pwn 0.4.421 → 0.4.422

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: efeeeb198ab9feda7118a37ba906a4d02ad835cbf6bb46532182f6b40bc2f848
-  data.tar.gz: 1625c31714f92f1b440d70e5b53700abc06e328ded5b37aa9b6a8bc66fad66ce
+  metadata.gz: cc1e32a44a5b5797d925e464dbc32195f27d20302fe4ec0f0b05f417c5a2b7c2
+  data.tar.gz: 95f27bf92deba3e9bcc8100024c9d28cceebee21b47a2013d6f1e65489561ab3
 SHA512:
-  metadata.gz: 5ad799e572825d6955d64cb2cb126dfd23874b3fe73102b2b817cb714f4dc3d7c0c009709d3ed6d626a4308e4f99e2c0467fec1960b4aeee4c36e56b0b2bbe6c
-  data.tar.gz: e8e260bcfe8a699932d45f595f754e9b142b77ab31049919e34ea573912935b2f1a811eeb25cafa22d36180d36f9254edb27d2ce1cb67e770ff8a8b32aa10189
+  metadata.gz: 5e1b67eea92a2647689bfd6d3b3a2b4ee951e37da0740d8465619cd489679873c8ce2a62bac14cd6d8a1a275e00afd3f906916213734844c3dc806c26956cea9
+  data.tar.gz: 22d4340100fc68bc36636bb10e78edb8d478b9f53ce8923be8c684ed788cd6930176b175807cd8fcd00815f3539fefe4680a4bc4c71d4f9b7276827290982098

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '7.0.2.4'
+gem 'activesupport', '7.0.3'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.0'
 gem 'aws-sdk', '3.1.0'
@@ -31,7 +31,7 @@ gem 'htmlentities', '4.3.4'
 gem 'ipaddress', '0.8.3'
 # gem 'jenkins_api_client', '1.5.3' # Temporarily disabled until arangamani/jenkins_api_client/issues/304 is Closed out
 gem 'js-beautify', '0.1.8'
-gem 'json', '2.6.1'
+gem 'json', '2.6.2'
 gem 'jsonpath', '1.1.2'
 gem 'jwt', '2.3.0'
 gem 'luhn', '1.0.2'
@@ -42,11 +42,11 @@ gem 'net-ldap', '0.17.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.3.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.13.5'
+gem 'nokogiri', '1.13.6'
 gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
-gem 'pdf-reader', '2.9.2'
+gem 'pdf-reader', '2.10.0'
 gem 'pg', '1.3.5'
 gem 'pry', '0.14.1'
 gem 'pry-doc', '1.3.0'
@@ -59,7 +59,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '4.2.5'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.29.0'
+gem 'rubocop', '1.29.1'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.10.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.421]:001 >>> PWN.help
+pwn[v0.4.422]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.421]:001 >>> PWN.help
+pwn[v0.4.422]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_nessus_cloud_create_scan

@@ -0,0 +1,72 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'pwn'
+require 'optparse'
+require 'yaml'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-cYPATH', '--yaml-config=YPATH', '<Required - YAML Config Containing Access & Secret Keys for Authentication>') do |c|
+    opts[:yaml_config] = c
+  end
+
+  options.on('-nVALUE', '--scan-name=VALUE', '<Required - Name of Scan to Launch>') do |n|
+    opts[:scan_name] = n
+  end
+
+  options.on('-rRPATH', '--report-path=RPATH', '<Required - Path / Filename of Report>') do |r|
+    opts[:path_to_export] = r
+  end
+
+  options.on('-fFORMAT', '--report-format=FORMAT', '<Optional - Report Format :csv|:db|:html|:nessus|:pdf (defaults to :csv)>') do |f|
+    opts[:format] = f
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+begin
+  yaml_config = opts[:yaml_config]
+
+  raise "YAML Config Not Found: #{yaml_config}" unless File.exist?(yaml_config)
+
+  yaml = YAML.load_file(
+    yaml_config,
+    symbolize_names: true
+  )
+
+  access_key = yaml[:access_key]
+  secret_key = yaml[:secret_key]
+  scan_name = opts[:scan_name]
+  path_to_export = opts[:path_to_export]
+  format = opts[:format]
+
+  nessus_obj = PWN::Plugins::NessusCloud.login(
+    access_key: access_key,
+    secret_key: secret_key
+  )
+
+  scan_template_list = PWN::Plugins::NessusCloud.list_scan_templates(
+    nessus_obj: nessus_obj
+  )
+
+  selected_scan_template = scan_template_list[:scans].select do |scan|
+    scan[:name] == scan_name
+  end
+  puts selected_scan_template.inspect
+
+  # scan_template_id = selected_scan_template.first[:id]
+  # puts scan_template_id
+rescue Interrupt
+  puts 'CTRL+C detected...goodbye.'
+rescue StandardError => e
+  raise e
+end

data/lib/pwn/plugins/nessus_cloud.rb

@@ -92,6 +92,24 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::NessusCloud.list_scan_templates(
+      #   nessus_obj: 'required - nessus_obj returned from #login method'
+      # )
+
+      public_class_method def self.list_scan_templates(opts = {})
+        nessus_obj = opts[:nessus_obj]
+
+        scan_templates_resp = nessus_cloud_rest_call(
+          nessus_obj: nessus_obj,
+          rest_call: 'editor/scan/templates'
+        ).body
+
+        JSON.parse(scan_templates_resp, symbolize_names: true)
+      rescue StandardError, SystemExit, Interrupt => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::NessusCloud.list_scans(
       #   nessus_obj: 'required - nessus_obj returned from #login method'
@@ -283,6 +301,10 @@ module PWN
             secret_key: 'required - API secret key (will prompt if blank)'
           )
 
+          #{self}.list_scan_templates(
+            nessus_obj: 'required - nessus_obj returned from #login method'
+          )
+
           #{self}.list_scans(
             nessus_obj: 'required - nessus_obj returned from #login method'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.421'
+  VERSION = '0.4.422'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.421
+  version: 0.4.422
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-08 00:00:00.000000000 Z
+date: 2022-05-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2.4
+        version: 7.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.2.4
+        version: 7.0.3
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -282,14 +282,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.1
+        version: 2.6.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.6.1
+        version: 2.6.2
 - !ruby/object:Gem::Dependency
   name: jsonpath
   requirement: !ruby/object:Gem::Requirement
@@ -436,14 +436,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.5
+        version: 1.13.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.5
+        version: 1.13.6
 - !ruby/object:Gem::Dependency
   name: oily_png
   requirement: !ruby/object:Gem::Requirement
@@ -492,14 +492,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.2
+        version: 2.10.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.2
+        version: 2.10.0
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -674,14 +674,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.29.0
+        version: 1.29.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.29.0
+        version: 1.29.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1007,6 +1007,7 @@ executables:
 - pwn_jenkins_useradd
 - pwn_mail_agent
 - pwn_msf_postgres_login
+- pwn_nessus_cloud_create_scan
 - pwn_nessus_cloud_vulnscan
 - pwn_nexpose
 - pwn_openvas_vulnscan
@@ -1065,6 +1066,7 @@ files:
 - bin/pwn_jenkins_useradd
 - bin/pwn_mail_agent
 - bin/pwn_msf_postgres_login
+- bin/pwn_nessus_cloud_create_scan
 - bin/pwn_nessus_cloud_vulnscan
 - bin/pwn_nexpose
 - bin/pwn_openvas_vulnscan