1N3/Sn1per

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

11043 stars · 2172 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Sn1per is an open-source automated penetration testing and attack surface management platform that chains reconnaissance, scanning, exploitation, and reporting into a single CLI-driven workflow, with 600+ exploits and 90+ tool/API integrations such as Nmap, Nessus, Burp Suite, Metasploit, and Nuclei. The free Community Edition is a large Shell script for Kali/Debian (or Docker), while paid Professional and Enterprise editions add a web UI, JSON API, scheduled scans, and enterprise reporting.

Use cases

• automate reconnaissance and vulnerability scanning of a target network from one command
• run an automated penetration test end to end with exploit verification
• enumerate subdomains, open ports, and services for bug bounty hunting
• monitor and manage my organization's external attack surface
• orchestrate nmap, metasploit, nessus, and nuclei into a single scan pipeline
• collect OSINT on a domain or IP range
• generate penetration test reports automatically from scan findings

When to choose

• You are a pentester, red teamer, or bug bounty hunter who wants a one-command recon-to-exploit workflow instead of stitching together dozens of tools
• You need to orchestrate existing scanners (Nmap, Nessus, Burp, OpenVAS, WPScan, Nuclei) into one run with a unified findings database
• You run Kali Linux or Debian natively, or can use Docker, and want continuous attack surface discovery with scheduled scans and reporting

When to avoid

• You need a purely passive or defensive scanner with minimal network noise — Sn1per actively probes, enumerates, and attempts exploitation, so it requires authorization to run
• You need first-class support on non-Kali/non-Debian operating systems without Docker, or a permissive open-source license — the core ships under a custom license and the web UI, reporting, and API are paid Professional/Enterprise features
• You want a lightweight single-purpose scanner rather than a heavyweight orchestrated platform with many external tool dependencies

Facets

cli-tool · maturity active

penetration-testing vulnerability-scanning osint security cli workflow-automation security penetration-testing osint developer-tools cli self-hosted pentesting recon attack-surface-management bug-bounty exploitation red-team vulnerability-scanning nmap metasploit burp-suite nuclei kali-linux shell-script scan-orchestration pentest-reporting custom-license commercial-edition linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="1N3/Sn1per")