pwn 0.4.333

data/bin/pwn_serial_check_voicemail

@@ -0,0 +1,66 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-vNUM', '--voicemail_num=num', '<Required - Number to Voicemail Service>') do |num|
+    opts[:voicemail_num] = num
+  end
+  options.on('-pPIN', '--voicemail_pin=PIN', '<Optional - Voicemail Pin (Prompts if Ommitted>') do |pin|
+    opts[:voicemail_pin] = pin
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+voicemail_num = opts[:voicemail_num].to_s.scrub.strip.chomp.delete('-').delete('.').to_i
+
+if opts[:voicemail_pin].nil?
+  voicemail_pin = PWN::Plugins::AuthenticationHelper.mask_password.to_s.scrub
+else
+  voicemail_pin = opts[:voicemail_pin].to_s.scrub
+end
+
+serial_obj = PWN::Plugins::Serial.connect
+
+PWN::Plugins::Serial.request(
+  serial_obj: serial_obj,
+  request: "ATDT#{voicemail_num};\r\n"
+)
+
+# TODO: Loop until data received indicates call picked up instead of sleep
+sleep 13
+
+voicemail_pin.each_char do |pin_char|
+  PWN::Plugins::Serial.request(
+    serial_obj: serial_obj,
+    request: "AT+VTS=#{pin_char}\r\n"
+  )
+end
+
+PWN::Plugins::Serial.request(
+  serial_obj: serial_obj,
+  request: "AT+VTS=#\r\n"
+)
+
+PWN::Plugins::Serial.request(
+  serial_obj: serial_obj,
+  request: "AT+CHUP;\r\n"
+)
+
+session_data = PWN::Plugins::Serial.dump_session_data
+puts '~' * 200
+puts session_data
+puts '~' * 200
+
+PWN::Plugins::Serial.disconnect(serial_obj: serial_obj)

data/bin/pwn_serial_qualcomm_commands

@@ -0,0 +1,16 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+
+serial_obj = PWN::Plugins::Serial.connect
+
+PWN::Plugins::Serial.request(
+  serial_obj: serial_obj,
+  request: "AT+CLAC\r\n"
+)
+
+session_data = PWN::Plugins::Serial.dump_session_data
+puts session_data
+
+PWN::Plugins::Serial.disconnect(serial_obj: serial_obj)

data/bin/pwn_simple_http_server

@@ -0,0 +1,46 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+  options.on('-iIP', '--bind-ip=IP', '<Optional - HTTP Bind IP to Listen> (Defaults to Localhost)') do |i|
+    opts[:bind_ip] = i
+  end
+
+  options.on('-pPORT', '--port=PORT', '<Optional - HTTP Port to Listen (Defaults to 3333)>') do |p|
+    opts[:port] = p
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+if opts[:bind_ip]
+  bind_ip = opts[:bind_ip]
+else
+  bind_ip = '127.0.0.1'
+end
+
+if opts[:port]
+  port = opts[:port].to_i
+else
+  port = 3333
+end
+
+begin
+  system("thin start --adapter file --address #{bind_ip} --port #{port} --threaded --debug")
+rescue RuntimeError
+  puts "WARNING: Service Already Listening on TCP #{port}..."
+  port = Random.rand(1_025..65_535)
+  puts "Listen on #{bind_ip}:#{port}..."
+  retry
+rescue SystemExit, Interrupt
+  puts "\n#{File.basename($PROGRAM_NAME)} terminated."
+end

