pwn 0.4.406 → 0.4.410

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4ca787dc1efd010e00f6f164ee5bea7ab27729d7ca49cfffd25c8bf690a7926d
-  data.tar.gz: a6c2b17c80db35664bb2b055bb9d04b27130ce7ed87969253aa4d43680eb33fc
+  metadata.gz: ac3b2c8c32ec0a1486e6844f0ff94c7c7d5bf17d26905d530c8a0582dac0599f
+  data.tar.gz: dd8bb1cb2bf951127544ca65a857adce7ce92e248f99d99041ac3ae05ca5318f
 SHA512:
-  metadata.gz: 4c2bc1a1bbf290bc0b6b4dd057e1ea96b8a3fe8adf0f800719c97c376ae6c575713c130c23be20091c5bdd12c5bbe65dc23a205274c82da954287975b930856f
-  data.tar.gz: 4952c0c735f69cb1c8625ed40c8ae85de363a89fad33ef619afb048942698f64aea0722e92ffa6451aa1aabcea9008b3d34d130bd1410bc7bd18eff857ef016a
+  metadata.gz: 9ff1dcbcb8f7b27f40bda87cf0777e3de6ba764678f8a1484569008310ab8b2fb11050286362e50cdfb72c3818481878dae07995afefb27f58899e23ac372094
+  data.tar.gz: 7d3d3e7024b3ec1d8f5cce15fc22b104be21bf8991569fc4c3387a9007425555f495c841cdb4ab7a46744df715212345980b3b4c9db42ff0192abfbdfdb08eb6

data/.ruby-version

@@ -1 +1 @@
-3.1.1
+3.1.2

data/Gemfile

@@ -17,12 +17,13 @@ gem 'authy', '3.0.0'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '5.2.2'
-gem 'bson', '4.14.1'
-gem 'bundler', '>=2.3.11'
+gem 'bson', '4.15.0'
+gem 'bundler', '>=2.3.12'
 gem 'bundler-audit', '0.9.0.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
 gem 'credit_card_validations', '5.0.0'
+gem 'eventmachine', '1.2.7'
 gem 'faye-websocket', '0.11.1'
 gem 'gdb', '1.0.0'
 gem 'gist', '6.0.0'
@@ -58,9 +59,9 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '4.2.5'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.27.0'
+gem 'rubocop', '1.28.1'
 gem 'rubocop-rake', '0.6.0'
-gem 'rubocop-rspec', '2.9.0'
+gem 'rubocop-rspec', '2.10.0'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'

data/README.md

@@ -31,13 +31,13 @@ Leveraging various pre-built modules and the pwn prototyper, you can mix-and-mat
 Tested on Linux, & OSX leveraging Ruby via RVM.
 
 ```
-$ rvm use ruby-3.1.1@global
+$ rvm use ruby-3.1.2@global
 $ rvm gemset create pwn
-$ rvm use ruby-3.1.1@pwn
+$ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.406]:001 >>> PWN.help
+pwn[v0.4.410]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -48,11 +48,11 @@ pwn[v0.4.406]:001 >>> PWN.help
 It's wise to update pwn often as numerous versions are released/week:
 ```
 $ rvm list gemsets
-$ rvm use ruby-3.1.1@pwn
+$ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.406]:001 >>> PWN.help
+pwn[v0.4.410]:001 >>> PWN.help
 ```
 
 

data/Vagrantfile

@@ -7,13 +7,13 @@ require 'pathname'
 
 API_VERSION = '2'
 pwn_root = Pathname.new(__FILE__).realpath.expand_path.parent
-vagrant_gui = ENV['VAGRANT_GUI'] if ENV['VAGRANT_GUI']
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+vagrant_gui = ENV.fetch('VAGRANT_GUI') if ENV.fetch('VAGRANT_GUI')
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 runtime_userland = 'vagrant_rsync_userland_configs.lst'
 template_userland = "#{pwn_root}/vagrant_rsync_userland_template.lst"
 
 if pwn_provider == 'docker'
-  docker_container_target = ENV['DOCKER_CONTAINER_TARGET'] if ENV['DOCKER_CONTAINER_TARGET']
+  docker_container_target = ENV.fetch('DOCKER_CONTAINER_TARGET') if ENV.fetch('DOCKER_CONTAINER_TARGET')
   docker_create_args = [
     '--interactive',
     '--tty'

data/bin/pwn_fuzz_net_app_proto

@@ -77,7 +77,7 @@ if opts.empty?
   exit 1
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
 dir_path = opts[:dir_path].to_s.scrub
 target = opts[:target]

data/bin/pwn_sast

@@ -44,7 +44,7 @@ if opts.empty?
 end
 
 begin
-  pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
   green = "\e[32m"
   end_of_color = "\e[0m"

data/git_commit_test_reinit_gem.sh

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/bin/bash --login
 if [[ $1 != "" && $2 != "" && $3 != "" ]]; then
   # Default Strategy is to merge codebase
   git config pull.rebase false

data/lib/pwn/plugins/metasploit.rb

@@ -17,8 +17,8 @@ module PWN
         if opts[:yaml_conf] && File.exist?(opts[:yaml_conf])
           yaml_conf = YAML.load_file(opts[:yaml_conf].to_s.strip.chomp.scrub)
         else
-          pwn_root = ENV['PWN_ROOT'] if ENV['PWN_ROOT']
-          pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+          pwn_root = ENV.fetch('PWN_ROOT') if ENV.fetch('PWN_ROOT')
+          pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
           yaml_conf = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml")
         end
 

data/lib/pwn/sast/amqp_connect_as_guest.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'ACCOUNT MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-2'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-2'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/apache_file_system_util_api.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/aws.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-8'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/banned_function_calls_c.rb

@@ -236,7 +236,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/base64.rb

@@ -112,7 +112,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/beef_hook.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_java.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_python.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_ruby.rb

@@ -121,7 +121,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/csrf.rb

@@ -107,7 +107,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       end
 

data/lib/pwn/sast/deserial_java.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       end
 

data/lib/pwn/sast/emoticon.rb

@@ -114,7 +114,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/eval.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/factory.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER CONFIGURATION MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-10'
         }
       end
 

data/lib/pwn/sast/file_permission.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/http_authorization_header.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       end
 

data/lib/pwn/sast/inner_html.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/keystore.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-12'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-12'
         }
       rescue StandardError => e
         raise e.mesasge

data/lib/pwn/sast/location_hash.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/log4j.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/logger.rb

@@ -124,7 +124,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/outer_html.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/password.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       end
 

data/lib/pwn/sast/pom_version.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'VULNERABILITY SCANNING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=RA-5'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/port.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-8'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-8'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/private_key.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=IA-7'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/redirect.rb

@@ -111,7 +111,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/redos.rb

@@ -116,7 +116,7 @@ module PWN
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-28'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-28'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/shell.rb

@@ -117,7 +117,7 @@ module PWN
         {
           sast_module: self,
           section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SA-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SA-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/sql.rb

@@ -113,7 +113,7 @@ module PWN
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-10'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-10'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/ssl.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'PUBLIC KEY INFRASTRUCTURE CERTIFICATES',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SC-17'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SC-17'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/sudo.rb

@@ -109,7 +109,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/task_tag.rb

@@ -123,7 +123,7 @@ module PWN
         {
           sast_module: self,
           section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=AC-6'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=AC-6'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/throw_errors.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'ERROR HANDLING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-11'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-11'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/token.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=IA-7'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=IA-7'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/version.rb

@@ -106,7 +106,7 @@ module PWN
         {
           sast_module: self,
           section: 'VULNERABILITY SCANNING',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=RA-5'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=RA-5'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/sast/window_location_hash.rb

@@ -108,7 +108,7 @@ module PWN
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#!/control/?version=5.1&number=SI-3'
+          nist_800_53_uri: 'https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/control/?version=5.1&number=SI-3'
         }
       rescue StandardError => e
         raise e

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.406'
+  VERSION = '0.4.410'
 end

data/packer/daemons/msfrpcd.rb

@@ -21,15 +21,15 @@ end
 action = opts[:action].to_s.scrub.to_sym
 
 def start
-  if ENV['PWN_ROOT']
-    pwn_root = ENV['PWN_ROOT']
+  if ENV.fetch('PWN_ROOT')
+    pwn_root = ENV.fetch('PWN_ROOT')
   elsif Dir.exist?('/pwn')
     pwn_root = '/pwn'
   else
     pwn_root = Dir.pwd
   end
 
-  pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
   metasploit_root = '/opt/metasploit-framework-dev'
 
   msfrpcd_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml")

data/packer/kali_rolling_aws_ami.json

@@ -4,7 +4,9 @@
     "aws_secret_access_key": "{{ env `AWS_SECRET_ACCESS_KEY` }}",
     "aws_ssh_keypair_name": "{{ env `AWS_SSH_KEYPAIR_NAME` }}",
     "aws_ssh_private_key_file": "{{ env `AWS_SSH_PRIVATE_KEY_FILE` }}",
-    "box_version": "{{ env `BOX_VERSION` }}"
+    "box_version": "{{ env `BOX_VERSION` }}",
+    "pwn_root": "{{ env 'PWN_ROOT' }}",
+    "pwn_provider": "{{ PWN_PROVIDER=aws }}"
   },
   "builders": [{
     "type": "amazon-ebs",
@@ -32,8 +34,8 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=aws"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/upload_globals.sh",
@@ -52,8 +54,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=aws"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/update_os.sh"
@@ -71,8 +73,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=aws"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/coreutils.sh",

data/packer/kali_rolling_qemu_kvm.json

@@ -1,7 +1,9 @@
 {
   "variables": {
     "vagrant_cloud_token": "{{ env `VAGRANT_CLOUD_TOKEN` }}",
-    "box_version": "{{ env `BOX_VERSION` }}"
+    "box_version": "{{ env `BOX_VERSION` }}",
+    "pwn_root": "{{ env 'PWN_ROOT' }}",
+    "pwn_provider": "{{ PWN_PROVIDER=qemu }}"
   },
   "builders": [{
     "type": "qemu",
@@ -39,8 +41,8 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=qemu"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/upload_globals.sh",
@@ -75,8 +77,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=qemu"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/coreutils.sh",

data/packer/kali_rolling_virtualbox.json

@@ -1,7 +1,9 @@
 {
   "variables": {
     "vagrant_cloud_token": "{{env `VAGRANT_CLOUD_TOKEN`}}",
-    "box_version": "{{env `BOX_VERSION`}}"
+    "box_version": "{{env `BOX_VERSION`}}",
+    "pwn_root": "{{ env 'PWN_ROOT' }}",
+    "pwn_provider": "{{ PWN_PROVIDER=virtualbox }}"
   },
   "builders": [{
     "type": "virtualbox-iso",
@@ -43,8 +45,8 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=virtualbox"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/upload_globals.sh",
@@ -63,8 +65,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=virtualbox"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/install_vagrant_ssh_key.sh",
@@ -83,8 +85,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=virtualbox"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/virtualbox_guest_additions.sh"
@@ -102,8 +104,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=virtualbox"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/coreutils.sh",

data/packer/kali_rolling_vmware.json

@@ -1,7 +1,9 @@
 {
   "variables": {
     "vagrant_cloud_token": "{{ env `VAGRANT_CLOUD_TOKEN` }}",
-    "box_version": "{{ env `BOX_VERSION` }}"
+    "box_version": "{{ env `BOX_VERSION` }}",
+    "pwn_root": "{{ env 'PWN_ROOT' }}",
+    "pwn_provider": "{{ PWN_PROVIDER=vmware }}"
   },
   "builders": [{
     "type": "vmware-iso",
@@ -43,8 +45,8 @@
     {
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=vmware"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/upload_globals.sh",
@@ -63,8 +65,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=vmware"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/install_vagrant_ssh_key.sh",
@@ -83,8 +85,8 @@
       "pause_before": "180s",
       "type": "shell",
       "environment_vars": [
-        "PWN_ROOT=\$(ruby -r pwn -e 'puts \"#{Gem.path.first}/gems/pwn-#{PWN::VERSION}\"')",
-        "PWN_PROVIDER=vmware"
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
       ],
       "scripts": [
         "provisioners/coreutils.sh",

data/packer/provisioners/metasploit.rb

@@ -5,15 +5,15 @@ require 'yaml'
 
 # Install Metasploit from Source
 printf 'Installing Metasploit *****************************************************************'
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 
 metasploit_root = '/opt/metasploit-framework-dev'
 `sudo git clone https://github.com/rapid7/metasploit-framework.git #{metasploit_root}`

data/packer/provisioners/upload_globals.sh

@@ -10,7 +10,10 @@ else
 fi
 
 sudo tee -a $pwn_env_file << EOF
-export PWN_ROOT=\$(ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"')
+export PWN_ROOT=\$(
+  source /etc/profile.d/rvm.sh; \
+  ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"'
+)
 export PWN_PROVIDER='${pwn_provider}'
 EOF
 

data/upgrade_ruby.sh

@@ -43,4 +43,5 @@ cd $pwn_root && ./vagrant/provisioners/gem.sh
 rvmsudo rvm install ruby-$new_ruby_version
 echo $new_ruby_version > $pwn_root/.ruby-version
 
-cd $pwn_root && rvm use $new_ruby_version@$ruby_gemset && ./build_pwn_gem.sh
+cd / && cd $pwn_root && rvm use $new_ruby_version@$ruby_gemset && ./build_pwn_gem.sh
+rvmsudo gem pristine --all

data/vagrant/provisioners/burpsuite_pro.rb

@@ -5,15 +5,15 @@ require 'yaml'
 require 'digest'
 require 'fileutils'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 userland_config = "#{pwn_root}/etc/userland/#{pwn_provider}/burpsuite/vagrant.yaml"
 userland_burpsuite_pro_jar_path = "#{pwn_root}/third_party/burpsuite-pro.jar"
 burpsuite_pro_jar_dest_path = "/opt/burpsuite/#{File.basename(userland_burpsuite_pro_jar_path)}"

data/vagrant/provisioners/jenkins_ssh-keygen.rb

@@ -4,15 +4,15 @@
 require 'yaml'
 require 'pwn'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 jenkins_userland_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/jenkins/vagrant.yaml")
 private_key_path = '/var/lib/jenkins/.ssh/id_rsa-pwn_jenkins'
 userland_ssh_keygen_pass = jenkins_userland_config['ssh_keygen_pass']

data/vagrant/provisioners/kali_customize.rb

@@ -1,8 +1,8 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else

data/vagrant/provisioners/letsencrypt.rb

@@ -4,15 +4,15 @@
 require 'yaml'
 
 print "Installing Let's Encrypt **************************************************************"
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 letsencrypt_git = 'https://github.com/letsencrypt/letsencrypt'
 letsencrypt_root = '/opt/letsencrypt-git'
 letsencrypt_yaml = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/letsencrypt/vagrant.yaml")

data/vagrant/provisioners/update_jenkins_plugins.rb

@@ -3,15 +3,15 @@
 
 require 'yaml'
 
-if ENV['PWN_ROOT']
-  pwn_root = ENV['PWN_ROOT']
+if ENVfetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
 elsif Dir.exist?('/pwn')
   pwn_root = '/pwn'
 else
   pwn_root = Dir.pwd
 end
 
-pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
 jenkins_userland_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/jenkins/vagrant.yaml")
 userland_user = jenkins_userland_config['user']
 userland_pass = jenkins_userland_config['pass']

data/vagrant/provisioners/upload_globals.sh

@@ -10,7 +10,10 @@ else
 fi
 
 sudo tee -a $pwn_env_file << EOF
-export PWN_ROOT=\$(ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"')
+export PWN_ROOT=\$(
+  source /etc/profile.d/rvm.sh; \
+  ruby -r pwn -e 'puts "#{Gem.path.first}/gems/pwn-#{PWN::VERSION}"'
+)
 export PWN_PROVIDER='${pwn_provider}'
 EOF
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.406
+  version: 0.4.410
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-12 00:00:00.000000000 Z
+date: 2022-04-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.14.1
+        version: 4.15.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.14.1
+        version: 4.15.0
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.11
+        version: 2.3.12
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.11
+        version: 2.3.12
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -178,6 +178,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 5.0.0
+- !ruby/object:Gem::Dependency
+  name: eventmachine
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.7
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.7
 - !ruby/object:Gem::Dependency
   name: faye-websocket
   requirement: !ruby/object:Gem::Requirement
@@ -660,14 +674,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.27.0
+        version: 1.28.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.27.0
+        version: 1.28.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -688,14 +702,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.10.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.10.0
 - !ruby/object:Gem::Dependency
   name: ruby-audio
   requirement: !ruby/object:Gem::Requirement
@@ -1943,14 +1957,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.1
+      version: 3.1.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.11
+rubygems_version: 3.3.7
 signing_key: 
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond