pwn 0.4.479 → 0.4.482

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5ca99e7a8fee7afaa96d59d48264cf78faaf50b54d9d355b2efa1064f50bc618
-  data.tar.gz: 416841cc29f3d57207d6b61b783636af8d9b93e29af36b901132492b70066405
+  metadata.gz: 54dd1a8b28d45a1616960225db556b4378c80f0a786985b63a1a2cf967245968
+  data.tar.gz: ff5ab778b15f78de803c1a65d7a30be89e139dbc010f78e764de03fdb93dce8a
 SHA512:
-  metadata.gz: 78eee723d46b98c17f833e10086a34d95e9aaaac55180cce18cb1106b45821d0739613ca53e99d1f72ef311dad108617bf9e2ee178ac0e67cc9daa2582921d58
-  data.tar.gz: 45661044936bbc8a6bdac18a61c0daaa9fd0a28565f3a50fde1dcbf903ede702e7e07f69806e4f7097ba754ca032fa4a1897888fcd5a0314ae986eecb5b451e6
+  metadata.gz: 99b9dc25e7728a72bbd545e319c91ba0893b5317a088ac22a26bd7223818b5b0adb2bea31712fd6f480ca6b5b26ec10005866896d652d17042390c86f731177d
+  data.tar.gz: b1cb96c6f46add465d909ac0bfc6c58cfc31504932f134450326b740e5a7ad7eb1f99eaf43f410822f8c7d1eaa9d71710d352c1e8e6961769ed8369f39c4a53e

data/Gemfile

@@ -33,7 +33,7 @@ gem 'ipaddress', '0.8.3'
 gem 'js-beautify', '0.1.8'
 gem 'json', '2.6.2'
 gem 'jsonpath', '1.1.2'
-gem 'jwt', '2.4.0'
+gem 'jwt', '2.4.1'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.7.1'
 gem 'mongo', '2.17.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.479]:001 >>> PWN.help
+pwn[v0.4.482]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.479]:001 >>> PWN.help
+pwn[v0.4.482]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_serial_msr206

@@ -101,7 +101,6 @@ begin
     puts '[(B)ackup Card]'
     puts '[(C)opy Card]'
     puts '[(L)oad Card from File]'
-    puts '[(E)dit Card]'
     puts '[(W)arm Reset]'
     puts '[(Q)uit]'
     puts menu_msg
@@ -112,38 +111,24 @@ begin
     case option
     when :R
       menu_msg = 'READ CARD'
-      # Read Card
       track_data = PWN::Plugins::MSR206.read_card(
         msr206_obj: msr206_obj
       )
     when :B
       menu_msg = 'BACKUP CARD TO FILE'
-      # Read Card to Backup
       track_data = PWN::Plugins::MSR206.backup_card(
         msr206_obj: msr206_obj
       )
     when :C
       menu_msg = 'COPY CARD'
-      # Copy Card
       track_data = PWN::Plugins::MSR206.copy_card(
         msr206_obj: msr206_obj
       )
     when :L
       menu_msg = 'LOAD FROM FILE'
-      # Read Card to Backup
       track_data = PWN::Plugins::MSR206.load_card_from_file(
         msr206_obj: msr206_obj
       )
-    when :E
-      menu_msg = 'EDIT'
-      # Read Target Card
-      track_data = PWN::Plugins::MSR206.edit_card(
-        msr206_obj: msr206_obj
-      )
-
-      # TODO: Save Original Card Contents
-      # arm_to_write card to edit
-      # read edited card to verify successful write
     when :W
       menu_msg = 'WARM RESET'
       exec_resp = PWN::Plugins::MSR206.exec(

data/lib/pwn/plugins/msr206.rb

@@ -613,6 +613,7 @@ module PWN
             msr206_obj: msr206_obj,
             cmd: type
           )
+          puts exec_resp.inspect
 
           print 'Ready to Read.  Please Swipe Card Now:'
           loop do
@@ -621,6 +622,7 @@ module PWN
               cmd: type
             )
 
+            puts exec_resp[:msg]
             break if exec_resp[:msg] == :ack_command_completed
           end
 
@@ -660,6 +662,7 @@ module PWN
                   params: [param]
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = [param]
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
@@ -685,17 +688,20 @@ module PWN
                   params: [param]
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = [param]
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
 
                 # 3 byte command
+                param = [0x5f] + [param]
                 exec_resp = exec(
                   msr206_obj: msr206_obj,
                   cmd: cmd,
-                  params: [0x5f] + [param]
+                  params: param
                 )
                 exec_resp[:encoding] = encoding
+                exec_resp[:track_format] = param
                 puts exec_resp[:decoded]
                 puts exec_resp.inspect
                 track_data_arr.push(exec_resp)
@@ -706,6 +712,9 @@ module PWN
              :arm_to_write_with_raw,
              :arm_to_write_with_raw_speed_prompts
 