data/bin/pwn_web_cache_deception

@@ -0,0 +1,233 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-tURL', '--target-url=URL', '<Required - URL to Target>') do |t|
+    opts[:target_url] = t
+  end
+
+  options.on('-rRESULTS', '--output-results=RESULTS', '<Required - Path of Results File>') do |r|
+    opts[:output_results] = r
+  end
+
+  options.on('-l', '---list-pwn-www-mods', '<Optional - Provide a List of PWN::WWW Modules to Support Post-AuthN w/ -m Flag') do |l|
+    opts[:list_pwn_mods] = l
+  end
+
+  options.on('-mMOD', '--pwn-www-mod=MOD', '<Optional - PWN::WWW Module to Support Post-AuthN (-l to list Modules)') do |m|
+    opts[:pwn_www_mod_str] = m
+  end
+
+  options.on('-uUSER', '--username=USER', '<Optional - PWN::WWW Module username') do |u|
+    opts[:username] = u
+  end
+
+  options.on('-pPASS', '--password=PASS', '<Optional - PWN::WWW Module password (Will Prompt if nil)') do |p|
+    opts[:password] = p
+  end
+
+  options.on('-f', '--[no-]mfa', '<Optional - Enable MFA PWN::WWW Module') do |f|
+    opts[:mfa] = f
+  end
+
+  options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
+    opts[:proxy] = p
+  end
+
+  options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
+    opts[:with_tor] = w
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+# Colors!
+@dark_red = "\e[1m\e[31m"
+@green = "\e[32m"
+@yellow = "\e[33m"
+@end_of_color = "\e[0m"
+
+# if -l Flag is passed, list all PWN::WWW Modules and exit
+if opts[:list_pwn_mods]
+  puts "#{@green}Available PWN::WWW modules to obtain a Post AuthN state:#{@end_of_color}:"
+  puts "#{@yellow}#{PWN::WWW.help.join(',').tr(',', "\n")}#{@end_of_color}"
+  exit
+end
+
+# Required Flag Variables
+target_url = opts[:target_url].to_s.scrub.strip.chomp
+output_results = opts[:output_results].to_s.scrub.strip.chomp
+
+# Optional Flag Variables
+pwn_www_mod_str = opts[:pwn_www_mod_str].to_s.scrub.strip.chomp
+
+username = opts[:username].to_s.scrub.strip.chomp
+
+password = opts[:password] # Don't cast to string to detect if PWN::Plugins::AuthenticationHelper is necessary
+if password.nil?
+  password = PWN::Plugins::AuthenticationHelper.mask_password
+else
+  password = opts[:password].to_s.scrub.strip.chomp
+end
+
+if opts[:mfa]
+  mfa = true
+else
+  mfa = false
+end
+
+proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
+with_tor = opts[:with_tor]
+
+begin
+  def get_web_cache_deception(opts = {})
+    browser_obj = opts[:browser_obj]
+    target_url = opts[:target_url].to_s.scrub.chomp.strip
+    payload = opts[:payload].to_s.scrub.chomp.strip
+
+    # Browse to original page to compare response lengths
+    browser_obj.goto(target_url)
+    orig_url_response_length = browser_obj.html.length
+
+    http_result = ''
+    if target_url.include?('?')
+      injected_target_url = URI.parse(target_url)
+      # Add non-existent file at the end of the path
+      injected_target_url.path = "#{injected_target_url.path.to_s.chomp('/')}/wcd.#{payload}"
+      web_cache_deception_url = injected_target_url.to_s
+
+      browser_obj.goto(injected_target_url.to_s)
+      injected_url_response_length = browser_obj.html.length
+
+      if injected_url_response_length == orig_url_response_length
+        # TODO: Add incognito Chrome browser
+        puts "\n#{@dark_red}Alert! Potential Candidate: #{web_cache_deception_url}#{@end_of_color}\n"
+        http_result = "Alert! Potential Candidate: #{web_cache_deception_url}"
+      else
+        print "#{@yellow}.#{@end_of_color}"
+        http_result = "Response Length Mismatch: Orig Len: #{orig_url_response_length} | Inj Len: #{injected_url_response_length} | WCD: #{web_cache_deception_url}"
+      end
+    else
+      web_cache_deception_url = "#{target_url.chomp('/')}/wcd.#{payload}"
+      browser_obj.goto(web_cache_deception_url)
+      wcd_url_response_length = browser_obj.html.length
+
+      if orig_url_response_length == wcd_url_response_length
+        # TODO: Add incognito Chrome browser
+        puts "\n#{@dark_red}Alert! Potential Candidate: #{web_cache_deception_url}#{@end_of_color}\n"
+        http_result = "Alert! Potential Candidate: #{web_cache_deception_url}"
+      else
+        print "#{@yellow}.#{@end_of_color}"
+        http_result = "Response Length Mismatch: Orig Len: #{orig_url_response_length} | WCD Len: #{wcd_url_response_length} | WCD: #{web_cache_deception_url}"
+      end
+    end
+  rescue Net::ReadTimeout => e
+    http_result = "#{e} Orig: #{target_url} | WCD: #{web_cache_deception_url}"
+  rescue StandardError => e
+    raise e
+  ensure
+    http_result
+  end
+
+  # Script starts crunching here...
+  if pwn_www_mod_str != ''
+    begin
+      pwn_www_mod = PWN::WWW.const_get(pwn_www_mod_str)
+      unless pwn_www_mod.respond_to?('open') && pwn_www_mod.respond_to?('login') && pwn_www_mod.respond_to?('logout')
+        puts "#{@dark_red}Module PWN::WWW::#{pwn_www_mod_str} Missing #open #login and/or #logout Method(s)#{@end_of_color}"
+        puts `#{$PROGRAM_NAME} -l`
+        exit
+      end
+    rescue NAME_ERROR => e
+      puts "#{@dark_red}Invalid module PWN::WWW::#{pwn_www_mod_str}#{@end_of_color}"
+      puts `#{$PROGRAM_NAME} -l`
+      exit
+    end
+
+    puts "#{@green}Leveraging PWN::WWW::#{pwn_www_mod_str} to Obtain a Post AuhN State...#{@end_of_color}"
+    if proxy
+      if with_tor
+        browser_obj = pwn_www_mod.open(
+          browser_type: :chrome,
+          proxy: proxy,
+          with_tor: true
+        )
+      else
+        browser_obj = pwn_www_mod.open(
+          browser_type: :chrome,
+          proxy: proxy
+        )
+      end
+    else
+      browser_obj = pwn_www_mod.open(browser_type: :chrome)
+    end
+    # Now AuthN via PWN::WWW::<MODULE>
+    browser_obj = pwn_www_mod.login(
+      browser_obj: browser_obj,
+      username: username,
+      password: password,
+      mfa: mfa
+    )
+    puts "#{@green}complete.#{@end_of_color}\n\n\n"
+  elsif pwn_www_mod_str == '' && proxy
+    if with_tor
+      browser_obj = PWN::Plugins::TransparentBrowser.open(
+        browser_type: :chrome,
+        proxy: proxy,
+        with_tor: true
+      )
+    else
+      browser_obj = PWN::Plugins::TransparentBrowser.open(
+        browser_type: :chrome,
+        proxy: proxy
+      )
+    end
+  else
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :chrome)
+  end
+
+  puts "#{@green}Navigating to Target URL: #{target_url}#{@end_of_color}\n\n\n"
+  browser_obj.goto(target_url)
+
+  web_cache_deception_payload_arr = %w[
+    aif aiff au avi bin bmp cab carb cct cdf class css doc dcr dtd gcf gff gif grv hdml hqx ico ini jpeg jpg js mov mp3 mp4 nc pct ppc pws swa swf txt vbs w32 wav wbmp wml wmlc wmls wmlsc xsd zip
+  ]
+
+  File.open(output_results, 'w') do |f|
+    web_cache_deception_payload_arr.each do |payload|
+      http_result = get_web_cache_deception(
+        browser_obj: browser_obj,
+        target_url: target_url,
+        payload: payload
+      )
+
+      f.puts http_result
+    end
+  end
+  puts "\n#{@yellow}Results Location: #{output_results}#{@end_of_color}\n\n\n"
+  puts "#{@green}complete.#{@end_of_color}"
+rescue StandardError => e
+  raise e
+ensure
+  if browser_obj &&
+     pwn_www_mod
+
+    browser_obj = pwn_www_mod.logout(browser_obj: browser_obj)
+    browser_obj = pwn_www_mod.close(browser_obj: browser_obj)
+  else
+    browser_obj = PWN::Plugins::TransparentBrowser.close(
+      browser_obj: browser_obj
+    )
+  end
+end

data/bin/pwn_www_checkip

@@ -0,0 +1,62 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
+    opts[:proxy] = p
+  end
+
+  options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
+    opts[:with_tor] = w
+  end
+
+  options.on('-i', '--[no-]ipinfo', '<Optional - Return Details about Public IP Returned from CheckIP>') do |i|
+    opts[:ipinfo] = i
+  end
+end.parse!
+
+proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
+with_tor = opts[:with_tor]
+ipinfo = opts[:ipinfo]
+
+begin
+  if proxy != '' && with_tor
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest, proxy: proxy, with_tor: true)::Request
+  elsif proxy != '' && with_tor.nil?
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest, proxy: proxy)::Request
+  else
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+  end
+
+  if proxy
+    public_ip_address = browser_obj.execute(
+      method: :get,
+      url: 'https://checkip.amazonaws.com',
+      verify_ssl: false
+    ).to_s.chomp
+  else
+    public_ip_address = browser_obj.execute(
+      method: :get,
+      url: 'https://checkip.amazonaws.com'
+    ).to_s.chomp
+  end
+
+  puts "PUBLIC IP: #{public_ip_address}"
+  puts PWN::Plugins::IPInfo.get(ip_or_host: public_ip_address) unless ipinfo.nil?
+rescue StandardError => e
+  raise e
+ensure
+  if browser_obj
+    browser_obj = PWN::Plugins::TransparentBrowser.close(
+      browser_obj: browser_obj
+    )
+  end
+end

data/bin/pwn_xss_dom_vectors

@@ -0,0 +1,169 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-tFQDN', '--target-fqdn=FQDN', '<Required - FQDN to Target>') do |t|
+    opts[:target_fqdn] = t
+  end
+
+  options.on('-dDIR', '--output-dir=DIR', '<Required - Directory to Save Results>') do |d|
+    opts[:output_dir] = d
+  end
+
+  options.on('-uURI', '--uri-source-root=URI', '<Required - URI to Source Root (for pwn_sast Results)>') do |u|
+    opts[:uri_source_root] = u
+  end
+
+  options.on('-bTYPE', '--browser-type=BROWSER', '<Optional - Browser Type chrome|firefox|headless (Default)>') do |b|
+    opts[:browser_type] = b
+  end
+
+  options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
+    opts[:proxy] = p
+  end
+
+  options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
+    opts[:with_tor] = w
+  end
+
+  options.on('-S', '--[no-]spider-fqdn', '<Optional - Spider Target FQDN>') do |s|
+    opts[:spider] = s
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+# Required Flag Variables
+target_fqdn = opts[:target_fqdn].to_s.scrub.strip.chomp
+output_dir = opts[:output_dir].to_s.scrub.strip.chomp if Dir.exist?(opts[:output_dir].to_s.scrub.strip.chomp)
+uri_source_root = opts[:uri_source_root].to_s.scrub
+
+if opts[:browser_type]
+  browser_type = opts[:browser_type].to_s.scrub.chomp.strip.to_sym
+else
+  browser_type = :headless
+end
+
+proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
+with_tor = opts[:with_tor]
+
+if opts[:spider]
+  spider = true
+else
+  spider = false
+end
+
+spider_results = "#{output_dir}/#{File.basename($PROGRAM_NAME)}.spider"
+
+# Colors!
+@dark_red = "\e[1m\e[31m"
+@green = "\e[32m"
+@yellow = "\e[33m"
+@end_of_color = "\e[0m"
+
+begin
+  def grab_js_in_page(opts = {})
+    browser_obj = opts[:browser_obj]
+    target_page = opts[:url].to_s.scrub.chomp.strip
+    output_dir = opts[:output_dir].to_s.scrub.chomp.strip
+
+    puts "#{@green}Navigating to Page #{target_page}#{@end_of_color}"
+    browser_obj.goto(target_page)
+    browser_obj.scripts.each do |script|
+      if script.src == ''
+        # Save a copy of the outer_html
+        puts "#{@yellow}Saving OuterHTML of Native '<script>' Element#{@end_of_color}"
+        sha256_hexdigest = OpenSSL::Digest::SHA256.hexdigest(script.outer_html)
+        script_results = "#{output_dir}/#{sha256_hexdigest}.js"
+        File.open(script_results, 'w') do |f|
+          f.puts script.outer_html
+        end
+      else
+        # Save a copy of the script
+        puts "#{@yellow}Navigating to #{script.src}#{@end_of_color}"
+        browser_obj.goto(script.src)
+        sha256_hexdigest = OpenSSL::Digest::SHA256.hexdigest(browser_obj.text)
+        uri = URI.parse(browser_obj.url)
+        script_filename = File.basename(uri.path)
+        script_results = "#{output_dir}/#{File.basename(script_filename, '.*')}-#{sha256_hexdigest}#{File.extname(script_filename)}".to_s.scrub.chomp.strip
+        File.open(script_results, 'w') do |f|
+          f.puts browser_obj.text
+        end
+        browser_obj.back
+      end
+      puts "#{@green}Saved #{script_results}#{@end_of_color}\n\n\n"
+    end
+  rescue StandardError => e
+    raise e
+  end
+
+  if proxy
+    if with_tor
+      browser_obj = PWN::Plugins::TransparentBrowser.open(
+        browser_type: browser_type,
+        proxy: proxy,
+        with_tor: true
+      )
+    else
+      browser_obj = PWN::Plugins::TransparentBrowser.open(
+        browser_type: browser_type,
+        proxy: proxy
+      )
+    end
+  else
+    browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: browser_type)
+  end
+
+  puts "#{@green}Navigating to Target FQDN: #{target_fqdn}#{@end_of_color}\n\n\n"
+  browser_obj.goto(target_fqdn)
+
+  if spider
+    if File.exist?(spider_results)
+      puts "#{@dark_red}Using Existing Spider Results: #{spider_results}#{@end_of_color}"
+    else
+      puts "#{@dark_red}Spidering Target FQDN: #{target_fqdn}#{@end_of_color}"
+      PWN::Plugins::Spider.crawl(
+        target_fqdn: target_fqdn,
+        results_path: spider_results
+      )
+    end
+  end
+
+  # Grab JavaScript for Each Page Discovered
+  if spider
+    File.readlines(spider_results).uniq.each do |this_page|
+      grab_js_in_page(browser_obj: browser_obj, url: this_page, output_dir: output_dir)
+    end
+  else
+    grab_js_in_page(browser_obj: browser_obj, url: target_fqdn, output_dir: output_dir)
+  end
+
+  # Run DOM XSS SAST Test Cases
+  puts `pwn_sast -d #{output_dir} -t 1 -T 'InnerHTML, OuterHTML, WindowLocationHash' -u #{uri_source_root}`
+
+  # For future use
+  # page_script_elements = browser_obj.execute_script("
+  #   // JavaScript Goes Here
+  #   var script_elements = [];
+  #   var script_query = document.querySelectorAll('script');
+  #   for (var i = 0; i < script_query.length; i++) {
+  #     script_elements.push(script_query[i]);
+  #   }
+  #   return script_elements;
+  # ")
+rescue StandardError => e
+  raise e
+ensure
+  browser_obj = PWN::Plugins::TransparentBrowser.close(browser_obj: browser_obj) unless browser_obj.nil?
+end

data/build_pwn_gem.sh

@@ -0,0 +1,33 @@
+#!/bin/bash --login
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+ls pkg/*.gem | while read previous_gems; do 
+  rvmsudo rm $previous_gems
+done
+old_ruby_version=`cat ${pwn_root}/.ruby-version`
+# Default Strategy is to merge codebase
+rvmsudo git config pull.rebase false 
+rvmsudo git pull
+new_ruby_version=`cat ${pwn_root}/.ruby-version`
+
+if [[ $old_ruby_version == $new_ruby_version ]]; then
+  export rvmsudo_secure_path=1
+  rvmsudo /bin/bash --login -c "cd ${pwn_root} && ./reinstall_pwn_gemset.sh"
+  rvmsudo rake
+  rvmsudo rake install
+  rvmsudo rake rerdoc
+  rvmsudo gem update --system
+  rvmsudo gem rdoc --rdoc --ri --overwrite -V pwn
+  echo "Invoking bundle-audit Gemfile Scanner..."
+  rvmsudo bundle-audit
+else
+  cd $pwn_root && ./upgrade_ruby.sh $new_ruby_version $old_ruby_version
+fi

data/etc/systemd/msfrpcd.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=RPC interface to the Metasploit Framework
+
+[Service]
+User=root
+RemainAfterExit=yes
+ExecStart=/bin/bash --login -c "msf_ruby_v=$(cat /opt/metasploit-framework-dev/.ruby-version) && source /etc/profile.d/rvm.sh && rvm use ruby-$msf_ruby_v@metasploit-framework && $PWN_ROOT/packer/daemons/msfrpcd.rb --action start"
+ExecReload=/bin/bash --login -c "msf_ruby_v=$(cat /opt/metasploit-framework-dev/.ruby-version) && source /etc/profile.d/rvm.sh && rvm use ruby-$msf_ruby_v@metasploit-framework && $PWN_ROOT/packer/daemons/msfrpcd.rb --action reload"
+ExecStop=/bin/bash --login -c "msf_ruby_v=$(cat /opt/metasploit-framework-dev/.ruby-version) && source /etc/profile.d/rvm.sh && rvm use ruby-$msf_ruby_v@metasploit-framework && $PWN_ROOT/packer/daemons/msfrpcd.rb --action stop"
+
+[Install]
+WantedBy=multi-user.target

data/etc/systemd/openvas.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Open Vulnerability Assessment System (OpenVAS)
+Requires=apache2.service
+After=apache2.service
+
+[Service]
+User=root
+RemainAfterExit=yes
+ExecStart=$PWN_ROOT/packer/daemons/openvas.rb --action start
+ExecReload=$PWN_ROOT/packer/daemons/openvas.rb --action restart
+ExecStop=$PWN_ROOT/packer/daemons/openvas.rb --action stop
+
+[Install]
+WantedBy=multi-user.target