pwn 0.4.478 → 0.4.481

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09d06003d8060cade6a56174ce2237cb1d60044e596117e66b8dd882778bc971'
-  data.tar.gz: 00d295054465bae88230fd25606a00c10fe635478300b40409af241e99f20322
+  metadata.gz: 9982a0cc0ec0ac9abb6f30e3bdb8cfb48328e69683ca48824381133ad235edf1
+  data.tar.gz: e0d25785cb24747d2593e622c3338fd37d27bc711bc18577cecd16b71d9ad48a
 SHA512:
-  metadata.gz: 5ddbe9550e2d6ecf8f480fc76ffaa2c44b04db21e53e3d617a7cc562ffa26a34e44db6aaee0ad1972c96533a3f91ecec97a1f8159a797db3e994405a7163904b
-  data.tar.gz: 309fb8124dbf9c76fa24b89b984b32f1e8f11869395e8e95d3bd6ba79f4438ed814475b5329dd0e5f6e660092e5d7f681cb002d4734a3c5f0af0b7a0fe7cd8d2
+  metadata.gz: f956e5a528a46aafdc929ff4cc6836423b510d6103bf985193491b1a9c08d69c34da582a1f2aa172d9d9265def2789927f623d9d37b117670242f1f03b613c3a
+  data.tar.gz: 26c61de702fb0f1e6047afb53ba36f64f83c331c78553d7c038134a7891d66c682454074207f7a8516e221e66f281d7a0c1a596ae1fc2239171abc02ba076ef3

data/Gemfile

@@ -33,12 +33,12 @@ gem 'ipaddress', '0.8.3'
 gem 'js-beautify', '0.1.8'
 gem 'json', '2.6.2'
 gem 'jsonpath', '1.1.2'
-gem 'jwt', '2.4.0'
+gem 'jwt', '2.4.1'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.7.1'
 gem 'mongo', '2.17.1'
 gem 'msfrpc-client', '1.1.2'
-gem 'net-ldap', '0.17.0'
+gem 'net-ldap', '0.17.1'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.3.1'
 gem 'nexpose', '7.3.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.478]:001 >>> PWN.help
+pwn[v0.4.481]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.478]:001 >>> PWN.help
+pwn[v0.4.481]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_perimeter_recon

@@ -130,7 +130,7 @@ def invoke_burp(opts = {})
     )
 
     File.open(json_results, 'w') do |f|
-      f.puts scan_issues_hash.to_json
+      f.puts JSON.pretty_generate(scan_issues_hash)
     end
     puts "#{@green}complete.#{@end_of_color}\n\n\n"
 
@@ -190,7 +190,7 @@ unless ipinfo.nil?
 
     ipinfo_struc = PWN::Plugins::IPInfo.get(ip_or_host: ipinfo_target)
     File.open(ipinfo_json_results, 'w') do |f|
-      f.puts ipinfo_struc.to_json
+      f.puts JSON.pretty_generate(ipinfo_struc)
     end
   end
 end

data/bin/pwn_shodan_search

@@ -73,7 +73,7 @@ begin
       end
     end
   end
-  File.write(raw_query_results_file, raw_results_arr.to_json)
+  File.write(raw_query_results_file, JSON.pretty_generate(raw_results_arr))
 rescue SystemExit, Interrupt
   puts "\nGoodbye."
 end

data/lib/pwn/plugins/msr206.rb

@@ -106,6 +106,7 @@ module PWN
         decoded_data_str = ''
         if raw_byte_arr
           raw_byte_arr.first.split.each do |byte_str|
+            # TODO: Different case statements for each parity
             case byte_str
             when '1B'
               decoded_data_str += ''
@@ -612,6 +613,7 @@ module PWN
             msr206_obj: msr206_obj,
             cmd: type
           )
+          puts exec_resp.inspect
 
           print 'Ready to Read.  Please Swipe Card Now:'
           loop do
@@ -620,6 +622,7 @@ module PWN
               cmd: type
             )
 
+            puts exec_resp[:msg]
             break if exec_resp[:msg] == :ack_command_completed
           end
 
@@ -659,6 +662,7 @@ module PWN
                   params: [param]
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = [param]
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
@@ -684,17 +688,20 @@ module PWN
                   params: [param]
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = [param]
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
 
                 # 3 byte command
+                param = [0x5f] + [param]
                 exec_resp = exec(
                   msr206_obj: msr206_obj,
                   cmd: cmd,
-                  params: [0x5f] + [param]
+                  params: param
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = param
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
@@ -705,6 +712,9 @@ module PWN
              :arm_to_write_with_raw,
              :arm_to_write_with_raw_speed_prompts
 
+          # TODO: Set Write Density for Tracks Here
+          # >>>
+
           if encoding == :iso
             cmds_arr = %i[
               load_iso_std_data_for_writing_track1
@@ -712,69 +722,96 @@ module PWN
               load_iso_std_data_for_writing_track3
             ]
 
+            # TODO: Get Data by cmd (e.g. load_iso_std_data_for_writing_track1)
             cmds_arr.each_with_index do |cmd, track|
               puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
               this_track = track_data[track][:decoded].chars.map do |c|
                 c.unpack1('H*').to_i(16)
               end
-              this_track_w_eot = this_track + [0x04]
-              puts this_track_w_eot.inspect
+              track_eot = [0x04]
+              track_payload = this_track + track_eot
+              puts track_payload.inspect
               exec_resp = exec(
                 msr206_obj: msr206_obj,
                 cmd: cmd,
-                params: this_track_w_eot
+                params: track_payload
+              )
+              exec_resp[:encoding] = encoding
+              puts exec_resp.inspect
+              track_data_arr.push(exec_resp)
+            end
+          end
+
+          if encoding == :iso_alt
+            cmds_arr = %i[
+              alt_load_iso_std_data_for_writing_track1
+              alt_load_iso_std_data_for_writing_track2
+              alt_load_iso_std_data_for_writing_track3
+            ]
+
+            # TODO: Get Data by cmd (e.g. alt_load_iso_std_data_for_writing_track1)
+            cmds_arr.each_with_index do |cmd, track|
+              puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
+              this_track = track_data[track][:decoded].chars.map do |c|
+                c.unpack1('H*').to_i(16)
+              end
+              track_format = track_data[track][:track_format]
+              track_eot = [0x04]
+              track_payload = track_format + this_track + track_eot
+              puts track_payload.inspect
+              exec_resp = exec(
+                msr206_obj: msr206_obj,
+                cmd: cmd,
+                params: track_payload
               )
               exec_resp[:encoding] = encoding
-              puts exec_resp[:decoded]
               puts exec_resp.inspect
               track_data_arr.push(exec_resp)
             end
           end
 
-          # if encoding == :iso_alt
-          #   cmds_arr = %i[
-          #     alt_load_iso_std_data_for_writing_track1
-          #     alt_load_iso_std_data_for_writing_track2
-          #     alt_load_iso_std_data_for_writing_track3
-          #   ]
-
-          #   cmds_arr.each do |cmd|
-          #     puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
-          #     exec_resp = exec(
-          #       msr206_obj: msr206_obj,
-          #       cmd: cmd
-          #     )
-          #     exec_resp[:encoding] = encoding
-          #     puts exec_resp[:decoded]
-          #     puts exec_resp.inspect
-          #     track_data_arr.push(exec_resp)
-          #   end
-          # end
-
-          # if encoding == :raw
-          #   cmds_arr = %i[
-          #     load_custom_data_for_writing_track1
-          #     load_custom_data_for_writing_track2
-          #     load_custom_data_for_writing_track3
-          #   ]
-
-          #   cmds_arr.each do |cmd|
-          #     puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
-          #     exec_resp = exec(
-          #       msr206_obj: msr206_obj,
-          #       cmd: cmd
-          #     )
-          #     exec_resp[:encoding] = encoding
-          #     puts exec_resp[:decoded]
-          #     puts exec_resp.inspect
-          #     track_data_arr.push(exec_resp)
-          #   end
-          # end
+          if encoding == :raw
+            cmds_arr = %i[
+              load_custom_data_for_writing_track1
+              load_custom_data_for_writing_track2
+              load_custom_data_for_writing_track3
+            ]
+
+            # TODO: Get Data by cmd (e.g. load_custom_data_for_writing_track1)
+            cmds_arr.each_with_index do |cmd, track|
+              puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
+              this_track = track_data[track][:decoded].chars.map do |c|
+                c.unpack1('H*').to_i(16)
+              end
+              track_format = track_data[track][:track_format]
+              track_eot = [0x04]
+              track_payload = track_format + this_track + track_eot
+              puts track_payload.inspect
+              exec_resp = exec(
+                msr206_obj: msr206_obj,
+                cmd: cmd,
+                params: track_payload
+              )
+              exec_resp[:encoding] = encoding
+              puts exec_resp.inspect
+              track_data_arr.push(exec_resp)
+            end
+          end
 
           exec_resp = PWN::Plugins::MSR206.exec(
             msr206_obj: msr206_obj,
             cmd: type
           )
+          puts exec_resp.inspect
 
           print 'Ready to Write.  Please Swipe Card Now:'
           loop do
@@ -880,13 +917,86 @@ module PWN
           )
         end
 
-        File.write(file, "#{track_data.to_json}\n")
+        File.write(file, "#{JSON.pretty_generate(track_data)}\n")
         exec_resp = exec(
           msr206_obj: msr206_obj,
           cmd: :yellow_off
         )
 
-        puts 'complete.'
+        track_data
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Plugins::MSR206.write_card(
+      #   msr206_obj: 'required - msr206_obj returned from #connect method',
+      #   encoding: 'required - :iso || :alt_iso || :raw',
+      #   track_data: 'requred - track data to write (see #backup_card for structure)'
+      # )
+
+      public_class_method def self.write_card(opts = {})
+        msr206_obj = opts[:msr206_obj]
+        encoding = opts[:encoding].to_s.scrub.strip.chomp.to_sym
+        track_data = opts[:track_data]
+
+        puts 'IN ORDER TO GET BLANK TRACKS, A STRONG MAGNETIC FIELD MUST BE PRESENT TO FIRST WIPE THE CARD TARGETED FOR WRITING.'
+        # puts 'Default Write Current:'
+        # exec_resp = exec(
+        #   msr206_obj: msr206_obj,
+        #   cmd: :view_default_write_current
+        # )
+        # puts exec_resp.inspect
+
+        # puts 'Temporary Write Current:'
+        # exec_resp = exec(
+        #   msr206_obj: msr206_obj,
+        #   cmd: :view_temp_write_current
+        # )
+        # puts exec_resp.inspect
+
+        coercivity = :waiting_for_selection
+        loop do
+          puts "\nCOERCIVITY OPTIONS:"
+          puts '[(H)igh (Black Stripe)]'
+          puts '[(L)ow (Brown Stripe)]'
+          print 'COERCIVITY LEVEL >>> '
+          coercivity_choice = gets.scrub.chomp.strip.upcase.to_sym
+
+          # Write Current Settings vs. Media Coercivties
+          # Media Coercivity (Oersteds)|Write Current Setting*|Typical Usage
+          # 300                        |36                    |Low coercivity
+          # 600                        |                      |
+          # 1800                       |                      |
+          # 3600+                      |255                   |Typical high corcivity
+
+          case coercivity_choice
+          when :H
+            coercivity = [0x32, 0x35, 0x35]
+            break
+          when :L
+            coercivity = [0x30, 0x33, 0x36]
+            break
+          end
+        end
+
+        exec_resp = exec(
+          msr206_obj: msr206_obj,
+          cmd: :set_temp_write_current,
+          params: coercivity
+        )
+
+        track_data = wait_for_swipe(
+          msr206_obj: msr206_obj,
+          type: :arm_to_write_no_raw,
+          encoding: encoding,
+          track_data: track_data
+        )
+
+        exec_resp = PWN::Plugins::MSR206.exec(
+          msr206_obj: msr206_obj,
+          cmd: :simulate_power_cycle_warm_reset
+        )
 
         track_data
       rescue StandardError => e
@@ -908,16 +1018,11 @@ module PWN
 
         encoding = track_data.first[:encoding] if track_data.length == 3
         # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
+        write_card(
           msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
           encoding: encoding,
           track_data: track_data
         )
-
-        puts 'complete.'
-
-        track_data
       rescue StandardError => e
         raise e
       end
@@ -970,16 +1075,11 @@ module PWN
         encoding = track_data.first[:encoding] if track_data.length == 3
 
         # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
+        write_card(
           msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
           encoding: encoding,
           track_data: track_data
         )
-
-        puts 'complete.'
-
-        track_data
       rescue StandardError => e
         raise e
       end
@@ -1001,15 +1101,11 @@ module PWN
 
         encoding = track_data.first[:encoding] if track_data.length == 3
         # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
+        write_card(
           msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
-          encoding: encoding
+          encoding: encoding,
+          track_data: track_data
         )
-
-        puts 'complete.'
-
-        track_data
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.478'
+  VERSION = '0.4.481'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.478
+  version: 0.4.481
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-06 00:00:00.000000000 Z
+date: 2022-06-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -310,14 +310,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.4.1
 - !ruby/object:Gem::Dependency
   name: luhn
   requirement: !ruby/object:Gem::Requirement
@@ -380,14 +380,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.17.0
+        version: 0.17.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.17.0
+        version: 0.17.1
 - !ruby/object:Gem::Dependency
   name: net-openvpn
   requirement: !ruby/object:Gem::Requirement