+          # TODO: Set Write Density for Tracks Here
+          # >>>
+
           if encoding == :iso
             cmds_arr = %i[
               load_iso_std_data_for_writing_track1
@@ -713,69 +722,96 @@ module PWN
               load_iso_std_data_for_writing_track3
             ]
 
+            # TODO: Get Data by cmd (e.g. load_iso_std_data_for_writing_track1)
             cmds_arr.each_with_index do |cmd, track|
               puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
               this_track = track_data[track][:decoded].chars.map do |c|
                 c.unpack1('H*').to_i(16)
               end
-              this_track_w_eot = this_track + [0x04]
-              puts this_track_w_eot.inspect
+              track_eot = [0x04]
+              track_payload = this_track + track_eot
+              puts track_payload.inspect
               exec_resp = exec(
                 msr206_obj: msr206_obj,
                 cmd: cmd,
-                params: this_track_w_eot
+                params: track_payload
+              )
+              exec_resp[:encoding] = encoding
+              puts exec_resp.inspect
+              track_data_arr.push(exec_resp)
+            end
+          end
+
+          if encoding == :iso_alt
+            cmds_arr = %i[
+              alt_load_iso_std_data_for_writing_track1
+              alt_load_iso_std_data_for_writing_track2
+              alt_load_iso_std_data_for_writing_track3
+            ]
+
+            # TODO: Get Data by cmd (e.g. alt_load_iso_std_data_for_writing_track1)
+            cmds_arr.each_with_index do |cmd, track|
+              puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
+              this_track = track_data[track][:decoded].chars.map do |c|
+                c.unpack1('H*').to_i(16)
+              end
+              track_format = track_data[track][:track_format]
+              track_eot = [0x04]
+              track_payload = track_format + this_track + track_eot
+              puts track_payload.inspect
+              exec_resp = exec(
+                msr206_obj: msr206_obj,
+                cmd: cmd,
+                params: track_payload
               )
               exec_resp[:encoding] = encoding
-              puts exec_resp[:decoded]
               puts exec_resp.inspect
               track_data_arr.push(exec_resp)
             end
           end
 
-          # if encoding == :iso_alt
-          #   cmds_arr = %i[
-          #     alt_load_iso_std_data_for_writing_track1
-          #     alt_load_iso_std_data_for_writing_track2
-          #     alt_load_iso_std_data_for_writing_track3
-          #   ]
-
-          #   cmds_arr.each do |cmd|
-          #     puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
-          #     exec_resp = exec(
-          #       msr206_obj: msr206_obj,
-          #       cmd: cmd
-          #     )
-          #     exec_resp[:encoding] = encoding
-          #     puts exec_resp[:decoded]
-          #     puts exec_resp.inspect
-          #     track_data_arr.push(exec_resp)
-          #   end
-          # end
-
-          # if encoding == :raw
-          #   cmds_arr = %i[
-          #     load_custom_data_for_writing_track1
-          #     load_custom_data_for_writing_track2
-          #     load_custom_data_for_writing_track3
-          #   ]
-
-          #   cmds_arr.each do |cmd|
-          #     puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
-          #     exec_resp = exec(
-          #       msr206_obj: msr206_obj,
-          #       cmd: cmd
-          #     )
-          #     exec_resp[:encoding] = encoding
-          #     puts exec_resp[:decoded]
-          #     puts exec_resp.inspect
-          #     track_data_arr.push(exec_resp)
-          #   end
-          # end
+          if encoding == :raw
+            cmds_arr = %i[
+              load_custom_data_for_writing_track1
+              load_custom_data_for_writing_track2
+              load_custom_data_for_writing_track3
+            ]
+
+            # TODO: Get Data by cmd (e.g. load_custom_data_for_writing_track1)
+            cmds_arr.each_with_index do |cmd, track|
+              puts "\n*** #{cmd.to_s.gsub('_', ' ').upcase} #{'*' * 17}"
+              puts track_data[track][:decoded]
+              next if track_data[track][:decoded] == '+'
+
+              this_track = track_data[track][:decoded].chars.map do |c|
+                c.unpack1('H*').to_i(16)
+              end
+              track_format = track_data[track][:track_format]
+              track_eot = [0x04]
+              track_payload = track_format + this_track + track_eot
+              puts track_payload.inspect
+              exec_resp = exec(
+                msr206_obj: msr206_obj,
+                cmd: cmd,
+                params: track_payload
+              )
+              exec_resp[:encoding] = encoding
+              puts exec_resp.inspect
+              track_data_arr.push(exec_resp)
+            end
+          end
 
           exec_resp = PWN::Plugins::MSR206.exec(
             msr206_obj: msr206_obj,
             cmd: type
           )
+          puts exec_resp.inspect
 
           print 'Ready to Write.  Please Swipe Card Now:'
           loop do
@@ -887,7 +923,80 @@ module PWN
           cmd: :yellow_off
         )
 
