pwn 0.4.385 → 0.4.388

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 75736869902b7c6f459eba755d600c32701d7dbc7195aaf9d38219575fbf3f03
-  data.tar.gz: 47e399e9a118b2213dcc69273b8c21ecd9d57e2954c36cc90abb0dd9767ec1fb
+  metadata.gz: 6fff86c0915ceb8c3bda26566fa0f3c49d5c7bc29f8fad99b72936ea62f0d10f
+  data.tar.gz: 7fd7e3bbbc60ee0b1bc3b06664bea5efd410aa03cd4dd3ad9c88d3ade03ad709
 SHA512:
-  metadata.gz: c24ab122a7f3973a06b53593e3da3fe2ff230afcfd379f0fcfd07150ef1a5abe7f16b7158d1ff26b19b6f0b9ca04241740d0a052f02a08ab2d49ddb65bebc863
-  data.tar.gz: e33a0711c81d27e1889038d8fbde16a564bd179d6f0f49a277f8a457c0ae57d05d37afd808b93dd4a7e715a009f59e36537ee71e41d87b79a958b0ab8cff19a2
+  metadata.gz: 665f698b87d92a38d761e58cd9e9081fcbe4303cd9b048c06ce954ae0222e9743683ddf95590283e56d738cf4d4c1088a9e6149a26176850bbfb4eeba18527e9
+  data.tar.gz: c954551ab4b906f75b8c575ec04b733c30cf98030aad0b7aceee001a3095d28abbad8facd5736895568a2381d87b92de314ec3d885361cf2da4410166e26aee3

data/Gemfile

@@ -34,7 +34,7 @@ gem 'jsonpath', '1.1.0'
 gem 'jwt', '2.3.0'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.7.1'
-gem 'mongo', '2.17.0'
+gem 'mongo', '2.17.1'
 gem 'msfrpc-client', '1.1.2'
 gem 'net-ldap', '0.17.0'
 gem 'net-openvpn', '0.8.7'
@@ -45,8 +45,9 @@ gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
 gem 'pdf-reader', '2.9.2'
-gem 'pg', '1.3.4'
+gem 'pg', '1.3.5'
 gem 'pry', '0.14.1'
+gem 'pry-bond', '0.0.1'
 gem 'pry-doc', '1.3.0'
 gem 'rake', '13.0.6'
 gem 'rb-readline', '0.5.5'
@@ -65,7 +66,7 @@ gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.12.1'
-gem 'selenium-devtools', '0.99.1'
+gem 'selenium-devtools', '0.100.0'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '2.2.0'
 gem 'slack-ruby-client', '1.0.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.1@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.385]:001 >>> PWN.help
+pwn[v0.4.388]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.385]:001 >>> PWN.help
+pwn[v0.4.388]:001 >>> PWN.help
 ```
 
 

data/bin/pwn

@@ -3,6 +3,7 @@
 
 require 'pwn'
 require 'pry'
+require 'pry/bond'
 require 'tty-prompt'
 require 'tty-reader'
 

data/lib/pwn/plugins/transparent_browser.rb

@@ -105,6 +105,9 @@ module PWN
           this_profile['download.default_directory'] = '~/Downloads'
 
           switches = []
+          switches.push('--start-maximized')
+          switches.push('--disable-notifications')
+
           if proxy
             switches.push("--host-resolver-rules='MAP * 0.0.0.0 , EXCLUDE #{URI(proxy).host}'") if with_tor
             switches.push("--proxy-server=#{proxy}")
@@ -187,7 +190,10 @@ module PWN
           this_profile['download.default_directory'] = '~/Downloads'
 
           switches = []
-          switches.push('-headless')
+          switches.push('--headless')
+          switches.push('--start-maximized')
+          switches.push('--disable-notifications')
+
           if proxy
             switches.push("--host-resolver-rules='MAP * 0.0.0.0 , EXCLUDE #{URI(proxy).host}'") if with_tor
             switches.push("--proxy-server=#{proxy}")
@@ -346,13 +352,14 @@ module PWN
           devtools.send_cmd('Console.enable')
           devtools.send_cmd('DOM.enable')
           devtools.send_cmd('Page.enable')
-          devtools.send_cmd('Network.enable')
           devtools.send_cmd('Log.enable')
           devtools.send_cmd('Debugger.enable')
           devtools.send_cmd('Debugger.pause')
           step = 1
           next_step = 60
           loop do
+            devtools.send_cmd('Console.clearMessages')
+            devtools.send_cmd('Log.clear')
             console_events = []
             b.driver.on_log_event(:console) { |event| console_events.push(event) }
 
@@ -388,7 +395,6 @@ module PWN
 
           devtools.send_cmd('Debugger.disable')
           devtools.send_cmd('Log.disable')
-          devtools.send_cmd('Network.disable')
           devtools.send_cmd('Page.disable')
           devtools.send_cmd('DOM.disable')
           devtools.send_cmd('Console.disable')

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.385'
+  VERSION = '0.4.388'
 end

data/lib/pwn/www/coinbase_pro.rb

@@ -0,0 +1,134 @@
+# frozen_string_literal: true
+
+require 'yaml'
+
+module PWN
+  module WWW
+    # This plugin supports tradingview.com actions.
+    module CoinbasePro
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::CoinbasePro.open(
+      #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+      #   proxy: 'optional - scheme://proxy_host:port',
+      #   with_tor: 'optional - boolean (defaults to false)'
+      # )
+
+      public_class_method def self.open(opts = {})
+        browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
+
+        browser_obj.goto('https://pro.coinbase.com')
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::CoinbasePro.login(
+      #   browser_obj: 'required - browser_obj returned from #open method',
+      #   username: 'required - username',
+      #   password: 'optional - passwd (will prompt if blank)',
+      #   mfa: 'optional - if true prompt for mfa token (defaults to false)'
+      # )
+
+      public_class_method def self.login(opts = {})
+        browser_obj = opts[:browser_obj]
+        username = opts[:username].to_s.scrub.strip.chomp
+        password = opts[:password]
+
+        if password.nil?
+          password = PWN::Plugins::AuthenticationHelper.mask_password
+        else
+          password = opts[:password].to_s.scrub.strip.chomp
+        end
+        mfa = opts[:mfa]
+
+        browser_obj.goto('https://pro.coinbase.com')
+
+        browser_obj.span(text: 'Sign in').wait_until(&:present?).click
+        browser_obj.text_field(name: 'email').wait_until(&:present?).set(username)
+        browser_obj.text_field(name: 'password').wait_until(&:present?).set(password)
+        browser_obj.button(text: 'Sign In').click!
+
+        if mfa
+          until browser_obj.url.include?('https://pro.coinbase.com')
+            browser_obj.text_field(name: 'token').wait_until(&:present?).set(PWN::Plugins::AuthenticationHelper.mfa(prompt: 'enter mfa token'))
+            browser_obj.button(text: 'Verify').click!
+            sleep 3
+          end
+          print "\n"
+        end
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::CoinbasePro.logout(
+      #   browser_obj: 'required - browser_obj returned from #open method'
+      # )
+
+      public_class_method def self.logout(opts = {})
+        browser_obj = opts[:browser_obj]
+        browser_obj.goto('https://pro.coinbase.com/signout')
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::CoinbasePro.close(
+      #   browser_obj: 'required - browser_obj returned from #open method'
+      # )
+
+      public_class_method def self.close(opts = {})
+        browser_obj = opts[:browser_obj]
+        PWN::Plugins::TransparentBrowser.close(
+          browser_obj: browser_obj
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <request.pentest@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          browser_obj = #{self}.open(
+            browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+            proxy: 'optional - scheme://proxy_host:port',
+            with_tor: 'optional - boolean (defaults to false)'
+          )
+          puts browser_obj.public_methods
+
+          browser_obj = #{self}.login(
+            browser_obj: 'required - browser_obj returned from #open method',
+            username: 'required - username',
+            password: 'optional - passwd (will prompt if blank),
+            mfa: 'optional - if true prompt for mfa token (defaults to false)'
+          )
+
+          browser_obj = #{self}.logout(
+            browser_obj: 'required - browser_obj returned from #open method'
+          )
+
+          #{self}.close(
+            browser_obj: 'required - browser_obj returned from #open method'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/www.rb

@@ -9,6 +9,7 @@ module PWN
     autoload :Bing, 'pwn/www/bing'
     autoload :BugCrowd, 'pwn/www/bug_crowd'
     autoload :Checkip, 'pwn/www/checkip.rb'
+    autoload :CoinbasePro, 'pwn/www/coinbase_pro.rb'
     autoload :Duckduckgo, 'pwn/www/duckduckgo'
     autoload :Facebook, 'pwn/www/facebook'
     autoload :Google, 'pwn/www/google'

data/spec/lib/pwn/www/coinbase_pro_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::WWW::CoinbasePro do
+  it 'should display information for authors' do
+    authors_response = PWN::WWW::CoinbasePro
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::WWW::CoinbasePro
+    expect(help_response).to respond_to :help
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.385
+  version: 0.4.388
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-30 00:00:00.000000000 Z
+date: 2022-04-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -310,14 +310,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.0
+        version: 2.17.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.0
+        version: 2.17.1
 - !ruby/object:Gem::Dependency
   name: msfrpc-client
   requirement: !ruby/object:Gem::Requirement
@@ -464,14 +464,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.4
+        version: 1.3.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.4
+        version: 1.3.5
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -486,6 +486,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 0.14.1
+- !ruby/object:Gem::Dependency
+  name: pry-bond
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.1
 - !ruby/object:Gem::Dependency
   name: pry-doc
   requirement: !ruby/object:Gem::Requirement
@@ -744,14 +758,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.99.1
+        version: 0.100.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.99.1
+        version: 0.100.0
 - !ruby/object:Gem::Dependency
   name: serialport
   requirement: !ruby/object:Gem::Requirement
@@ -1539,6 +1553,7 @@ files:
 - lib/pwn/www/bing.rb
 - lib/pwn/www/bug_crowd.rb
 - lib/pwn/www/checkip.rb
+- lib/pwn/www/coinbase_pro.rb
 - lib/pwn/www/duckduckgo.rb
 - lib/pwn/www/facebook.rb
 - lib/pwn/www/google.rb
@@ -1823,6 +1838,7 @@ files:
 - spec/lib/pwn/www/bing_spec.rb
 - spec/lib/pwn/www/bug_crowd.rb
 - spec/lib/pwn/www/checkip_spec.rb
+- spec/lib/pwn/www/coinbase_pro_spec.rb
 - spec/lib/pwn/www/duckduckgo_spec.rb
 - spec/lib/pwn/www/facebook_spec.rb
 - spec/lib/pwn/www/google_spec.rb
@@ -2083,6 +2099,7 @@ test_files:
 - spec/lib/pwn/www/bing_spec.rb
 - spec/lib/pwn/www/bug_crowd.rb
 - spec/lib/pwn/www/checkip_spec.rb
+- spec/lib/pwn/www/coinbase_pro_spec.rb
 - spec/lib/pwn/www/duckduckgo_spec.rb
 - spec/lib/pwn/www/facebook_spec.rb
 - spec/lib/pwn/www/google_spec.rb