pwn 0.4.489 → 0.4.492

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c225d1768addca6bad724d035815407ee5226c76cc5e1fe84e453d5a56efd14c
-  data.tar.gz: e4d11d33643b041ea9908e91aa4b0a9a17ce2d4362c75be5d346c77e15bade04
+  metadata.gz: c322dc457a88e28d2bd2b87830653da3e167a7c25c7cea9b5df5d8e8ae7a1ae3
+  data.tar.gz: 770907db6691c4f639a40d497e6084952c554e1289cad3ba02b2bd37d4136134
 SHA512:
-  metadata.gz: fc3a84802dfcdfd3949af1e74ce2dafae154ecb474047858a4227563d822b9dba0877d81dd7cd13a7f29f5dbce9a7913acbc1229887b8594d26b583aeb7d63d4
-  data.tar.gz: f0ed48c44e360c31b20fd53488793043940ba5521f621edf8ee75fa5fe8b955f06d5f0a646f1971869726bd414db292b67460792fd715872c5cc3becd43c37e5
+  metadata.gz: abfc7d67a3cf2b18c25e771d648fb9c6f7c1ab6483a96958ff45b962b55612c7961f0ab094abbd7b272a2dcd1aa6b3a43dc00ff9ae6b1d33cff9ac3af53a6303
+  data.tar.gz: b73297289b1cfb8feb41381b66e93c9b22e3027b39cbb502ffc79f20d850fbebff4eb134fea232639e9b93f94cf571143a2fd7454d567ad77689aaeb017620a3

data/Gemfile

@@ -18,7 +18,7 @@ gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '5.2.3'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.3.15'
+gem 'bundler', '>=2.3.16'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -73,7 +73,7 @@ gem 'sinatra', '2.2.0'
 gem 'slack-ruby-client', '1.1.0'
 gem 'socksify', '1.7.1'
 gem 'spreadsheet', '1.3.0'
-gem 'sqlite3', '1.4.2'
+gem 'sqlite3', '1.4.4'
 gem 'thin', '1.8.1'
 gem 'tty-prompt', '0.23.1'
 gem 'watir', '7.1.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.489]:001 >>> PWN.help
+pwn[v0.4.492]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.489]:001 >>> PWN.help
+pwn[v0.4.492]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_nessus_cloud_scan_crud

@@ -67,7 +67,7 @@ OptionParser.new do |options|
     opts[:starttime] = t
   end
 
-  options.on('-rRRULES', '--rrules=RRULES', '<Optional - For One-Time Scans, the Starting Time and Date for the Scan (Defaults to "FREQ=ONETIME;INTERVAL=0;BYDAY=null")>') do |r|
+  options.on('-rRRULES', '--rrules=RRULES', '<Optional - For One-Time Scans, the Starting Time and Date for the Scan (Defaults to "FREQ=null;INTERVAL=0;BYDAY=null")>') do |r|
     opts[:rrules] = r
   end
 
@@ -147,7 +147,7 @@ begin
   starttime ||= Time.now.strftime('%Y%m%dT%H%M%S')
 
   rrules = opts[:rrules]
-  rrules ||= 'FREQ=ONETIME;INTERVAL=0;BYDAY=null'
+  rrules ||= 'FREQ=null;INTERVAL=0;BYDAY=null'
 
   timezone = opts[:timezone]
   timezone ||= 'UTC'
@@ -218,7 +218,6 @@ begin
     name: scan_template_name
   )
   scan_template_uuid = scan_template[:uuid]
-  puts scan_template_uuid
 
   # Part 2: Populate settings object from options passed to driver
   settings = {}

data/bin/pwn_serial_son_micro_sm132_rfid

@@ -67,7 +67,13 @@ begin
     son_micro_rfid_obj: son_micro_rfid_obj,
     cmd: :firmware
   )
-  puts "Firmware Version: #{exec_resp.first[:decoded_resp]}"
+
+  firmware_decoded = ''
+  exec_resp.last[:hex_resp].split.each do |byte_str|
+    firmware_decoded += [byte_str].pack('H*')
+  end
+
+  puts "Firmware Version: #{firmware_decoded.scrub.strip.chomp}"
 
   # Main Menu
   menu_msg = ''

data/lib/pwn/plugins/msr206.rb

@@ -615,7 +615,7 @@ module PWN
           )
           puts exec_resp.inspect
 
-          print 'Ready to Read.  Please Swipe Card Now:'
+          print 'Reader Activated.  Please Swipe Card...'
           loop do
             exec_resp = parse_responses(
               msr206_obj: msr206_obj,
@@ -813,7 +813,7 @@ module PWN
           )
           puts exec_resp.inspect
 
-          print 'Ready to Write.  Please Swipe Card Now:'
+          print 'Writer Activated.  Please Swipe Card...'
           loop do
             exec_resp = parse_responses(
               msr206_obj: msr206_obj,
@@ -923,6 +923,8 @@ module PWN
           cmd: :yellow_off
         )
 
+        puts 'complete.'
+
         track_data
       rescue StandardError => e
         raise e
@@ -1017,7 +1019,6 @@ module PWN
         )
 
         encoding = track_data.first[:encoding] if track_data.length == 3
-        # TODO: Save Original Card Contents
         write_card(
           msr206_obj: msr206_obj,
           encoding: encoding,
@@ -1061,6 +1062,7 @@ module PWN
           )
         end
 
+        # Read Card from Backup
         track_data = JSON.parse(
           File.read(file),
           symbolize_names: true
@@ -1071,10 +1073,7 @@ module PWN
           cmd: :yellow_off
         )
 
-        # Read Card from Backup
         encoding = track_data.first[:encoding] if track_data.length == 3
-
-        # TODO: Save Original Card Contents
         write_card(
           msr206_obj: msr206_obj,
           encoding: encoding,

data/lib/pwn/plugins/nessus_cloud.rb

@@ -431,13 +431,13 @@ module PWN
 
       public_class_method def self.create_scan(opts = {})
         nessus_obj = opts[:nessus_obj]
-        uuid = opts[:scan_template_uuid]
+        scan_template_uuid = opts[:scan_template_uuid]
         settings = opts[:settings]
         credentials = opts[:credentials]
         plugins = opts[:plugins]
 
         http_body = {
-          uuid: uuid,
+          uuid: scan_template_uuid,
           settings: settings,
           credentials: credentials,
           plugins: plugins

data/lib/pwn/plugins/son_micro_rfid.rb

@@ -149,7 +149,6 @@ module PWN
           end
           next_response_detected = false
           last_a_cmd_r_len = a_cmd_r_len
-          print "\n"
 
           # Third byte
           expected_cmd_resp_byte_len = cmd_resp.split[2].to_i(16) + 4
@@ -172,17 +171,10 @@ module PWN
 
           # puts "\nALL CMD RESPS >>>"
           # puts "#{all_cmd_responses}\n\n\n"
-          decoded = ''
-          cmd_resp.split.each do |byte_str|
-            decoded += [byte_str].pack('H*')
-          end
-
           parsed_cmd_resp_hash = {}
-          parsed_cmd_resp_hash[:raw_resp] = PWN::Plugins::Serial.dump_session_data.inspect
-          parsed_cmd_resp_hash[:hex_resp] = cmd_resp
-          parsed_cmd_resp_hash[:decoded_resp] = decoded.to_s.scrub.strip.chomp
           parsed_cmd_resp_hash[:cmd_hex] = cmd_hex
           parsed_cmd_resp_hash[:cmd_desc] = cmd.to_sym
+          parsed_cmd_resp_hash[:hex_resp] = cmd_resp
           resp_code = '?'
 
           # TODO: Detect EMV
@@ -348,7 +340,7 @@ module PWN
 
       public_class_method def self.read_card(opts = {})
         son_micro_rfid_obj = opts[:son_micro_rfid_obj]
-        print 'Ready to Read.  Please Scan Card Now:'
+        print 'Reader Activated.  Please Scan Card...'
         exec_resp = exec(
           son_micro_rfid_obj: son_micro_rfid_obj,
           cmd: :seek_for_tag
@@ -399,6 +391,7 @@ module PWN
         end
         File.write(file, "#{JSON.pretty_generate(rfid_data)}\n")
 
+        puts 'complete.'
         rfid_data
       rescue StandardError => e
         raise e

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.489'
+  VERSION = '0.4.492'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.489
+  version: 0.4.492
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-08 00:00:00.000000000 Z
+date: 2022-06-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.15
+        version: 2.3.16
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.15
+        version: 2.3.16
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -870,14 +870,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.2
+        version: 1.4.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.2
+        version: 1.4.4
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement