pwn 0.4.469 → 0.4.472

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3a725f33e61f7f2460911a89708e4ad9bd720d10a30efb2688a494a629280465
-  data.tar.gz: 775139c435c1dd9890345a23781e472dbbc941c71f80ed9fa28ebc7135c82c90
+  metadata.gz: 79226d5832fb6d629db612d4a2f44e02c27ae32ddbfdd41722feca31cfb13b7c
+  data.tar.gz: d1116586791753444e1d60d46efe5f4f8d099fd40d4397e4f045943fb41dce23
 SHA512:
-  metadata.gz: cbd2ab55cd07f7f9740f925a7cc8e224145289a15bedaa64347c21d52c8b8fd8b44d9bb05ab4c61317044be25c76abdf8efdc3cc9ec00c796afa793d1f18bbcb
-  data.tar.gz: 426e9e3472b375f047dac05b82c394b3fa1b4f0b26b3c381663dbf3401117081c0275bc5558946ee099e1b55b3e412775888f46abb53263da66880dae230145e
+  metadata.gz: 23b26a6bbb579a707b948ea8bec858089e6a5dce7df26c8920946e6bc4637762cc71e8e03aa013d96ec9ad4fc35a497d4323b4fe006f5e50615e0093b6a279dd
+  data.tar.gz: 072f7811b42f425ef8a56fc120d64f6132df02408a19fa6229d725595464fe7a585db4bc9563c382a35ac5b083cc77f6df0017db466afaef86a2a99f147d5780

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.469]:001 >>> PWN.help
+pwn[v0.4.472]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.469]:001 >>> PWN.help
+pwn[v0.4.472]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_shodan_search

@@ -0,0 +1,77 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: false
+
+require 'pwn'
+require 'optparse'
+require 'yaml'
+require 'json'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-c', '--config-yaml', '<Required - YAML config containing api_key from Shodan.io>') do |y|
+    opts[:yaml] = y
+  end
+
+  options.on('-qFILE', '--query-file=FILE', '<Required - File containing one Shodan.io query string per line>') do |q|
+    opts[:query_file] = q
+  end
+
+  options.on('-oFILE', '--output-results-file=FILE', '<Optional - Defaults to /tmp/shodan-results-Time.now.strftime("%y-%m-%d.%H:%M:%S").txt>') do |o|
+    opts[:output_results_file] = o
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+begin
+  yaml_file = opts[:yaml].to_s
+  raise "ERROR: #{yaml_file} does not exist." unless File.exist?(yaml_file)
+
+  yaml = YAML.load_file(yaml_file, symbolize_names: true)
+
+  api_key = yaml[:api_key]
+
+  query_file = opts[:query_file].to_s
+  raise "ERROR: #{query_file} does not exist." unless File.exist?(query_file)
+
+  queries = File.readlines(query_file)
+
+  timestamp = Time.now.strftime('%Y-%m-%d.%H:%M:%S')
+  query_results_file = opts[:output_results_file]
+  query_results_file ||= "/tmp/shodan-results-#{timestamp}.txt"
+  query_results_dir = File.dirname(query_results_file)
+
+  raw_query_results_file = "#{query_results_dir}/shodan-results-#{timestamp}-RAW.json"
+  File.open(raw_query_results_file, 'w') do |r|
+    File.open(query_results_file, 'w') do |f|
+      queries.each do |query_line|
+        query = query_line.chomp
+        print "QUERY: '#{query}'"
+        r.puts("QUERY: '#{query}'")
+        f.puts("QUERY: '#{query}'")
+        search_results = PWN::Plugins::Shodan.search(
+          api_key: api_key,
+          query: query
+        )
+        puts " >>> Matches: #{search_results[:total]}"
+        r.puts search_results.to_json
+
+        search_results[:matches].select do |m|
+          f.puts "ORG: #{m[:org]} | PUBIP: #{m[:ip_str]} #{'*' * 36}"
+          f.puts "Product: #{m[:product]}"
+          f.puts "TCP Port: #{m[:port]}"
+          f.puts "Data: #{m[:data]}\n\n\n"
+        end
+      end
+    end
+  end
+rescue SystemExit, Interrupt
+  puts "\nGoodbye."
+end

data/lib/pwn/plugins/shodan.rb

@@ -90,7 +90,7 @@ module PWN
             rest_call: "shodan/host/#{target_ip}",
             params: params
           )
-          services_by_ips.push(JSON.parse(response))
+          services_by_ips.push(JSON.parse(response, symbolize_names: true))
         rescue StandardError => e
           services_by_ips.push(error: e.message)
           next
@@ -131,7 +131,7 @@ module PWN
           rest_call: 'shodan/host/count',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -166,7 +166,7 @@ module PWN
           rest_call: 'shodan/host/search',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -191,7 +191,7 @@ module PWN
           rest_call: 'shodan/host/search/tokens',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -210,7 +210,7 @@ module PWN
           rest_call: 'shodan/ports',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -229,7 +229,7 @@ module PWN
           rest_call: 'shodan/protocols',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -253,7 +253,7 @@ module PWN
           params: params,
           http_body: http_body
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -279,7 +279,7 @@ module PWN
           params: params,
           http_body: http_body
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -303,7 +303,7 @@ module PWN
           rest_call: "shodan/scan/status/#{scan_id}",
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -322,7 +322,7 @@ module PWN
           rest_call: 'shodan/services',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -352,7 +352,7 @@ module PWN
           rest_call: 'shodan/query',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -381,7 +381,7 @@ module PWN
           rest_call: 'shodan/query/tags',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -400,7 +400,7 @@ module PWN
           rest_call: 'account/profile',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -437,7 +437,7 @@ module PWN
           rest_call: 'api-info',
           params: params
         )
-        JSON.parse(response)
+        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.469'
+  VERSION = '0.4.472'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.469
+  version: 0.4.472
 platform: ruby
 authors:
 - 0day Inc.
@@ -1018,6 +1018,7 @@ executables:
 - pwn_serial_check_voicemail
 - pwn_serial_msr206
 - pwn_serial_qualcomm_commands
+- pwn_shodan_search
 - pwn_simple_http_server
 - pwn_web_cache_deception
 - pwn_www_checkip
@@ -1078,6 +1079,7 @@ files:
 - bin/pwn_serial_check_voicemail
 - bin/pwn_serial_msr206
 - bin/pwn_serial_qualcomm_commands
+- bin/pwn_shodan_search
 - bin/pwn_simple_http_server
 - bin/pwn_web_cache_deception
 - bin/pwn_www_checkip