1N3/Sn1per

What it is

Sn1per is a bash-driven offensive-security scanner from Sn1perSecurity LLC (maintainers say it has been built since 2015). The Community Edition in the GitHub repository is described as "source-available, custom EULA", with terms in LICENSE.md and THIRD_PARTY_LICENSES.md. The existing catalog summary calls it open-source. The page does not say it uses an OSI-approved license, so check LICENSE.md before embedding it in a product or redistributing it. The "Sn1per" name and logo are trademarks, and derivative works need permission.

Preconditions

• The installer writes to /usr/share/sniper and needs root.
• Results go to /usr/share/sniper/loot/<workspace>/.
• Docker images exist for Kali and BlackArch. Both examples run with --privileged, which gives the container broad host access.
• An AWS Marketplace AMI is available with Sn1per preinstalled.
• Mode scripts live in modes/, one bash file per mode.

What to do

Install and run a first scan:

git clone https://github.com/1N3/Sn1per.git
cd Sn1per
sudo bash install.sh
sniper -t example.com -m normal

sudo bash install.sh force skips the confirmation prompt. Docker alternatives:

sudo docker compose up
sudo docker run --privileged -it sn1per-kali-linux /bin/bash
sudo docker compose -f docker-compose-blackarch.yml up
sudo docker run --privileged -it sn1per-blackarch /bin/bash

Common invocations from the usage list:

sniper -t <TARGET> -m stealth -o -re
sniper -t <CIDR> -m discover -w <WORKSPACE_ALIAS>
sniper -t <TARGET> -m web
sniper -t <TARGET> -b
sniper -f targets.txt -m airstrike
sniper -f targets.txt -m nuke -w <WORKSPACE_ALIAS>
sniper -w <WORKSPACE_ALIAS> -s daily|weekly|monthly
sniper -w <WORKSPACE_ALIAS> --export
sniper --status
sniper -c /path/to/sniper.conf -t <TARGET> -w <WORKSPACE_ALIAS>

• -o enables OSINT and -re enables recon.
• -b enables bruteforce.
• nuke mode turns on bruteforce, a full port scan, OSINT, recon and workspace/loot together.
• Mass modes take a target file with -f: massportscan, massweb, masswebscan and massvulnscan.
• Workspace housekeeping uses --list, -d (delete workspace), -dh (delete host), --reimport, --reimportall and --reload.
• New flags in the 2026 release are -v (verbose), -db (debug) and -rr (remove resume files). Update with sniper -u.

Caveats

• The page does not clearly separate what the Community Edition includes from what is paid. It says Professional and Enterprise add a Web UI, commercial integrations and email support. It also lists the Workspace Navigator, CSV/Excel/PDF reports and JSON API v1.0 under the "Sn1per Professional 2026" release (dated 26 April 2026). Confirm whether the API and exports are in the free tier before relying on them.
• The figures (600+ exploits, 10,000+ detections, 90+ integrations, 500+ teams) and the claim that active verification removes false positives come from the vendor and are not benchmarked on the page.
• Nuke and bruteforce modes are intrusive. Run them only against targets you are authorized to test, and the contributing notes advise testing changes against a controlled target.