pwn 0.4.405 → 0.4.409

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aab0b3fa754f1a39c2b4fbd6c88558ebc0e6b4728963298f564dfbda98850273
-  data.tar.gz: 117f317acc9cc3296cb8e2f42890dd17046aaab8551c08f20a844e3e93392b35
+  metadata.gz: ae2da360fbd77bfb132cdb2def27d6706b6480cee191c54168dda853d4bf923f
+  data.tar.gz: 0e662e6d0d99a9de2d80ae0ba05b837e9f2beb56a91e958964173d59feab3fb3
 SHA512:
-  metadata.gz: f3608d5ee4b161f788e2b3b2a8ae83f82adcd993b81da08018eed13ffb694e4db0dd1976f33e5a056f0f3b19929cf9f4ddad63604638159b6ea3d96d8095d6f3
-  data.tar.gz: af0bad2f4d2d3ea3177e6766f873ad782d781e25729e44b709e55c35ce0640c3ed988b28dbc7b5bdbcdb25fd7c78bb671147495e53e564c57d22448f4dd8fcad
+  metadata.gz: 94d95a31df6cdb1d2d154f1869ad92f95fc7e8ba916bed4f9567ca7949798745c57ace2b55f5aff3b2063fb13556d5d05ee2a01da22afdf0ca5c5a2c9d0d3191
+  data.tar.gz: 50f9edd9f5aa97c20da131c97b142371818c5db2b10e7bd67bdf8c943a32dfa9b13e7dc037ecf1c9fdc6ec71e464c24369523742a4d3b69eb2ed9563d683915a

data/.ruby-version

@@ -1 +1 @@
-3.1.1
+3.1.2

data/Gemfile

@@ -17,8 +17,8 @@ gem 'authy', '3.0.0'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '5.2.2'
-gem 'bson', '4.14.1'
-gem 'bundler', '>=2.3.11'
+gem 'bson', '4.15.0'
+gem 'bundler', '>=2.3.12'
 gem 'bundler-audit', '0.9.0.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -58,9 +58,9 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '4.2.5'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.27.0'
+gem 'rubocop', '1.28.1'
 gem 'rubocop-rake', '0.6.0'
-gem 'rubocop-rspec', '2.9.0'
+gem 'rubocop-rspec', '2.10.0'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'

data/README.md

@@ -31,13 +31,13 @@ Leveraging various pre-built modules and the pwn prototyper, you can mix-and-mat
 Tested on Linux, & OSX leveraging Ruby via RVM.
 
 ```
-$ rvm use ruby-3.1.1@global
+$ rvm use ruby-3.1.2@global
 $ rvm gemset create pwn
-$ rvm use ruby-3.1.1@pwn
+$ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.405]:001 >>> PWN.help
+pwn[v0.4.409]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -48,11 +48,11 @@ pwn[v0.4.405]:001 >>> PWN.help
 It's wise to update pwn often as numerous versions are released/week:
 ```
 $ rvm list gemsets
-$ rvm use ruby-3.1.1@pwn
+$ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.405]:001 >>> PWN.help
+pwn[v0.4.409]:001 >>> PWN.help
 ```
 
 

data/Vagrantfile

@@ -7,13 +7,13 @@ require 'pathname'
 
 API_VERSION = '2'
 pwn_root = Pathname.new(__FILE__).realpath.expand_path.parent
-vagrant_gui = ENV['VAGRANT_GUI'] if ENV['VAGRANT_GUI']
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+vagrant_gui = ENV.fetch('VAGRANT_GUI') if ENV.fetch('VAGRANT_GUI')
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 runtime_userland = 'vagrant_rsync_userland_configs.lst'
 template_userland = "#{pwn_root}/vagrant_rsync_userland_template.lst"
 
 if pwn_provider == 'docker'
-  docker_container_target = ENV['DOCKER_CONTAINER_TARGET'] if ENV['DOCKER_CONTAINER_TARGET']
+  docker_container_target = ENV.fetch('DOCKER_CONTAINER_TARGET') if ENV.fetch('DOCKER_CONTAINER_TARGET')
   docker_create_args = [
     '--interactive',
     '--tty'

data/bin/pwn_fuzz_net_app_proto

@@ -77,7 +77,7 @@ if opts.empty?
   exit 1
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
 dir_path = opts[:dir_path].to_s.scrub
 target = opts[:target]

data/bin/pwn_sast

@@ -44,7 +44,7 @@ if opts.empty?
 end
 
 begin
-  pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
   green = "\e[32m"
   end_of_color = "\e[0m"

data/lib/pwn/plugins/metasploit.rb

@@ -17,8 +17,8 @@ module PWN
         if opts[:yaml_conf] && File.exist?(opts[:yaml_conf])
           yaml_conf = YAML.load_file(opts[:yaml_conf].to_s.strip.chomp.scrub)
         else
-          pwn_root = ENV['PWN_ROOT'] if ENV['PWN_ROOT']
-          pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+          pwn_root = ENV.fetch('PWN_ROOT') if ENV.fetch('PWN_ROOT')
+          pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
           yaml_conf = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml")
         end
 

data/lib/pwn/sast/amqp_connect_as_guest.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'ACCOUNT MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-2'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-2'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/apache_file_system_util_api.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/aws.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-8'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/banned_function_calls_c.rb

@@ -236,7 +236,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/base64.rb

@@ -112,7 +112,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/beef_hook.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_java.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_python.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_ruby.rb

@@ -121,7 +121,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/csrf.rb

@@ -107,7 +107,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       end
 

data/lib/pwn/sast/deserial_java.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/emoticon.rb

@@ -114,7 +114,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/eval.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/factory.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER CONFIGURATION MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-10'
         }
       end
 

data/lib/pwn/sast/file_permission.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/http_authorization_header.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       end
 

data/lib/pwn/sast/inner_html.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/keystore.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-12'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-12'
         }
       rescue StandardError => e
         raise e.mesasge

data/lib/pwn/sast/location_hash.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/log4j.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/logger.rb

@@ -124,7 +124,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/outer_html.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/password.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       end
 

data/lib/pwn/sast/pom_version.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'VULNERABILITY SCANNING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=RA-5'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/port.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-8'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/private_key.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=IA-7'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/redirect.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/redos.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/shell.rb

@@ -117,7 +117,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/sql.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/ssl.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'PUBLIC KEY INFRASTRUCTURE CERTIFICATES',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/sudo.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/task_tag.rb

@@ -123,7 +123,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/throw_errors.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'ERROR HANDLING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-11'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-11'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/token.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=IA-7'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/version.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'VULNERABILITY SCANNING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=RA-5'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/window_location_hash.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.405'
+  VERSION = '0.4.409'
 end

data/packer/daemons/msfrpcd.rb

@@ -21,15 +21,15 @@ end
 action = opts[:action].to_s.scrub.to_sym
 
 def start
-  if ENV['PWN_ROOT']
-    pwn_root = ENV['PWN_ROOT']
+  if ENV.fetch('PWN_ROOT')
+    pwn_root = ENV.fetch('PWN_ROOT')
   elsif Dir.exist?('/pwn')
     pwn_root = '/pwn'
   else
     pwn_root = Dir.pwd
   end
 
-  pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
   metasploit_root = '/opt/metasploit-framework-dev'
 
   msfrpcd_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml")

data/packer/kali_rolling_aws_ami.json

@@ -32,7 +32,7 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=aws"
       ],
       "scripts": [
@@ -52,7 +52,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=aws"
       ],
       "scripts": [
@@ -71,7 +71,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=aws"
       ],
       "scripts": [

data/packer/kali_rolling_qemu_kvm.json

@@ -39,7 +39,7 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=qemu"
       ],
       "scripts": [
@@ -75,7 +75,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=qemu"
       ],
       "scripts": [

data/packer/kali_rolling_virtualbox.json

@@ -43,7 +43,7 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=virtualbox"
       ],
       "scripts": [
@@ -63,7 +63,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=virtualbox"
       ],
       "scripts": [
@@ -83,7 +83,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=virtualbox"
       ],
       "scripts": [
@@ -102,7 +102,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=virtualbox"
       ],
       "scripts": [

data/packer/kali_rolling_vmware.json

@@ -43,7 +43,7 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=vmware"
       ],
       "scripts": [
@@ -63,7 +63,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=vmware"
       ],
       "scripts": [
@@ -83,7 +83,7 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=/opt/pwn",
+        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
         "PWN_PROVIDER=vmware"
       ],
       "scripts": [

data/packer/provisioners/metasploit.rb

@@ -5,15 +5,15 @@ require 'yaml'
 
 # Install Metasploit from Source
 printf 'Installing Metasploit *****************************************************************'
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
 metasploit_root = '/opt/metasploit-framework-dev'
 `sudo git clone https://github.com/rapid7/metasploit-framework.git #{metasploit_root}`

data/packer/provisioners/upload_globals.sh

@@ -10,7 +10,7 @@ else
 fi
 
 sudo tee -a $pwn_env_file << EOF
-export PWN_ROOT='/opt/pwn'
+export PWN_ROOT=\$(ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"')
 export PWN_PROVIDER='${pwn_provider}'
 EOF
 

data/vagrant/provisioners/burpsuite_pro.rb

@@ -5,15 +5,15 @@ require 'yaml'
 require 'digest'
 require 'fileutils'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 userland_config = "#{pwn_root}/etc/userland/#{pwn_provider}/burpsuite/vagrant.yaml"
 userland_burpsuite_pro_jar_path = "#{pwn_root}/third_party/burpsuite-pro.jar"
 burpsuite_pro_jar_dest_path = "/opt/burpsuite/#{File.basename(userland_burpsuite_pro_jar_path)}"

data/vagrant/provisioners/jenkins_ssh-keygen.rb

@@ -4,15 +4,15 @@
 require 'yaml'
 require 'pwn'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 jenkins_userland_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/jenkins/vagrant.yaml")
 private_key_path = '/var/lib/jenkins/.ssh/id_rsa-pwn_jenkins'
 userland_ssh_keygen_pass = jenkins_userland_config['ssh_keygen_pass']

data/vagrant/provisioners/kali_customize.rb

@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else

data/vagrant/provisioners/letsencrypt.rb

@@ -4,15 +4,15 @@
 require 'yaml'
 
 print "Installing Let's Encrypt **************************************************************"
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 letsencrypt_git = 'https://github.com/letsencrypt/letsencrypt'
 letsencrypt_root = '/opt/letsencrypt-git'
 letsencrypt_yaml = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/letsencrypt/vagrant.yaml")

data/vagrant/provisioners/update_jenkins_plugins.rb

@@ -3,15 +3,15 @@
 
 require 'yaml'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENVfetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 jenkins_userland_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/jenkins/vagrant.yaml")
 userland_user = jenkins_userland_config['user']
 userland_pass = jenkins_userland_config['pass']

data/vagrant/provisioners/upload_globals.sh

@@ -10,7 +10,7 @@ else
 fi
 
 sudo tee -a $pwn_env_file << EOF
-export PWN_ROOT='/opt/pwn'
+export PWN_ROOT=\$(ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"')
 export PWN_PROVIDER='${pwn_provider}'
 EOF
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.405
+  version: 0.4.409
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-11 00:00:00.000000000 Z
+date: 2022-04-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.14.1
+        version: 4.15.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.14.1
+        version: 4.15.0
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.11
+        version: 2.3.12
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.11
+        version: 2.3.12
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -660,14 +660,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.27.0
+        version: 1.28.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.27.0
+        version: 1.28.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -688,14 +688,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.10.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.10.0
 - !ruby/object:Gem::Dependency
   name: ruby-audio
   requirement: !ruby/object:Gem::Requirement
@@ -1943,14 +1943,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.1
+      version: 3.1.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.11
+rubygems_version: 3.3.12
 signing_key: 
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond