Arachni Report

    • Sidebar quick links to jump to each section of the report.
    • HTTP/HTTPS screenshots
    • DNS
    • Sub-domains
    • Open ports
      • Links to full NMap HTML host reports.
      • Sn1per Professional v7.0 NMap HTML Report1

        Sn1per Professional v7.0 NMap HTML Report

    • Fingerprint info
    • HTTP headers
    • Web files
      • Links to download all discovered web files for each host
    • Web URL’s
      • Links to download all discovered URL’s for each host
    • SSL/TLS info
    • New Web Application Scans
    • Sn1per Professional v7.0 Web Application Scans1

      Sn1per Professional v7.0 Web Application Scans

    • New Credentials
    • New Vulnerabilities
  • Single user license
  • Professional technical support

Documentation

https://xerosecurity.com/wordpress/documentation/

Legal Agreement and Disclaimer

By purchasing and/or using Sn1per, you are agreeing to the following end user license agreement referenced here:

https://xerosecurity.com/wordpress/legal/

Sn1per Professional v6.0 now available!

Sn1per Professional v6.0 is now available from the XeroSecurity website.

This is a BIG release with tons of new features and improvements, including:

  • 100% responsive web UI resizes to fit any resolution or device.
  • New scan progress bar indicates overall scan status to ensure 100% scan coverage of the entire workspace.
  • Improved scan dashboard gives high level overview of workspace, including downloadable lists to all domains, scanned targets and unscanned targets. These can be easily referenced and used to scan the entire attack surface using Sn1per.
  • New reports menu includes links to all Sn1per console reports which can be downloaded and viewed from the main report.
  • New sidebar shortcuts added to both the main Sn1per report and all detailed host reports to quickly jump to each section of the report.
  • Slideshow for all gathered screenshots
  • Improved host table allows searching for scan mode tags, IP/DNS, HTTP titles, status codes, HTTP headers, WAF detection and open ports.
  • New quick links for both the HTTP and HTTPS versions for each host in the host table.
  • New scan tags to indicate which hosts has been scanned and which mode (ie. Stealth, Web, Portscan, Bruteforce, etc.) and which are new in the host table section of the report.
  • New email security section indicates any email spoofing vulnerabilities for the workspace.
  • New takeovers security section indicates any potential domain takeovers or hijacking vulnerabilities.
  • New HTML5 notepad saves automatically to the main report elevating the need to save your work (keep in mind, it uses the local browser cache, so switching browsers or clearing your browser cache will remove your notes!).
  • New detailed host reports are now separate from the main report and include the following features:
    • 34 customized recon links.
    • 26 customized Google dork links.
    • HTTP/HTTPS quick links.
    • Reports menu to download the full HTML console reports for each host.
    • New sidebar links for each detailed host report to quickly jump to each section of the report.
    • HTTP/HTTPS screenshots
    • DNS
    • Sub-domains
    • Open ports
      • New links to full NMap HTML host reports.
    • Fingerprint info
    • HTTP headers
    • Web files
    • Web URL’s
      • New links to download all discovered URL’s for each host
    • SSL/TLS info

Documentation

For all questions regarding payment, licensing, installation or general usage, refer to our online documentation for more info or contact us at [email protected].

Documentation

Purchase Link

Sn1per Professional v6.0 (Pre-Order)

Recent Comments