pwn 0.4.418 → 0.4.422

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 23e5b36751a3b2abfccc8ce7271838191b7a9a1d315cd7cef3d7d489fcfb4d29
-  data.tar.gz: 1fcfbea8a333ddf7c5902a48eeea892cc605db9c3c36b7c39a64a8a9f4095eec
+  metadata.gz: cc1e32a44a5b5797d925e464dbc32195f27d20302fe4ec0f0b05f417c5a2b7c2
+  data.tar.gz: 95f27bf92deba3e9bcc8100024c9d28cceebee21b47a2013d6f1e65489561ab3
 SHA512:
-  metadata.gz: af22fc1e015fd9dc9168282e230df4e09892cc10a34e7efc87c357b5ee1ab7f03e2a0a8104c73dc71d4c787c9c748477ddcd44c257aa88798fc5a05afe14ef19
-  data.tar.gz: 381c7a01c667ad26f1888ac88556c83769379d7ee925885d02cbf275b76e34cb2cde6c191ae71ab9e8633a635f3c7a6675350439dd9ac2118ca00c53d4af07c1
+  metadata.gz: 5e1b67eea92a2647689bfd6d3b3a2b4ee951e37da0740d8465619cd489679873c8ce2a62bac14cd6d8a1a275e00afd3f906916213734844c3dc806c26956cea9
+  data.tar.gz: 22d4340100fc68bc36636bb10e78edb8d478b9f53ce8923be8c684ed788cd6930176b175807cd8fcd00815f3539fefe4680a4bc4c71d4f9b7276827290982098

data/.rubocop_todo.yml

@@ -1,76 +1,83 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2022-02-28 16:41:22 UTC using RuboCop version 1.25.1.
+# on 2022-05-08 06:06:43 UTC using RuboCop version 1.29.0.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
 # versions of RuboCop, may require this file to be generated again.
 
-# Offense count: 225
+# Offense count: 227
 Lint/UselessAssignment:
   Enabled: false
 
-# Offense count: 258
+# Offense count: 246
 # Configuration parameters: IgnoredMethods, CountRepeatedAttributes.
 Metrics/AbcSize:
   Max: 328
 
-# Offense count: 58
+# Offense count: 60
 # Configuration parameters: CountComments, CountAsOne, ExcludedMethods, IgnoredMethods.
 # IgnoredMethods: refine
 Metrics/BlockLength:
   Max: 194
 
-# Offense count: 43
+# Offense count: 45
 # Configuration parameters: CountBlocks.
 Metrics/BlockNesting:
   Max: 5
 
-# Offense count: 81
+# Offense count: 83
 # Configuration parameters: IgnoredMethods.
 Metrics/CyclomaticComplexity:
   Max: 231
 
-# Offense count: 446
+# Offense count: 440
 # Configuration parameters: CountComments, CountAsOne, ExcludedMethods, IgnoredMethods.
 Metrics/MethodLength:
   Max: 466
 
-# Offense count: 36
+# Offense count: 33
 # Configuration parameters: CountComments, CountAsOne.
 Metrics/ModuleLength:
   Max: 1186
 
-# Offense count: 91
+# Offense count: 75
 # Configuration parameters: IgnoredMethods.
 Metrics/PerceivedComplexity:
   Max: 51
 
-# Offense count: 159
+# Offense count: 161
 Style/ClassVars:
   Enabled: false
 
-# Offense count: 297
-# Cop supports --auto-correct.
+# Offense count: 281
+# This cop supports safe auto-correction (--auto-correct).
 # Configuration parameters: EnforcedStyle, SingleLineConditionsOnly, IncludeTernaryExpressions.
 # SupportedStyles: assign_to_condition, assign_inside_condition
 Style/ConditionalAssignment:
   Enabled: false
 
 # Offense count: 2
-# Cop supports --auto-correct.
+# This cop supports safe auto-correction (--auto-correct).
 Style/ExplicitBlockArgument:
   Exclude:
     - 'lib/pwn/plugins/nmap_it.rb'
 
-# Offense count: 42
-# Cop supports --auto-correct-all.
+# Offense count: 95
+# This cop supports safe auto-correction (--auto-correct).
+Style/RedundantCondition:
+  Exclude:
+    - 'bin/pwn_simple_http_server'
+    - 'lib/pwn/plugins/packet.rb'
+
+# Offense count: 44
+# This cop supports unsafe auto-correction (--auto-correct-all).
 Style/SlicingWithRange:
   Enabled: false
 
-# Offense count: 520
-# Cop supports --auto-correct.
-# Configuration parameters: AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, IgnoredPatterns.
+# Offense count: 531
+# This cop supports safe auto-correction (--auto-correct).
+# Configuration parameters: AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, AllowedPatterns, IgnoredPatterns.
 # URISchemes: http, https
 Layout/LineLength:
   Max: 1620

data/Gemfile

@@ -11,14 +11,14 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '7.0.2.3'
+gem 'activesupport', '7.0.3'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.0'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
-gem 'brakeman', '5.2.2'
+gem 'brakeman', '5.2.3'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.3.12'
+gem 'bundler', '>=2.3.13'
 gem 'bundler-audit', '0.9.0.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -31,7 +31,7 @@ gem 'htmlentities', '4.3.4'
 gem 'ipaddress', '0.8.3'
 # gem 'jenkins_api_client', '1.5.3' # Temporarily disabled until arangamani/jenkins_api_client/issues/304 is Closed out
 gem 'js-beautify', '0.1.8'
-gem 'json', '2.6.1'
+gem 'json', '2.6.2'
 gem 'jsonpath', '1.1.2'
 gem 'jwt', '2.3.0'
 gem 'luhn', '1.0.2'
@@ -42,11 +42,11 @@ gem 'net-ldap', '0.17.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.3.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.13.4'
+gem 'nokogiri', '1.13.6'
 gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
-gem 'pdf-reader', '2.9.2'
+gem 'pdf-reader', '2.10.0'
 gem 'pg', '1.3.5'
 gem 'pry', '0.14.1'
 gem 'pry-doc', '1.3.0'
@@ -59,7 +59,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '4.2.5'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.28.2'
+gem 'rubocop', '1.29.1'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.10.0'
 gem 'ruby-audio', '1.6.1'
@@ -67,7 +67,7 @@ gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.12.1'
-gem 'selenium-devtools', '0.100.0'
+gem 'selenium-devtools', '0.101.0'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '2.2.0'
 gem 'slack-ruby-client', '1.0.0'
@@ -79,5 +79,5 @@ gem 'tty-prompt', '0.23.1'
 gem 'watir', '7.1.0'
 gem 'waveform', '0.1.2'
 gem 'webrick', '1.7.0'
-gem 'wicked_pdf', '2.6.0'
+gem 'wicked_pdf', '2.6.2'
 gem 'yard', '0.9.27'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.418]:001 >>> PWN.help
+pwn[v0.4.422]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.418]:001 >>> PWN.help
+pwn[v0.4.422]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_nessus_cloud_create_scan

@@ -0,0 +1,72 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+require 'yaml'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-cYPATH', '--yaml-config=YPATH', '<Required - YAML Config Containing Access & Secret Keys for Authentication>') do |c|
+    opts[:yaml_config] = c
+  end
+
+  options.on('-nVALUE', '--scan-name=VALUE', '<Required - Name of Scan to Launch>') do |n|
+    opts[:scan_name] = n
+  end
+
+  options.on('-rRPATH', '--report-path=RPATH', '<Required - Path / Filename of Report>') do |r|
+    opts[:path_to_export] = r
+  end
+
+  options.on('-fFORMAT', '--report-format=FORMAT', '<Optional - Report Format :csv|:db|:html|:nessus|:pdf (defaults to :csv)>') do |f|
+    opts[:format] = f
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+begin
+  yaml_config = opts[:yaml_config]
+
+  raise "YAML Config Not Found: #{yaml_config}" unless File.exist?(yaml_config)
+
+  yaml = YAML.load_file(
+    yaml_config,
+    symbolize_names: true
+  )
+
+  access_key = yaml[:access_key]
+  secret_key = yaml[:secret_key]
+  scan_name = opts[:scan_name]
+  path_to_export = opts[:path_to_export]
+  format = opts[:format]
+
+  nessus_obj = PWN::Plugins::NessusCloud.login(
+    access_key: access_key,
+    secret_key: secret_key
+  )
+
+  scan_template_list = PWN::Plugins::NessusCloud.list_scan_templates(
+    nessus_obj: nessus_obj
+  )
+
+  selected_scan_template = scan_template_list[:scans].select do |scan|
+    scan[:name] == scan_name
+  end
+  puts selected_scan_template.inspect
+
+  # scan_template_id = selected_scan_template.first[:id]
+  # puts scan_template_id
+rescue Interrupt
+  puts 'CTRL+C detected...goodbye.'
+rescue StandardError => e
+  raise e
+end

data/lib/pwn/plugins/credit_card.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'credit_card_validations'
+require 'credit_card_validations/string'
 
 module PWN
   module Plugins
@@ -26,6 +27,18 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::CreditCard.type(
+      #   cc: 'required - e.g. XXXX XXXX XXXX XXXX'
+      # )
+
+      public_class_method def self.type(opts = {})
+        cc = opts[:cc].to_s.scrub.strip.chomp
+        cc.credit_card_brand
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
 
       public_class_method def self.authors
@@ -43,6 +56,10 @@ module PWN
             count: 'required - number of numbers to generate'
           )
 
+          #{self}.type(
+            cc: 'required - e.g. XXXX XXXX XXXX XXXX'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/plugins/nessus_cloud.rb

@@ -92,6 +92,24 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::NessusCloud.list_scan_templates(
+      #   nessus_obj: 'required - nessus_obj returned from #login method'
+      # )
+
+      public_class_method def self.list_scan_templates(opts = {})
+        nessus_obj = opts[:nessus_obj]
+
+        scan_templates_resp = nessus_cloud_rest_call(
+          nessus_obj: nessus_obj,
+          rest_call: 'editor/scan/templates'
+        ).body
+
+        JSON.parse(scan_templates_resp, symbolize_names: true)
+      rescue StandardError, SystemExit, Interrupt => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::NessusCloud.list_scans(
       #   nessus_obj: 'required - nessus_obj returned from #login method'
@@ -283,6 +301,10 @@ module PWN
             secret_key: 'required - API secret key (will prompt if blank)'
           )
 
+          #{self}.list_scan_templates(
+            nessus_obj: 'required - nessus_obj returned from #login method'
+          )
+
           #{self}.list_scans(
             nessus_obj: 'required - nessus_obj returned from #login method'
           )

data/lib/pwn/plugins/serial.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'serialport'
+require 'io/wait'
 
 module PWN
   module Plugins

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.418'
+  VERSION = '0.4.422'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.418
+  version: 0.4.422
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-26 00:00:00.000000000 Z
+date: 2022-05-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2.3
+        version: 7.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2.3
+        version: 7.0.3
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -86,14 +86,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.2.2
+        version: 5.2.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.2.2
+        version: 5.2.3
 - !ruby/object:Gem::Dependency
   name: bson
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.12
+        version: 2.3.13
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.12
+        version: 2.3.13
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -282,14 +282,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.1
+        version: 2.6.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.1
+        version: 2.6.2
 - !ruby/object:Gem::Dependency
   name: jsonpath
   requirement: !ruby/object:Gem::Requirement
@@ -436,14 +436,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.4
+        version: 1.13.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.4
+        version: 1.13.6
 - !ruby/object:Gem::Dependency
   name: oily_png
   requirement: !ruby/object:Gem::Requirement
@@ -492,14 +492,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.2
+        version: 2.10.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.2
+        version: 2.10.0
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -674,14 +674,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -786,14 +786,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.100.0
+        version: 0.101.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.100.0
+        version: 0.101.0
 - !ruby/object:Gem::Dependency
   name: serialport
   requirement: !ruby/object:Gem::Requirement
@@ -954,14 +954,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.0
+        version: 2.6.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.0
+        version: 2.6.2
 - !ruby/object:Gem::Dependency
   name: yard
   requirement: !ruby/object:Gem::Requirement
@@ -1007,6 +1007,7 @@ executables:
 - pwn_jenkins_useradd
 - pwn_mail_agent
 - pwn_msf_postgres_login
+- pwn_nessus_cloud_create_scan
 - pwn_nessus_cloud_vulnscan
 - pwn_nexpose
 - pwn_openvas_vulnscan
@@ -1065,6 +1066,7 @@ files:
 - bin/pwn_jenkins_useradd
 - bin/pwn_mail_agent
 - bin/pwn_msf_postgres_login
+- bin/pwn_nessus_cloud_create_scan
 - bin/pwn_nessus_cloud_vulnscan
 - bin/pwn_nexpose
 - bin/pwn_openvas_vulnscan
@@ -1966,7 +1968,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.12
+rubygems_version: 3.3.13
 signing_key: 
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond