{"id":36913,"date":"2024-11-28T13:10:46","date_gmt":"2024-11-28T20:10:46","guid":{"rendered":"https:\/\/sn1persecurity.com\/wordpress\/?p=36913"},"modified":"2025-11-01T14:23:12","modified_gmt":"2025-11-01T21:23:12","slug":"sn1per-scan-engine-v10-7-released","status":"publish","type":"post","link":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-scan-engine-v10-7-released\/","title":{"rendered":"Sn1per Scan Engine v10.7 Released!"},"content":{"rendered":"
Sn1per SE (Scan Engine) v10.7 <\/strong>is now available with a ton of new features and improvements. This update is part of the Sn1per SE<\/strong> development branch which is available to Sn1per Professional<\/a> and Sn1per Enterprise<\/a> customers. If you are a previous customer or if you use the Community Edition available on Github<\/a>, you will need to purchase a Sn1per Professional<\/a> or Sn1per Enterprise<\/a> license to download and receive updates.<\/div>\n

<\/p>\n

\n

\"Sn1per-Enterprise-20241126\"<\/a><\/h4>\n

New Features<\/h4>\n

* v10.7 – Added logic to extract all email addresses from workspace
\n* v10.7 – Added static code scanning for all extracted JS files
\n* v10.7 – Added per target configuration registration to allow simultaneous scans with different configurations
\n* v10.7 – Added Nuclei technology scans for all web, recon and network scans
\n* v10.7 – Moved Hunter.io integration scans to OSINT mode<\/p>\n

New Tools<\/h4>\n

* v10.7 – Added Sc0pe Static Scan Tool by @xer0dayz to run\/parse\/combine results from semgrep, trufflehog, gitleaks and nuclei static scans
\n* v10.7 – Added Dalfox XSS scanning\/vuln parser
\n* v10.7 – Added semgrep static code scanning for sensitive data
\n* v10.7 – Added trufflehog static code scanning for sensitive data
\n* v10.7 – Added gitleaks static code scanning for sensitive data
\n* v10.7 – Added nuclei static code scanning for sensitive data
\n* v10.7 – Added S3scanner tool to scan for AWS S3 mis-configurations in RECON mode
\n* v10.7 – Added HTTPX tool to detect all web services for all discovered sub-domains in RECON mode
\n* v10.7 – Added PorchPirate Postman secrets scan to OSINT mode
\n* v10.7 – Added SwaggerSpy SwaggerHub secrets scan to OSINT mode
\n* v10.7 – Added misconfig-mapper tool to OSINT mode to check for 3rd party mis-configurations<\/p>\n

\"\"<\/a><\/h4>\n

New Templates<\/h4>\n

* v10.7 – Added template for CVE-2024-21733
\n* v10.7 – Added template for PHPinfo Disclosure
\n* v10.7 – Added template for JQuery version disclosure
\n* v10.7 – Added template for generic HTTP client de-sync vulnerabilities
\n* v10.7 – Added template for blind XXE detection
\n* v10.7 – Added template for header reflection in body
\n* v10.7 – Added template for custom local file inclusion fuzzing
\n* v10.7 – Added template for reflected sinks fuzzing
\n* v10.7 – Added template for reflected XSS query fuzzing
\n* v10.7 – Added template for file credentials disclosure<\/p>\n

\"\"<\/a><\/p>\n

New Settings<\/h4>\n

* v10.7 – Added new setting “FFUF_OPTS” to set all FFuf scan options
\n* v10.7 – Added new setting “USE_EXISTING_DOMAINS” to use existing sub-domains\/skip sub-domain enumeration for RECON mode
\n* v10.7 – Added new setting “SCAN_ALL_DISCOVERED_IPS” to scan all discovered IP’s in RECON mode<\/p>\n

Update Instructions<\/h4>\n

To update Sn1per to the latest version, customers can run the ‘sniper -u<\/strong>‘ command from the command line or use the ‘Update<\/strong>‘ function from the Command Execution module<\/a>.<\/p>\n<\/div>\n

\r\n\r\n<\/span>\r\nFacebook<\/span>\r\n\r\n16<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nTwitter<\/span>\r\n\r\n4<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nReddit<\/span>\r\n\r\n1<\/span>\r\n\r\n<\/a>\r\n\r\n\r\n\r\n<\/span>\r\nLinkedin<\/span>\r\n\r\n2<\/span>\r\n\r\n<\/a>\r\n\r\n<\/i><\/span><\/a>
X<\/span>\r\n\r\n<\/span>\r\nEmail<\/span>\r\n1<\/span>\t\t\t\t\r\n\r\n<\/a>\r\n<\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Sn1per SE (Scan Engine) v10.7 is now available with a ton of new features and improvements. This update is part of the Sn1per SE development branch which is available to\u2026<\/p>\n","protected":false},"author":1,"featured_media":55230,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[184],"tags":[353,180,173,41,270,322,116,259,38,247,269,37,285,181,171,118,312],"class_list":["post-36913","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-353","tag-attack","tag-automated","tag-bugbounty","tag-engine","tag-enterprise","tag-hacking","tag-management","tag-professional","tag-scan","tag-se","tag-sn1per","tag-sn1persecurity","tag-surface","tag-tool","tag-tools","tag-v10-0"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t