pwn 0.4.468 → 0.4.471

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 98c7c96215e79c7af756b24a758d15c55ee42fddc0822d90350c5476059f5573
-  data.tar.gz: 75ecc6b0534b384612dae50bb7d23143e4e11a5c3a2bddda8fc6f14ea1f8c44e
+  metadata.gz: 32922a349d82bb446e9fad95fb55df251fa80c58d9b72cbe6fafb50fb0e92a0c
+  data.tar.gz: d95bc2403937f02a5579744f8c85850c354f522e264300fed35a772360266477
 SHA512:
-  metadata.gz: ee8208c011822cee15ef9d92a564ce3e3027c61dd2f975acb7d154e398b763a1bb820a56d6c56fe6ec63b9c0fbd6bf80528f0a05db6081d2327b831bde5f5bd1
-  data.tar.gz: 747b0b22555e4f75be1b25455bbe07e903e82184bbbd68d67a6981e41c7f8f82173003cd6986e6953b5d3cc3e6fbf70aff3aaacd5f24b33881709c90494e007e
+  metadata.gz: 634a521d25395485a6f6318ad5754f5e7a8bd9c20bffe680bcbf0bea1fb6b01836cda1f01d658666e824073292d3c30e331754f88f9cde7bd0544cdcb7554b5a
+  data.tar.gz: 00ca0f938d5ce07390a7e3b92a4fb7c4be156a6e299997414b33ab5ad743be80b65dce1e38882d1d88a59e62c3ac3b2f69514afe737af824ce23869f031f213b

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.468]:001 >>> PWN.help
+pwn[v0.4.471]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.468]:001 >>> PWN.help
+pwn[v0.4.471]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_serial_msr206

@@ -154,19 +154,24 @@ begin
         msr206_obj: msr206_obj,
         type: :arm_to_read
       )
+
       file = ''
+      backup_msg = ''
       loop do
-        exec_resp = PWN::Plugins::MSR206.exec(
-          msr206_obj: msr206_obj,
-          cmd: :green_flash
-        )
+        if backup_msg.empty?
+          exec_resp = PWN::Plugins::MSR206.exec(
+            msr206_obj: msr206_obj,
+            cmd: :green_flash
+          )
+        end
 
         print 'Enter File Name to Save Backup: '
         file = gets.scrub.chomp.strip
         file_dir = File.dirname(file)
         break if Dir.exist?(file_dir)
 
-        puts "\nDirectory #{file_dir} for #{file} does not exist."
+        backup_msg = "\n****** ERROR: Directory #{file_dir} for #{file} does not exist ******"
+        puts backup_msg
         exec_resp = PWN::Plugins::MSR206.exec(
           msr206_obj: msr206_obj,
           cmd: :green_off

data/bin/pwn_shodan_search

@@ -0,0 +1,76 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: false
+
+require 'pwn'
+require 'optparse'
+require 'yaml'
+require 'json'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-c', '--config-yaml', '<Required - YAML config containing api_key from Shodan.io>') do |y|
+    opts[:yaml] = y
+  end
+
+  options.on('-qFILE', '--query-file=FILE', '<Required - File containing one Shodan.io query string per line>') do |q|
+    opts[:query_file] = q
+  end
+
+  options.on('-oFILE', '--output-results-file=FILE', '<Optional - Defaults to /tmp/shodan-results-Time.now.strftime("%y-%m-%d.%H:%M:%S").txt>') do |o|
+    opts[:output_results_file] = o
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+begin
+  yaml_file = opts[:yaml]
+  raise "ERROR: #{yaml_file} does not exist." unless File.exist?(yaml_file)
+
+  yaml = YAML.load_file(yaml_file, symbolize_names: true)
+
+  api_key = yaml[:api_key]
+
+  query_file = opts[:query_file]
+  raise "ERROR: #{query_file} does not exist." unless File.exist?(query_file)
+
+  queries = File.readlines(query_file)
+
+  timestamp = Time.now.strftime('%Y-%m-%d.%H:%M:%S')
+  query_results_file = opts[:output_results_file]
+  query_results_file ||= "/tmp/shodan-results-#{timestamp}.txt"
+
+  raw_query_results_file = "/tmp/shodan-results-#{timestamp}-RAW.json"
+  File.open(raw_query_results_file, 'w') do |r|
+    File.open(query_results_file, 'w') do |f|
+      queries.each do |query_line|
+        query = query_line.chomp
+        print "QUERY: '#{query}'"
+        r.puts("QUERY: '#{query}'")
+        f.puts("QUERY: '#{query}'")
+        search_results = PWN::Plugins::Shodan.search(
+          api_key: api_key,
+          query: query
+        )
+        puts " >>> Matches: #{search_results[:total]}"
+        r.puts search_results.to_json
+
+        search_results[:matches].select do |m|
+          f.puts "ORG: #{m[:org]} | PUBIP: #{m[:ip_str]} #{'*' * 36}"
+          f.puts "Product: #{m[:product]}"
+          f.puts "TCP Port: #{m[:port]}"
+          f.puts "Data: #{m[:data]}\n\n\n"
+        end
+      end
+    end
+  end
+rescue SystemExit, Interrupt
+  puts "\nGoodbye."
+end

data/lib/pwn/plugins/shodan.rb

@@ -90,7 +90,7 @@ module PWN
             rest_call: "shodan/host/#{target_ip}",
             params: params
           )
-          services_by_ips.push(JSON.parse(response))
+          services_by_ips.push(JSON.parse(response, symbolize_names: true))
         rescue StandardError => e
           services_by_ips.push(error: e.message)
           next
@@ -131,7 +131,7 @@ module PWN
           rest_call: 'shodan/host/count',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -166,7 +166,7 @@ module PWN
           rest_call: 'shodan/host/search',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -191,7 +191,7 @@ module PWN
           rest_call: 'shodan/host/search/tokens',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -210,7 +210,7 @@ module PWN
           rest_call: 'shodan/ports',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -229,7 +229,7 @@ module PWN
           rest_call: 'shodan/protocols',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -253,7 +253,7 @@ module PWN
           params: params,
           http_body: http_body
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -279,7 +279,7 @@ module PWN
           params: params,
           http_body: http_body
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -303,7 +303,7 @@ module PWN
           rest_call: "shodan/scan/status/#{scan_id}",
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -322,7 +322,7 @@ module PWN
           rest_call: 'shodan/services',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -352,7 +352,7 @@ module PWN
           rest_call: 'shodan/query',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -381,7 +381,7 @@ module PWN
           rest_call: 'shodan/query/tags',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -400,7 +400,7 @@ module PWN
           rest_call: 'account/profile',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -437,7 +437,7 @@ module PWN
           rest_call: 'api-info',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.468'
+  VERSION = '0.4.471'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.468
+  version: 0.4.471
 platform: ruby
 authors:
 - 0day Inc.
@@ -1018,6 +1018,7 @@ executables:
 - pwn_serial_check_voicemail
 - pwn_serial_msr206
 - pwn_serial_qualcomm_commands
+- pwn_shodan_search
 - pwn_simple_http_server
 - pwn_web_cache_deception
 - pwn_www_checkip
@@ -1078,6 +1079,7 @@ files:
 - bin/pwn_serial_check_voicemail
 - bin/pwn_serial_msr206
 - bin/pwn_serial_qualcomm_commands
+- bin/pwn_shodan_search
 - bin/pwn_simple_http_server
 - bin/pwn_web_cache_deception
 - bin/pwn_www_checkip