pwn 0.4.333

data/bin/pwn_domain_reversewhois

@@ -0,0 +1,89 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+require 'nokogiri'
+require 'csv'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-sRFILTER', '--registrant-filter=RFILTER', '<Required - Registrant Name or Email Address>') do |s|
+    opts[:registrant_filter] = s
+  end
+
+  options.on('-oPATH', '--output-results=PATH', '<Required - Path to Output Results>') do |o|
+    opts[:output_results] = o
+  end
+
+  options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
+    opts[:proxy] = p
+  end
+
+  options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
+    opts[:with_tor] = w
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+registrant_filter = opts[:registrant_filter].to_s.strip.chomp.scrub
+output_results = opts[:output_results].to_s.strip.chomp.scrub
+proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
+with_tor = opts[:with_tor]
+
+begin
+  if proxy != '' && with_tor
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :headless, proxy: proxy, with_tor: true)
+  elsif proxy != '' && with_tor.nil?
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :headless, proxy: proxy)
+  else
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :headless)
+  end
+
+  browser_obj.goto("https://viewdns.info/reversewhois/?q=#{CGI.escape(registrant_filter)}")
+
+  # Consume Results Table and Convert to CSV :)
+  reversewhois_xp_resp = Nokogiri::HTML(browser_obj.html).xpath('//*[@id="null"]/tbody/tr[3]/td/font/table/tbody/tr')
+  CSV.open(output_results, 'w', col_sep: ',', quote_char: "'", force_quotes: true) do |csv|
+    reversewhois_xp_resp.each do |row|
+      tarray = []
+      row.xpath('td').each do |cell|
+        tarray << cell.text
+      end
+      csv << tarray
+    end
+  end
+
+  # Ok, now let's append domain bigdata.com
+  browser_obj.goto('https://domainbigdata.com')
+
+  # Type Registrant Filter in Char-by-Char to Ensure Everyone is Happy ;)
+  PWN::Plugins::TransparentBrowser.type_as_human(q: registrant_filter) do |char|
+    browser_obj.text_field(id: 'txtSearchTopPage').wait_until(&:present?).send_keys(char)
+  end
+  browser_obj.button(id: 'btnTopSearch').wait_until(&:present?).click
+
+  # Consume Results Table and Convert to CSV :)
+  reversewhois_xp_resp = Nokogiri::HTML(browser_obj.html).xpath('//*[@id="domain-same-ip"]/div/div/table/tbody/tr')
+  CSV.open(output_results, 'a', col_sep: ',', quote_char: "'", force_quotes: true) do |csv|
+    reversewhois_xp_resp.each do |row|
+      tarray = []
+      row.xpath('td').each do |cell|
+        tarray << cell.text
+      end
+      csv << tarray
+    end
+  end
+rescue StandardError => e
+  raise e
+ensure
+  browser_obj = PWN::Plugins::TransparentBrowser.close(browser_obj: browser_obj) unless browser_obj.nil?
+end

data/bin/pwn_fuzz_net_app_proto

@@ -0,0 +1,149 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+require 'json'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-dDIR', '--dir-path=DIR', '<Required - Report Output Directory>') do |d|
+    opts[:dir_path] = d
+  end
+
+  options.on('-tHOST', '--target-host=HOST', '<Required - Target Host or IP>') do |t|
+    opts[:target] = t
+  end
+
+  options.on('-pPORT', '--port=PORT', '<Required - Target Port>') do |p|
+    opts[:port] = p
+  end
+
+  options.on('-PPROTOCOL', '--protocol=PROTOCOL', '<Optional - tcp || udp (defaults to tcp)>') do |p|
+    opts[:protocol] = p
+  end
+
+  options.on('-S', '--[no-]secure', '<Optional - boolean to connect to target socket using TLS (defaults to false)') do |s|
+    opts[:tls] = s
+  end
+
+  options.on('-FCHAR', '--fuzz-delimeter=CHAR', "<optional - fuzz delimeter used in request to specify where payloads should reside (defaults to \u2665)>") do |c|
+    opts[:fuzz_delimeter] = c
+  end
+
+  options.on('-rREQUEST', '--request-format=REQUEST', "<Required - String object of socket request w/ \u2665 as position delimeter (e.g. '\"GET /\u2665\u2665 HTTP/1.1\\r\\nHost: \u2665127.0.0.1\u2665\\r\\n\\r\\n\"'>") do |r|
+    opts[:request] = r
+  end
+
+  options.on('-fFILE', '--fuzz-file=FILE', '<Required - path of file containing fuzz requests>') do |f|
+    opts[:fuzz_file] = f
+  end
+
+  options.on('-eENC', '--payload-encoding=ENC', '<Optional - encode payload base64 || hex || html_entity || url (Defaults to nil)>') do |e|
+    opts[:encoding] = e
+  end
+
+  options.on('-DDEPTH', '--encoding-depth=DEPTH', '<Optional - payload encoding payload depth (Defaults to 1)>') do |d|
+    opts[:encoding_depth] = d
+  end
+
+  options.on('-cENC', '--char-encoding=ENC', '<Optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)>') do |c|
+    opts[:char_encoding] = c
+  end
+
+  options.on('-TFLOAT', '--response-timeout=FLOAT', '<Optional - float (defaults to 0.3)>') do |f|
+    opts[:response_timeout] = f
+  end
+
+  options.on('-lFLOAT', '--request-rate-limit=FLOAT', '<Optional - limit between requests in a given thread (defaults to 0.0)>') do |l|
+    opts[:request_rate_limit] = l
+  end
+
+  options.on('-mINT', '--max-threads=INT', '<Optional - fuzz payloads to send in parallel (defaults to 1)>') do |i|
+    opts[:max_threads] = i
+  end
+
+  options.on('-s', '--[no-]start-reporting-server', '<Optional - Start Simple HTTP Server for Reporting>') do |s|
+    opts[:start_reporting_server] = s
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+
+dir_path = opts[:dir_path].to_s.scrub
+target = opts[:target]
+port = opts[:port]
+protocol = opts[:protocol]
+tls = opts[:tls]
+fuzz_delimeter = opts[:fuzz_delimeter]
+request = opts[:request]
+fuzz_file = opts[:fuzz_file].to_s.strip.scrub.chomp if File.exist?(opts[:fuzz_file].to_s.strip.scrub.chomp)
+encoding = opts[:encoding]
+encoding_depth = opts[:encoding_depth]
+opts[:char_encoding].nil? ? char_encoding = 'UTF-8' : char_encoding = opts[:char_encoding]
+response_timeout = opts[:response_timeout]
+request_rate_limit = opts[:request_rate_limit]
+opts[:max_threads].nil? ? max_threads = 1 : max_threads = opts[:max_threads].to_i
+start_reporting_server = opts[:start_reporting_server]
+
+results_hash = { data: [] }
+results_arr = []
+mutex = Mutex.new
+
+slice = max_threads * 3
+File.open(fuzz_file, "rb:#{char_encoding}") do |file|
+  file.each_slice(slice) do |payload_batch_arr|
+    PWN::Plugins::ThreadPool.fill(enumerable_array: payload_batch_arr, max_threads: max_threads) do |payload|
+      socket_fuzz_results_arr = PWN::Plugins::Fuzz.socket(
+        target: target,
+        port: port,
+        protocol: protocol,
+        tls: tls,
+        fuzz_delimeter: fuzz_delimeter,
+        request: request.to_s.b,
+        payload: payload.to_s.b.chomp,
+        encoding: encoding,
+        encoding_depth: encoding_depth,
+        char_encoding: char_encoding,
+        response_timeout: response_timeout,
+        request_rate_limit: request_rate_limit
+      )
+      socket_fuzz_results_arr.each do |hash_line|
+        mutex.synchronize do
+          results_hash[:data].push(hash_line)
+        end
+      end
+    end
+  end
+end
+
+# Generate HTML Report
+print "#{$PROGRAM_NAME} Generating Report..."
+PWN::Reports::Fuzz.generate(
+  dir_path: dir_path,
+  results_hash: results_hash,
+  char_encoding: char_encoding
+)
+puts 'complete.'
+
+# Start Simple HTTP Server (If Requested)
+if start_reporting_server
+  listen_port = 3333
+  if pwn_provider == 'docker'
+    listen_ip = '0.0.0.0'
+  else
+    listen_ip = '127.0.0.1'
+  end
+  puts "For Scan Results Navigate to: http://127.0.0.1:#{listen_port}/pwn_fuzz_net_app_proto.html"
+  simple_http_server_params = "-i #{listen_ip} -p #{listen_port}"
+  system("cd #{dir_path} && pwn_simple_http_server #{simple_http_server_params}")
+end

data/bin/pwn_ibm_appscan_enterprise

@@ -0,0 +1,112 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-SIP', '--appscan_ip=IP', '<Required - IBM Appscan Enterprise Server IP>') { |s| opts[:appscan_ip] = s }
+  options.on('-UUSER', '--ase_username=USER', '<Required - IBM Appscan Enterprise Username>') { |u| opts[:ase_username] = u }
+  options.on('-PPASS', '--ase_password=PASS', '<Required - IBM Appscan Enterprise Password>') { |p| opts[:ase_password] = p }
+  options.on('-tTARGET', '--target_name=TARGET', '<Required - Target Folder Item Name to Initiate Scan>') do |t|
+    opts[:target_name] = t
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+appscan_ip = opts[:appscan_ip].to_s.scrub
+ase_username = opts[:ase_username].to_s.scrub
+ase_password = opts[:ase_password] # Prompt if console_password.nil? (For Demos)
+target_name = opts[:target_name].to_s.scrub
+
+# Login
+appscan_obj = PWN::Plugins::IBMAppscan.login(
+  appscan_ip: appscan_ip,
+  username: ase_username,
+  password: ase_password
+)
+
+# Retrieve Folder Item ID by target_name Variable
+folder_items = PWN::Plugins::IBMAppscan.get_folder_items(appscan_obj: appscan_obj)
+folder_item_id = -1
+folder_items[:xml_response].xpath('//xmlns:content-scan-job').each do |node|
+  folder_item_id = node.xpath('xmlns:id').text if node.xpath('xmlns:name').text == target_name
+end
+# Exit Driver if Folder Item (Target Name) Isn't Found
+raise "ERROR: Target Name: #{target_name} Not Found.  Please Check the Spelling." if folder_item_id == -1
+
+# Run Scan
+scan_action = PWN::Plugins::IBMAppscan.folder_item_scan_action(
+  appscan_obj: appscan_obj,
+  folder_item_id: folder_item_id,
+  action: :run
+)
+
+# Retrieve Report Folder Item ID (Report Collection) by target_name Variable
+report_folder_item_id = -1
+folder_items[:xml_response].xpath('//xmlns:report-pack').each do |node|
+  report_folder_item_id = node.xpath('xmlns:id').text if node.xpath('xmlns:name').text == target_name
+end
+# Exit Driver if Report Folder Item (Target Name) Isn't Found
+raise "ERROR: Report Collection: #{target_name} Not Found. Please Check the Spelling." if report_folder_item_id == -1
+
+# Retrieve Report Pack Collection of Folder Item (Target Name)
+# to Obtain a List of Report Names & IDs
+report_collection = PWN::Plugins::IBMAppscan.get_report_collection(
+  appscan_obj: appscan_obj,
+  report_folder_item_id: report_folder_item_id
+)
+
+# Obtain Report ID for Requested Reports
+reports_to_download = []
+report_collection[:xml_response].xpath('//xmlns:report').each do |r|
+  reports_to_download.push(r.xpath('xmlns:name').text)
+end
+
+pdf_gen_timestamp = Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z')
+reports_to_download.each do |report_to_download|
+  report_collection[:xml_response].xpath('//xmlns:report').each do |report|
+    # We found the report id by name of report
+    next unless report.xpath('xmlns:name').text == report_to_download
+
+    report_id = report.xpath('xmlns:id').text
+
+    # Get Report Schema
+    report_schema = PWN::Plugins::IBMAppscan.get_single_report_schema(
+      appscan_obj: appscan_obj,
+      report_id: report_id
+    )
+
+    # Get General Report
+    report = PWN::Plugins::IBMAppscan.get_single_report(
+      appscan_obj: appscan_obj,
+      report_id: report_id
+    )
+
+    # Get Report Data
+    report_data = PWN::Plugins::IBMAppscan.get_single_report_data(
+      appscan_obj: appscan_obj,
+      report_id: report_id
+    )
+
+    # Get Issue Collection
+    issue_collection = PWN::Plugins::IBMAppscan.get_issue_collection(
+      appscan_obj: appscan_obj,
+      report_id: report_id
+    )
+
+    puts '~' * 33 # Easier for the Eyes in Console
+  end
+end
+
+# Logout
+PWN::Plugins::IBMAppscan.logout(appscan_obj: appscan_obj)

data/bin/pwn_jenkins_create_job

@@ -0,0 +1,68 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-sIP', '--jenkins_ip=IP', '<Required - Jenkins Server IP>') { |s| opts[:jenkins_ip] = s }
+
+  options.on('-dPORT', '--dest-port=PORT', '<Optional - Jenkins Server Port (Defaults to 8080)>') do |port|
+    opts[:port] = port
+  end
+
+  options.on('-UUSER', '--username=USER', '<Required - Jenkins Username>') do |user|
+    opts[:username] = user
+  end
+
+  options.on('-PPASS', '--password=PASS', '<Optional - Jenkins Password (Will Prompt if Flag Undetected)>') do |pass|
+    opts[:password] = pass
+  end
+
+  options.on('-jNAME', '--job-name=NAME', '<Required - Name of Job to Create>') do |job|
+    opts[:job_name] = job
+  end
+
+  options.on('-cPATH', '--config-xml=PATH', '<Required - Path to config.xml>') do |xml|
+    opts[:config_xml] = xml
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+jenkins_ip = opts[:jenkins_ip].to_s.scrub
+port = opts[:port].to_i
+username = opts[:username]
+password = opts[:password]
+job_name = opts[:job_name].to_s.scrub
+config_xml = File.read(opts[:config_xml]) if File.exist?(opts[:config_xml])
+
+if port.positive?
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    port: port,
+    username: username,
+    password: password
+  )
+else
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    username: username,
+    password: password
+  )
+end
+
+jenkins_obj.job.create(
+  job_name,
+  config_xml
+)
+
+PWN::Plugins::Jenkins.disconnect(jenkins_obj: jenkins_obj)

data/bin/pwn_jenkins_create_view

@@ -0,0 +1,68 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-sIP', '--jenkins_ip=IP', '<Required - Jenkins Server IP>') { |s| opts[:jenkins_ip] = s }
+
+  options.on('-dPORT', '--dest-port=PORT', '<Optional - Jenkins Server Port (Defaults to 8080)>') do |port|
+    opts[:port] = port
+  end
+
+  options.on('-UUSER', '--username=USER', '<Required - Jenkins Username>') do |user|
+    opts[:username] = user
+  end
+
+  options.on('-PPASS', '--password=PASS', '<Required - Jenkins Password>') do |pass|
+    opts[:password] = pass
+  end
+
+  options.on('-vVIEW', '--view-name=VIEW', '<Required - View Name to Create>') do |view_name|
+    opts[:view_name] = view_name
+  end
+
+  options.on('-rREGX', '--regx-filter=REGEX', '<Required - RegEx >') do |regex_filter|
+    opts[:regex_filter] = regex_filter
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+jenkins_ip = opts[:jenkins_ip].to_s.scrub
+port = opts[:port].to_i
+username = opts[:username]
+password = opts[:password]
+view_name = opts[:view_name].to_s.chomp.strip.scrub
+regex_filter = opts[:regex_filter].to_s.chomp.strip.scrub
+
+if port.positive?
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    port: port,
+    username: username,
+    password: password
+  )
+else
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    username: username,
+    password: password
+  )
+end
+
+jenkins_obj.view.create_list_view(
+  name: view_name,
+  regex: regex_filter
+)
+
+PWN::Plugins::Jenkins.disconnect(jenkins_obj: jenkins_obj)

data/bin/pwn_jenkins_install_plugin

@@ -0,0 +1,91 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-sIP', '--jenkins_ip=IP', '<Required - Jenkins Server IP>') { |s| opts[:jenkins_ip] = s }
+
+  options.on('-dPORT', '--dest-port=PORT', '<Optional - Jenkins Server Port (Defaults to 8080)>') do |port|
+    opts[:port] = port
+  end
+
+  options.on('-UUSER', '--username=USER', '<Required - Jenkins Username>') do |user|
+    opts[:username] = user
+  end
+
+  options.on('-PPASS', '--password=PASS', '<Required - Jenkins Password>') do |pass|
+    opts[:password] = pass
+  end
+
+  options.on('-pPLUGIN', '--plugin=PLUGIN', '<Required - Comma-Delimited List of Jenkins Plugins to Install>') do |plugins|
+    opts[:plugins] = plugins
+  end
+
+  options.on('-L', '--[no-]list-available', '<Optional - List Available Jenkins Plugins for Installation>') do |list_available_bool|
+    opts[:list_available_bool] = list_available_bool
+  end
+
+  options.on('-R', '--[no-]restart-jenkins', '<Restart Jenkins - Defaults to true>') do |restart_bool|
+    opts[:restart_jenkins] = restart_bool
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+jenkins_ip = opts[:jenkins_ip].to_s.scrub
+port = opts[:port].to_i
+username = opts[:username]
+password = opts[:password]
+plugins = opts[:plugins].to_s.scrub
+list_available_bool = if opts[:list_available_bool]
+                        true
+                      else
+                        false
+                      end
+
+restart_jenkins = opts[:restart_jenkins].nil?
+
+if port.positive?
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    port: port,
+    username: username,
+    password: password
+  )
+else
+  jenkins_obj = PWN::Plugins::Jenkins.connect(
+    jenkins_ip: jenkins_ip,
+    username: username,
+    password: password
+  )
+end
+
+if list_available_bool
+  puts jenkins_obj.plugin.list_available
+else
+  plugin_arr = []
+  plugins.split(',').each do |p|
+    plugin_arr.push(p.strip.chomp)
+  end
+
+  # In Reference to https://github.com/arangamani/jenkins_api_client/issues/287
+  # Bug in RubyGem jenkins_api_client 1.5.3 when interacting w/ Jenkins > 2.190
+  # i.e.
+  # Crumbs turned on...
+  # JenkinsApi::Exceptions::Forbidden: Access Denied...
+  # Crumb expired...
+  jenkins_obj.plugin.install(plugin_arr)
+  jenkins_obj.system.restart if restart_jenkins
+end
+
+PWN::Plugins::Jenkins.disconnect(jenkins_obj: jenkins_obj)

