A powerful framework for automated target security analysisSn1per – an automated reconnaissance and penetration scanning tool
Features:
⏺ Automatically collects basic reconnaissance data (e.g., whois, ping, DNS, etc.)
⏺ Automatically runs hacker Google search queries against the target domain
⏺ Automatically enumerates open ports
⏺ Automatically brute-forces subdomains and DNS information
⏺ Automatically runs targeted NMap scripts against open ports
⏺ Automatically runs targeted Metasploit scans and exploitation modules
⏺ Automatically scans all web applications for common vulnerabilities
⏺ Automatically brute-forces all exposed services
Automatically exploits remote hosts to gain remote shell access
⏺ Performs high-level enumeration of multiple hosts
⏺ Auto-pwn added for Metasploitable, ShellShock, MS08-067, Tomcat Default Credentials
— It uses open sources and modern methods to identify weaknesses in systems
