{"id":26428,"date":"2024-01-01T10:29:22","date_gmt":"2024-01-01T17:29:22","guid":{"rendered":"https:\/\/sn1persecurity.com\/wordpress\/?p=26428"},"modified":"2024-01-01T10:29:22","modified_gmt":"2024-01-01T17:29:22","slug":"sn1per-scan-engine-v10-5-released","status":"publish","type":"post","link":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-scan-engine-v10-5-released\/","title":{"rendered":"Sn1per Scan Engine v10.5 Released!"},"content":{"rendered":"
Sn1per SE (Scan Engine) v10.5 <\/strong>is now available with a ton of new features and improvements. This update is part of the Sn1per SE<\/strong> development branch which is available to Sn1per Professional v10.0<\/a> and Sn1per Enterprise<\/a> customers. If you are a previous customer (ie. Sn1per Professional v9.0 or less) or if you use the Community Edition available on Github<\/a>, you will need to purchase a Sn1per Professional v10.0<\/a> license to download and receive updates.<\/div>\n

<\/p>\n

\n

New Vulnerability Detections<\/h4>\n

* v10.5 – Added port 25 SMTP Metasploit auxiliary modules
\n* v10.5 – Added HTTP open proxy check Nuclei template
\n* v10.5 – Added SSRF via HTTP open proxy check Nuclei template
\n* v10.5 – Added Citrix Gateway detection sc0pe template
\n* v10.5 – Added Fortinet SSL VPN Portal detection sc0pe template
\n* v10.5 – Added Insecure Transmission of Credentials via HTTP sc0pe template
\n* v10.5 – Added Cisco IOS web UI detection Nuclei template
\n* v10.5 – Added CVE-2023-20198_IOC Nuclei template
\n* v10.5 – Added CVE-2023-22515 Nuclei template
\n* v10.5 – Added CVE-2023-22518 Nuclei template
\n* v10.5 – Added Gitlab CI Sensitive Data Disclosure Nuclei template
\n* v10.5 – Added interesting data in static files Nuclei template
\n* v10.5 – Added Public S3 Bucket detection sc0pe template
\n* v10.5 – Added SSL\/TLS Ciphers enabled sc0pe template<\/p>\n

\"Sn1per<\/a>
Sn1per Enterprise Vulnerability Report<\/figcaption><\/figure>\n<\/div>\n
\n

New Features<\/h4>\n

* v10.5 – Added BeVigil sub-domain and endpoint retrieval
\n* v10.5 – Added virtual host checking via recon mode
\n* v10.5 – Added cloud_enum tool to enumerate cloud assets owned by organization
\n* v10.5 – Added plugin\/template automatic update script
\n* v10.5 – Added CISA known exploits CSV to update script
\n* v10.5 – Added USER_AGENT setting to all confs to set the web based user-agent used
\n* v10.5 – Added NUCLEI_ALL_SUBS_VULNERABILITY_SCAN setting to recon mode to run Nuclei against all discovered sub-domains
\n* v10.5 – Added NUCLEI_CLOUD_SCAN setting to recon mode to run Nuclei against all discovered sub-domains
\n* v10.5 – Improved Nuclei takeover scans by including web based detection templates
\n* v10.5 – Added SQLMap automated SQL injection scans for all dynamic parameters and URL’s
\n* v10.5 – Updated web-brute-common.txt wordlist to remove F+ results and improve results<\/p>\n

\"Sn1per<\/a>
Sn1per Web Brute Force<\/figcaption><\/figure>\n

Configuration Template Updates<\/h4>\n

* v10.5 – Added new configuration settings for USER_AGENT, BEVIGIL_SUBDOMAINS, BEVIGIL_ENDPOINTS, CLOUD_ENUM, VHOST_CHECK, SQLMAP, NUCLEI_CLOUD_SCAN, NUCLEI_ALL_SUBS_VULNERABILITY_SCAN to all confs<\/p>\n

New Tools<\/h4>\n

* v10.5 – Added Katana web spider
\n* v10.5 – Added cloud_enum tool
\n* v10.5 – Added SQLMap to web scans<\/p>\n

\"Sn1per<\/a>
Sn1per SE SQLMap<\/figcaption><\/figure>\n

Fixes<\/h4>\n

* v10.5 – Fixed issue with SCAN_ALL_DISCOVERED_MODE not being set preventing automated scans from occuring
\n* v10.5 – Fixed issue with HudsonRock API retreival via OSINT mode<\/p>\n

Update Instructions<\/h4>\n

To update to Sn1per v10.4, customers can run the ‘sniper -u<\/strong>‘ command from the command line or use the ‘Update<\/strong>‘ function from the Command Execution module<\/a>.<\/p>\n<\/div>\n

\r\n\r\n<\/span>\r\nFacebook<\/span>\r\n\r\n13<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nTwitter<\/span>\r\n\r\n4<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nReddit<\/span>\r\n\r\n1<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nLinkedin<\/span>\r\n\r\n2<\/span>\r\n\r\n<\/a>\r\n\r\n<\/i><\/span><\/a>
X<\/span>\r\n\r\n<\/span>\r\nEmail<\/span>\r\n1<\/span>\t\t\t\t\r\n\r\n<\/a>\r\n<\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Sn1per SE (Scan Engine) v10.5 is now available with a ton of new features and improvements. This update is part of the Sn1per SE development branch which is available to\u2026<\/p>\n","protected":false},"author":1,"featured_media":26431,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[184],"tags":[332,180,173,41,270,322,116,259,38,247,269,37,285,181,171,118,312],"class_list":["post-26428","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-332","tag-attack","tag-automated","tag-bugbounty","tag-engine","tag-enterprise","tag-hacking","tag-management","tag-professional","tag-scan","tag-se","tag-sn1per","tag-sn1persecurity","tag-surface","tag-tool","tag-tools","tag-v10-0"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t