data/bin/pwn_jenkins_thinBackup_aws_s3

@@ -0,0 +1,123 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+require 'aws-sdk'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-rREGION', '--region=REGION', "<Optional - AWS STS Region (Defaults to 'us-west-1')>") do |sts_region|
+    opts[:sts_region] = sts_region
+  end
+
+  options.on('-aARN', '--sts_role_arn=ARN', '<Required - STS Role ARN>') do |sts_role_arn|
+    opts[:sts_role_arn] = sts_role_arn
+  end
+
+  options.on('-nRNAME', '--sts_role_name=RNAME', '<Required - STS Role Name>') do |sts_role_name|
+    opts[:sts_role_name] = sts_role_name
+  end
+
+  options.on('-eEXPIRES', '--sts_expiration=EXPIRES', '<Optional - STS Expiration (Defaults to 900 Seconds)>') do |sts_expiration|
+    opts[:sts_expiration] = sts_expiration
+  end
+
+  options.on('-sBUCKET', '--s3_bucket=BUCKET', '<Required - AWS S3 Bucket Destination>') { |s3_bucket| opts[:s3_bucket] = s3_bucket }
+
+  options.on('-fFOLDER', '--s3_folder=FOLDER', '<Required - AWS S3 Folder Destinaiton>') do |s3_folder|
+    opts[:s3_folder] = s3_folder
+  end
+
+  options.on('-bBACKROOT', '--jenkins_thinBackup_root=BACKROOT', '<Optional - Jenkins thinBackup Root Folder (Defaults to /var/lib/jenkins/thinBackup)>') do |backup_root|
+    opts[:backup_root] = backup_root
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+sts_region = if opts[:sts_region].nil?
+               'us-west-1'
+             else
+               opts[:sts_region].to_s.scrub
+             end
+
+sts_role_arn = opts[:sts_role_arn].to_s.scrub
+sts_role_name = opts[:sts_role_name].to_s.scrub
+
+sts_expiration = if opts[:sts_expiration].nil?
+                   900
+                 else
+                   opts[:sts_expiration].to_i
+                 end
+
+credentials = PWN::AWS::STS.get_temp_credentials(
+  region: sts_region,
+  role_arn: sts_role_arn,
+  role_session_name: sts_role_name,
+  duration_seconds: sts_expiration
+)
+
+# S3 Variables
+s3_bucket = opts[:s3_bucket].to_s.scrub
+s3_folder = opts[:s3_folder].to_s.scrub # Trailing Forward Slash is Important as it Denotes the S3 Object is a Folder Instead of File
+
+backup_root = if opts[:backup_root].nil?
+                '/var/lib/jenkins/thinBackup'
+              else
+                opts[:backup_root].to_s.scrub
+              end
+
+s3_buck_arr = []
+s3_obj_arr = []
+
+s3 = Aws::S3::Client.new(
+  region: 'us-west-1',
+  access_key_id: credentials[:access_key_id],
+  secret_access_key: credentials[:secret_access_key],
+  session_token: credentials[:session_token]
+)
+
+puts s3.list_buckets.buckets
+puts "\n"
+
+s3.list_buckets.buckets.each { |bucket| s3_buck_arr.push(bucket.name) }
+if s3_buck_arr.uniq.include?(s3_bucket)
+  puts 'S3 Bucket: {s3_bucket} already exists...moving on.'
+else
+  print 'Creating S3 Bucket: {s3_bucket}...'
+  s3.create_bucket(bucket: s3_bucket)
+  puts 'complete.'
+end
+
+puts s3.list_buckets.buckets
+puts "\n"
+
+objects = s3.list_objects(bucket: s3_bucket)
+objects.contents.each { |object| s3_obj_arr.push(object.key) }
+
+s3.put_object(bucket: s3_bucket, key: s3_folder) unless s3_obj_arr.uniq.include?(s3_folder)
+
+objects = s3.list_objects(bucket: s3_bucket)
+puts objects.contents
+puts "\n"
+
+Dir.entries(backup_root).sort.each do |entry|
+  puts "#{s3_folder}#{entry} backup exists...skipping to next entry." if s3_obj_arr.uniq.include?("#{s3_folder}#{entry}")
+
+  next unless File.file?("#{backup_root}/#{entry}")
+
+  print "Backing up #{backup_root}/#{entry} => #{s3_bucket}/#{s3_folder}#{entry}..."
+  File.open("#{backup_root}/#{entry}", 'rb') do |file|
+    s3.put_object(bucket: s3_bucket, key: "#{s3_folder}#{entry}", body: file)
+  end
+  puts 'complete.'
+end
+puts 'backup complete.'