{"name":"Sn1per: Automate Penetration Testing and Attack Surface Recon","description":"Sn1per is a Shell-based offensive-security platform for reconnaissance, vulnerability scanning, exploitation, and reporting in one workspace. It targets penetration testers and security teams, with Linux installation and Docker deployment options.","github":"https://github.com/1N3/Sn1per","url":"https://osrepos.com/repo/1n3-sn1per","source":"osrepos.com","sourceDescription":"This repository profile is provided by osrepos.com, an open source repository discovery platform.","repositoryProfile":"https://osrepos.com/repo/1n3-sn1per","generatedFor":"open source discovery and AI-assisted research","markdown":"https://osrepos.com/repo/1n3-sn1per.md","json":"https://osrepos.com/repo/1n3-sn1per.json","topics":["shell","cybersecurity","security-tools","penetration-testing","attack-surface-management","osint","vulnerability-scanner"],"keywords":["shell","cybersecurity","security-tools","penetration-testing","attack-surface-management","osint","vulnerability-scanner"],"stars":null,"summary":"Sn1per is a Shell-based offensive-security platform for reconnaissance, vulnerability scanning, exploitation, and reporting in one workspace. It targets penetration testers and security teams, with Linux installation and Docker deployment options.","content":"## Overview\n\nSn1per is a Shell-based offensive-security platform that brings reconnaissance, vulnerability scanning, exploitation, and reporting together in one workspace. It is intended to reduce the effort of coordinating separate tools for penetration tests and attack surface assessments. The README describes a Community Edition in this repository, alongside paid Professional and Enterprise editions.\n\nThe project targets penetration testers, red teams, and security teams that need to assess internet-facing assets or run scans across lists of hosts. It supports Linux distributions including Kali, Ubuntu, Debian, and Parrot, as well as Docker deployment and an AWS Marketplace image.\n\n## Key Features\n\n- Runs reconnaissance, scanning, exploitation, and reporting workflows from a command-line interface.\n- Provides scan modes for individual targets, CIDR ranges, web services, ports, and target lists.\n- Organizes scan output into workspaces and stores results under `/usr/share/sniper/loot/`.\n- Integrates with third-party security tools and services, including Nmap, OpenVAS, Metasploit, Burp Suite, Shodan, and VirusTotal.\n- Offers scheduled scans and commands to inspect status, reload results, and export loot.\n- The README describes more than 90 integrations, 600+ exploits, and 10,000+ detections.\n\n## Use Cases\n\n- A penetration tester can run a reconnaissance and vulnerability assessment against an authorized target from one CLI workflow.\n- A red team can scan a supplied host list or CIDR range to identify live systems and services for a scoped assessment.\n- A security team can schedule repeat scans and compare findings as its external attack surface changes.\n- A bug bounty researcher can combine OSINT and web scanning when assessing programs where automated testing is permitted.\n\n## Our Take\n\nSn1per offers broad offensive-security workflows and integrations, but its measured maintenance is quiet: there have been no commits or releases in the past 90 days, and its latest tagged release is over two years old.\n\n**Good fit if:**\n- You need a Shell-based CLI that combines recon, scanning, and reporting for authorized assessments.\n- Your environment can run the Linux installation or Docker setup, and you have checked the Community Edition's license terms.\n- You can validate the tools and scan behavior in your own environment before relying on results.\n\n**Look elsewhere if:**\n- You require evidence of frequent upstream releases or recent issue and pull-request activity; the measured activity shows none in the past 90 days.\n- You need an explicitly permissive license; the README describes a custom EULA, while GitHub reports the license as `NOASSERTION`.\n- Your workflow requires a maintained, recently released project as a hard adoption requirement.\n\n## Project Health\n\n| Signal | Value |\n|---|---|\n| Status | **Quiet**: no commits in the last 90 days and no release in a year |\n| Last commit | 2026-07-04 (4 months ago) |\n| Commits, last 90 days | 0 |\n| Releases, last 12 months | 0 (latest v9.2, 2023-07-29) |\n| Contributors | 26 (top contributor: 70% of commits) |\n| Issues closed, last 90 days | 0 |\n| Pull requests merged, last 90 days | 0 |\n| Project age | 11 years |\n\nChecked on 2026-10-26 with the GitHub API.\n\n## Project Facts\n\n- Language: Shell\n- Stars: 11.5k\n- Forks: 2.2k\n- Topics: attack-surface, attack-surface-management, attacksurface, bugbounty-platform, cybersecurity, hacking, hacking-tools, osint-framework\n- Website: https://sn1persecurity.com\n- Archived: no\n\n## What You Need\n\nDetected in the repository:\n\n- Shell (main language on GitHub)\n- A Dockerfile, so it can run in a container; a Compose file sets up the related services\n- Automated checks on GitHub Actions\n\n## Getting Started\n\nOn a supported Linux system, clone the repository and run the installer:\n\n```bash\ngit clone https://github.com/1N3/Sn1per.git\ncd Sn1per\nsudo bash install.sh\n```\n\nThen try a scan against a target you are authorized to assess:\n\n```bash\nsniper -t example.com -m normal\n```\n\nSee the [README](https://github.com/1N3/Sn1per) for Docker setup, scan modes, configuration, and usage details.\n\n## License in Plain Words\n\nNo standard license was detected. Without a license, the default copyright rules apply: you may read the code, but not reuse it. Check the repository or ask the authors.\n\n## Alternatives\n\n- [Nettacker](https://osrepos.com/repo/owasp-nettacker): Nettacker automates modular network, web, IoT, and API testing through CLI, REST API, and web UI, while Sn1per bundles broader reconnaissance and assessment workflows in a shell-based platform.\n\n| Project | Language | License | Stars | Status |\n|---|---|---|---|---|\n| **Sn1per** | Shell | – | 11.5k | Quiet |\n| [Nettacker](https://osrepos.com/repo/owasp-nettacker) | Python | Apache-2.0 | 5.7k | Active |\n\n## Considerations\n\nThe measured project status is Quiet: no commits, releases, merged pull requests, or closed issues were recorded in the past 90 days, and there has been no release in over a year. The repository has 26 contributors, and the measured contribution share does not indicate that the project depends mostly on one person. Treat the README's newer Professional-edition release claims separately from the GitHub API's latest tagged release data when evaluating maintenance and version availability.\n\nThe Community Edition is source-available under a custom EULA according to the README, not clearly identified as an OSI-approved license by the supplied GitHub metadata. Review `LICENSE.md` and third-party notices before redistribution or commercial use. Installation requires root privileges, and the tool performs active security testing, so only run it against systems for which you have authorization.","metrics":{"detailViews":3,"githubClicks":0},"dates":{"published":null,"modified":"2026-10-26T18:29:29.000Z"}}