-        puts 'complete.'
+        track_data
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Plugins::MSR206.write_card(
+      #   msr206_obj: 'required - msr206_obj returned from #connect method',
+      #   encoding: 'required - :iso || :alt_iso || :raw',
+      #   track_data: 'requred - track data to write (see #backup_card for structure)'
+      # )
+
+      public_class_method def self.write_card(opts = {})
+        msr206_obj = opts[:msr206_obj]
+        encoding = opts[:encoding].to_s.scrub.strip.chomp.to_sym
+        track_data = opts[:track_data]
+
+        puts 'IN ORDER TO GET BLANK TRACKS, A STRONG MAGNETIC FIELD MUST BE PRESENT TO FIRST WIPE THE CARD TARGETED FOR WRITING.'
+        # puts 'Default Write Current:'
+        # exec_resp = exec(
+        #   msr206_obj: msr206_obj,
+        #   cmd: :view_default_write_current
+        # )
+        # puts exec_resp.inspect
+
+        # puts 'Temporary Write Current:'
+        # exec_resp = exec(
+        #   msr206_obj: msr206_obj,
+        #   cmd: :view_temp_write_current
+        # )
+        # puts exec_resp.inspect
+
+        coercivity = :waiting_for_selection
+        loop do
+          puts "\nCOERCIVITY OPTIONS:"
+          puts '[(H)igh (Most Often Black Stripe)]'
+          puts '[(L)ow  (Most Often Brown Stripe)]'
+          print 'COERCIVITY LEVEL >>> '
+          coercivity_choice = gets.scrub.chomp.strip.upcase.to_sym
+
+          # Write Current Settings vs. Media Coercivties
+          # Media Coercivity (Oersteds)|Write Current Setting*|Typical Usage
+          # 300                        |36                    |Low coercivity
+          # 600                        |                      |
+          # 1800                       |                      |
+          # 3600+                      |255                   |Typical high corcivity
+
+          case coercivity_choice
+          when :H
+            coercivity = [0x32, 0x35, 0x35]
+            break
+          when :L
+            coercivity = [0x30, 0x33, 0x36]
+            break
+          end
+        end
+
+        exec_resp = exec(
+          msr206_obj: msr206_obj,
+          cmd: :set_temp_write_current,
+          params: coercivity
+        )
+
+        track_data = wait_for_swipe(
+          msr206_obj: msr206_obj,
+          type: :arm_to_write_no_raw,
+          encoding: encoding,
+          track_data: track_data
+        )
+
+        exec_resp = PWN::Plugins::MSR206.exec(
+          msr206_obj: msr206_obj,
+          cmd: :simulate_power_cycle_warm_reset
+        )
 
         track_data
       rescue StandardError => e
@@ -909,16 +1018,11 @@ module PWN
 
         encoding = track_data.first[:encoding] if track_data.length == 3
         # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
+        write_card(
           msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
           encoding: encoding,
           track_data: track_data
         )
-
-        puts 'complete.'
-
-        track_data
       rescue StandardError => e
         raise e
       end
@@ -971,46 +1075,11 @@ module PWN
         encoding = track_data.first[:encoding] if track_data.length == 3
 
         # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
+        write_card(
           msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
           encoding: encoding,
           track_data: track_data
         )
-
-        puts 'complete.'
-
-        track_data
-      rescue StandardError => e
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # PWN::Plugins::MSR206.edit_card(
-      #   msr206_obj: 'required - msr206_obj returned from #connect method'
-      # )
-
-      public_class_method def self.edit_card(opts = {})
-        msr206_obj = opts[:msr206_obj]
-
-        # Read Card to Backup
-        track_data = backup_card(
-          msr206_obj: msr206_obj
-        )
-
-        # TODO: Inline Editing
-
-        encoding = track_data.first[:encoding] if track_data.length == 3
-        # TODO: Save Original Card Contents
-        track_data = wait_for_swipe(
-          msr206_obj: msr206_obj,
-          type: :arm_to_write_no_raw,
-          encoding: encoding
-        )
-
-        puts 'complete.'
-
-        track_data
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.479'
+  VERSION = '0.4.482'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.479
+  version: 0.4.482
 platform: ruby
 authors:
 - 0day Inc.
@@ -310,14 +310,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.4.1
 - !ruby/object:Gem::Dependency
   name: luhn
   requirement: !ruby/object:Gem::Requirement