New Vulnerability Detections
* v10.6 – Added Nuclei -headless scan option to improve vulnerability detection
* v10.6 – Added Nuclei -dast option to scan all dynamic parameters in latest version
* v10.6 – Improved Nuclei sub-domain takeover scan templates
New Features
* v10.6 – Added SCAN_ALL_DISCOVERED_IPS config setting to automatically scan all reverse IP’s for all discovered sub-domains automatically
* v10.6 – Added USE_EXISTING_DOMAINS setting to skip discovery phase and use existing sub-domains for scan
* v10.6 – Added NUCLEI_TECH_DETECT setting to detect technology stack of target
* v10.6 – Added improved auto web port target selection (ie. sniper -t https://127.0.0.1:8443)
New Tools
* v10.6 – Added HTTPX tool to recon mode to detect all web hosts
Fixes
* v10.6 – Fixed F+ in sc0pe template for clear-text HTTP communications
* v10.6 – Fixed issue with FFuF switches in latest version
* v10.6 – Fixed GAU –subs switch in latest version
* v10.6 – Removed Nuclei fuzzing-templates repo and update script
* v10.6 – Fixed issue with HTML reports not generating
Update Instructions
To update to Sn1per v10.6, customers can run the ‘sniper -u‘ command from the command line or use the ‘Update‘ function from the Command Execution module.
