pwn 0.4.439 → 0.4.444

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0facd8a4831c0b12f3260083f60f42ffa10443a8aeb0d2b6d18e641f720ed237
-  data.tar.gz: 630a49786d7e1e9a46a86de3d6d3e2c5a5b9651e274bda12ac0c97bc5e8b0396
+  metadata.gz: 932d4e3424c3989be6db1913b6046faef7b2f110633128b9348ea46679d1a574
+  data.tar.gz: 5ef3eb4ee32569c9b32ebc21bf6ba0eedfa6aad7760da51a348488f36292d7a4
 SHA512:
-  metadata.gz: 3508e260eec62e7b95ef6beb940446498d8bb48f17ca6a9e2bab5e106650121095ef9f1655ef882ecda06a27bdcf851c258ba8b8fde73f86f6f72b8ec88d1727
-  data.tar.gz: f7e3e804ce8def94d5da144f72ae0557ca107a8506254f2a8c175418f4a635c6bc92b2b677803d675880e653c9633b8844b40498377d92f0e9b19bbf921c5a7f
+  metadata.gz: 28026ca3de629290203a6f10920bc6241c26a57e066ccb640ecea4989bdaaa64b884cf12e5dbfcf38c66ddff4291a9b34671605e3381ebab988ff602322990bf
+  data.tar.gz: 80528e7a31d6ffacaedb832eb25cd10b9c6b76765b1d9665ce74c46500fe318dd8b613e257e58ad194d38df4de297acd705868c5fa19d9e5c3f2006d21491ed2

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.439]:001 >>> PWN.help
+pwn[v0.4.444]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.439]:001 >>> PWN.help
+pwn[v0.4.444]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_nessus_cloud_create_scan

@@ -71,6 +71,10 @@ OptionParser.new do |options|
     opts[:tag_targets] = x
   end
 
+  options.on('-yCATEGORY', '--tag-category-name=CATEGORY', '<Optional - Tag Category Name to Associate with --tag-targets flag>') do |y|
+    opts[:tag_category_name] = y
+  end
+
   options.on('-zTIMEZONE', '--timezone=TIMEZONE', '<Optional - Timezone of the scheduled start time for the scan (Defaults to "UTC")>') do |t|
     opts[:timezone] = t
   end
@@ -152,6 +156,9 @@ begin
   tag_targets_arr = []
   tag_targets_arr = tag_targets.split(',') if tag_targets
 
+  tag_category_name = opts[:tag_category_name]
+  raise 'ERROR: --tag-category-name Required as --tag-targets is Populated' if tag_targets && !tag_category_name
+
   agent_group_name = opts[:agent_group_name]
   agent_group_id_arr = []
 
@@ -256,7 +263,25 @@ begin
 
   settings[:file_targets] = file_targets if file_targets
 
-  settings[:tag_targets] = tag_targets_arr if tag_targets_arr.any?
+  if tag_targets_arr.any?
+    tag_targets_arr.each do |tag_name|
+      # Lookup tag and create if does not exist
+      tag = PWN::Plugins::NessusCloud.get_tag_values(
+        nessus_obj: nessus_obj,
+        name: tag_name
+      )
+
+      next if tag.any?
+
+      PWN::Plugins::NessusCloud.create_tag(
+        nessus_obj: nessus_obj,
+        category: tag_category_name,
+        value: tag_name
+      )
+    end
+
+    settings[:tag_targets] = tag_targets_arr
+  end
 
   settings[:agent_group_id] = agent_group_id_arr if agent_group_id_arr.any?
 

data/lib/pwn/plugins/nessus_cloud.rb

@@ -275,7 +275,7 @@ module PWN
       # Supported Method Parameters::
       # PWN::Plugins::NessusCloud.get_target_groups(
       #   nessus_obj: 'required - nessus_obj returned from #login method',
-      #   name: 'optional - name of timezone'
+      #   name: 'optional - name of target group'
       # )
       # )
 
@@ -288,17 +288,48 @@ module PWN
           rest_call: 'target-groups'
         ).body
 
-        timezones = JSON.parse(target_groups_resp, symbolize_names: true)
+        target_groups = JSON.parse(target_groups_resp, symbolize_names: true)
 
         if name
-          selected_timezone = timezones[:networks].select do |tz|
-            tz[:name] == name
+          selected_target_group = target_groups[:target_groups].select do |tg|
+            tg[:name] == name
           end
-          timezones = selected_timezone.first if selected_timezone.any?
-          timezones ||= {}
+          target_groups = selected_target_group.first if selected_target_group.any?
+          target_groups ||= {}
         end
 
-        timezones
+        target_groups
+      rescue StandardError, SystemExit, Interrupt => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Plugins::NessusCloud.get_tag_values(
+      #   nessus_obj: 'required - nessus_obj returned from #login method',
+      #   name: 'optional - name of tag value'
+      # )
+      # )
+
+      public_class_method def self.get_tag_values(opts = {})
+        nessus_obj = opts[:nessus_obj]
+        name = opts[:name]
+
+        tag_values_resp = nessus_cloud_rest_call(
+          nessus_obj: nessus_obj,
+          rest_call: 'tags/values'
+        ).body
+
+        tag_values = JSON.parse(tag_values_resp, symbolize_names: true)
+
+        if name
+          selected_tag = tag_values[:values].select do |tag|
+            tag[:value] == name
+          end
+          tag_values = selected_tag.first if selected_tag.any?
+          tag_values ||= {}
+        end
+
+        tag_values
       rescue StandardError, SystemExit, Interrupt => e
         raise e
       end
@@ -347,6 +378,35 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::NessusCloud.get_scans(
+      #   nessus_obj: 'required - nessus_obj returned from #login method'
+      # )
+
+      public_class_method def self.get_scans(opts = {})
+        nessus_obj = opts[:nessus_obj]
+        name = opts[:name]
+
+        scans_resp = nessus_cloud_rest_call(
+          nessus_obj: nessus_obj,
+          rest_call: 'scans'
+        ).body
+
+        scans = JSON.parse(scans_resp, symbolize_names: true)
+
+        if name
+          selected_scan = scans[:scans].select do |s|
+            s[:name] == name
+          end
+          scans = selected_scan.first if selected_scan.any?
+          scans ||= {}
+        end
+
+        scans
+      rescue StandardError, SystemExit, Interrupt => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::NessusCloud.create_scan(
       #   nessus_obj: 'required - nessus_obj returned from #login method',
@@ -382,35 +442,6 @@ module PWN
         raise e
       end
 
-      # Supported Method Parameters::
-      # PWN::Plugins::NessusCloud.get_scans(
-      #   nessus_obj: 'required - nessus_obj returned from #login method'
-      # )
-
-      public_class_method def self.get_scans(opts = {})
-        nessus_obj = opts[:nessus_obj]
-        name = opts[:name]
-
-        scans_resp = nessus_cloud_rest_call(
-          nessus_obj: nessus_obj,
-          rest_call: 'scans'
-        ).body
-
-        scans = JSON.parse(scans_resp, symbolize_names: true)
-
-        if name
-          selected_scan = scans[:scans].select do |s|
-            s[:name] == name
-          end
-          scans = selected_scan.first if selected_scan.any?
-          scans ||= {}
-        end
-
-        scans
-      rescue StandardError, SystemExit, Interrupt => e
-        raise e
-      end
-
       # Supported Method Parameters::
       # PWN::Plugins::NessusCloud.launch_scan(
       #   nessus_obj: 'required - nessus_obj returned from #login method',
@@ -453,14 +484,14 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # PWN::Plugins::NessusCloud.tag(
+      # PWN::Plugins::NessusCloud.create_tag(
       #   nessus_obj: 'required - nessus_obj returned from #login method',
       #   category: 'required - category name to create or use',
       #   value: 'required - value name to create or use',
       #   desc: 'optional - _value_ description'
       # )
 
-      public_class_method def self.tag(opts = {})
+      public_class_method def self.create_tag(opts = {})
         nessus_obj = opts[:nessus_obj]
         category = opts[:category]
         value = opts[:value]
@@ -468,7 +499,8 @@ module PWN
 
         http_body = {
           category_name: category,
-          value: value
+          value: value,
+          description: desc
         }.to_json
 
         tag_resp = nessus_cloud_rest_call(
@@ -614,6 +646,16 @@ module PWN
             name: 'optional - name of timezone'
           )
 
+          #{self}.get_target_groups(
+            nessus_obj: 'required - nessus_obj returned from #login method',
+            name: 'optional - name of target group'
+          )
+
+          #{self}.get_tag_values(
+            nessus_obj: 'required - nessus_obj returned from #login method',
+            name: 'optional - name of tag value'
+          )
+
           #{self}.get_scans(
             nessus_obj: 'required - nessus_obj returned from #login method'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.439'
+  VERSION = '0.4.444'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.439
+  version: 0.4.444
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-23 00:00:00.000000000 Z
+date: 2022-05-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport