pwn 0.4.499 → 0.4.502

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f7a9e6f97a6a93fa93774f25d6b5a1395c190584cddadd22940e1686cb6967ab
-  data.tar.gz: d8cac868b9190c513ffa4b0b482f7964ce90a16881034ea423068df231be3c4c
+  metadata.gz: 8e6a9cadce0579fb5fae8d210d13e9d3be8693978ed49f309f911e21d2369465
+  data.tar.gz: 25614e923ad9677ba7b281eb6efc4f1b7b5c4bd4fd7eb1d1729665c3cd8f769b
 SHA512:
-  metadata.gz: 17113e6f7f201c96f8f43e15a73dbfd1957cf735eebef6b51a47da9d6e78939832e274a846687c8fb9570e83185f630642a61cb3bdc089636f5d12eebbacb5b4
-  data.tar.gz: b1acf08495633238f53e5d8306271b0026689305970de939c6ba8cfbb3cc8d016f42243c80950a179b43ddc4850a48f24330e1287e5c13c09fc6fbd82b607db1
+  metadata.gz: d619efe1e91a920ae8f2155ee42627668a9c61b559352e82746a2eced1472e6d5c45304729b9efce166aa0f4e23d1707bb8485903c99c1d791dca2113480b0d4
+  data.tar.gz: 67e549838acfc45e4658e2bcccf030755a7bb9a12201f15fbd94503e1bcbdaa8dfbad333607a80780c462ba6485c698eda4ca272c873e110949466ccedc90901

data/CHANGELOG_BETWEEN_TAGS.txt

@@ -0,0 +1,108 @@
+e761590 Gemfile - include whois-parser gem
+9125ac9 Gemfile - include whois gem
+8e280b1 pwn_nessus_cloud_scan_crud Driver - add tags to assets #bugfix
+282d8b6 pwn_nessus_cloud_scan_crud Driver - add tags to assets #bugfix
+e447047 pwn_nessus_cloud_scan_crud Driver - add tags to assets #bugfix
+15faf7b pwn_nessus_cloud_scan_crud Driver - add tags to assets
+c468e7b pwn_nessus_cloud_scan_crud Driver - disable schedule by default
+45a5eb6 pwn_nessus_cloud_scan_crud Driver - timezone && starttime default to nil
+09fe8a6 pwn_nessus_cloud_scan_crud Driver - rrules default to FREQ=null
+3b4c6c2 pwn_nessus_cloud_scan_crud Driver - bugfix in UUID
+e986c98 pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout #bugfix
+45113bc pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout #bugfix
+6c24858 pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout #bugfix
+e4f9869 pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout #bugfix
+b2a416c pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout
+13e7540 pwn_serial_son_micro_sm132_rfid Driver - slightly better output to stdout
+a7efffd pwn_serial_son_micro_sm132_rfid Driver - initial commit
+b8427fd pwn_serial_mar206 Driver - remove redundant edit card option in favor of load card from file
+41da7df PWN::Plugins::MSR206 module - slight #tweak to coercivity menu
+3281c7d PWN::Plugins::MSR206 module - begin supporting iso_alt and raw writing modes
+89fd44c PWN::Plugins::MSR206 module - support high and low coercivity writes in #write_card method
+6a58842 PWN::Plugins::MSR206 module - pretty print JSON data in backup file w/in #backup_card method
+a9175b1 pwn_serial_msr206 Driver - working copy and load from file (i.e. write to card initial support)
+e529993 pwn_serial_msr206 Driver - working copy and load from file (i.e. write to card initial support)
+e0273b7 pwn_serial_msr206 Driver - implement alt ISO decoding and raw reading modes to support reading non-standard cards (e.g. metrocards)
+b87c22e pwn_shodan_search - array of hashes in json output #tweak
+e380835 pwn_shodan_search - array of hashes in json output
+1d8a0e8 pwn_shodan_search - bugfix in json output
+c4e4fb9 pwn_shodan_search - intial working commit #bugfix
+17111dd pwn_shodan_search - intial working commit #bugfix
+8e1715a pwn_shodan_search - intial working commit
+38f3bd8 PWN::Plugins::Shodan module - symbolize key names in method responses
+045796f pwn_serial_msr206 Driver - Reserve yellow led for minor errors #bugfix
+a051b7f pwn_serial_msr206 Driver - Reserve yellow led for minor errors
+cf398ad pwn_serial_msr206 Driver - (B)ackup Card #working
+53256f4 pwn_serial_msr206 Driver - display configuration bits at start && bugfix with error handling
+a56a1a2 pwn_serial_msr206 Driver - remove yellow_on debug output
+3dc8d41 pwn_serial_msr206 Driver - Working Card Read
+809e74b pwn_serial_msr206 Driver - Initial commit
+43755ab PWN::Plugins::BusPirate module - #bugfix in call to PWN::Plugins::Serial.request method
+ccc167a PWN::Plugins::BusPirate module - #bugfix in call to PWN::Plugins::Serial.request method
+c048f2c PWN::Plugins::Serial, PWN::Plugins::SonMicroRFID, & PWN::Plugins::MSR206 modules - cleanup some redudant methods, make requests over serial more reliable, and work towards better response output
+f31caad PWN::Plugins::MSR206 module - more refinements
+4eb6060 PWN::Plugins::MSR206 module - implement #list_cmds && #exec methods #rubocop
+96de906 PWN::Plugins::MSR206 module - implement #list_cmds && #exec methods
+79fe42a PWN::Plugins::MSR206 module - initial non-working commit (redact msr gem in favor of 100% ruby native module)
+13b0e31 PWN::Plugins::MSR206 module - initial non-working commit
+15fb720 pwn_nessus_cloud_scan_crud && pwn_nessus_cloud_vulnscan Drivers - rename pwn_nessus_cloud_create_scan to reflect ability to create, read, update, & delete scans #bugfix
+68a92cc PWN::Plugins::NessusCloud module - implement HTTP PUT method in #nessus_cloud_rest_call
+267b389 pwn_nessus_cloud_scan_crud Driver - rename pwn_nessus_cloud_create_scan to reflect ability to create, read, update, & delete scans
+94bb346 pwn_nessus_cloud_create_scan Driver - add tag uuid to settinggs[:tag_targets] instead of tag name #bugfix
+a33c3e0 pwn_nessus_cloud_create_scan Driver - add tag uuid to settinggs[:tag_targets] instead of tag name
+d1ae4f6 pwn_nessus_cloud_create_scan Driver - add debugging to #get_tag_values call to understand condition required to trigger #create_tag method #bugfix
+2eb9500 pwn_nessus_cloud_create_scan Driver - add debugging to #get_tag_values call to understand condition required to trigger #create_tag method
+f77a454 pwn_nessus_cloud_create_scan Driver - add debugging to #get_tag_values call to understand condition required to trigger #create_tag method
+486a5a2 PWN::Plugins::NessusCloud module - refactor #get_tags method #bugfix
+a59ad8d PWN::Plugins::NessusCloud module - refactor #get_tags method #bugfix
+22c4559 PWN::Plugins::NessusCloud module - refactor #get_tags method #bugfix
+550779a PWN::Plugins::NessusCloud module - refactor #get_tags method #bugfix
+f13218f PWN::Plugins::NessusCloud module - refactor #get_tags method
+e9b1a1b pwn_nessus_cloud_create_scan Driver - add --tag-category-name feature #rubocop
+7e347e3 pwn_nessus_cloud_create_scan Driver - add --tag-category-name feature
+478ec25 pwn_nessus_cloud_create_scan Driver - add --tag-targets feature
+a02f88b pwn_nessus_cloud_create_scan Driver - more code refinement
+1999189 pwn_nessus_cloud_create_scan Driver - more code refinement
+654c50d PWN::Plugins::NessusCloud module - #bugfix in #create_scan method
+b752378 pwn_nessus_cloud_create_scan Driver - tag_targets_arr #bugfix
+7719f22 pwn_nessus_cloud_create_scan Driver - credentials key #bugfix
+906a607 pwn_nessus_cloud_create_scan Driver - migrate credentials && plugins objeects into YAML config since the structure is so diverse depending on the object used (e.g. Windows vs SSH vs etc.)
+3a6e477 pwn_nessus_cloud_create_scan Driver - closer to working commit
+3e264d8 pwn_nessus_cloud_create_scan Driver - get target network UUID for --target-network-name
+75b2d64 pwn_nessus_cloud_create_scan && pwn_nessus_cloud_vulscan Drivers - more additions and migrating certain logic to plugin in an effort to reduce code redundancy in drivers
+0cdc0ce pwn_nessus_cloud_create_scan Driver - more additions
+cc95e2b pwn_nessus_cloud_create_scan Driver - add policy parameter
+2115eb3 pwn_nessus_cloud_create_scan Driver - add policy parameter
+ac67b0f pwn_nessus_cloud_create_scan Driver - initial non-working commit #tweaks #bugfix
+84ac773 pwn_nessus_cloud_create_scan Driver - initial non-working commit #tweaks #rubocop_fixes
+8a841d8 pwn_nessus_cloud_create_scan Driver - initial non-working commit #tweaks
+3fd2f1b pwn_nessus_cloud_create_scan Driver - initial non-working commit #tweaks
+9119659 PWN::Plugins::NessusCloud - add #list_scan_templates method && pwn_nessus_cloud_create_scan Driver - initial non-working commit
+a434c66 PWN::Plugins::CreditCard module - add #type method to aid in reversing weak generation methods used by some financial institutions #rubocop
+29fce17 PWN::Plugins::CreditCard module - add #type method to aid in reversing weak generation methods used by some financial institutions
+a1f7bf1 PWN::Plugins::SerialPort module - fix missing method #wait_readable #bugfix
+f4c91d6 pwn.gemspec - Specify requirements for only the minor Ruby version, not patch (i.e. 3.1.x)
+baecc3b pwn.gemspec - Support ruby-3.1.2p20
+1e80a2b .ruby-version - Support ruby-3.1.2p20
+bd770d0 .ruby-version - Support ruby-3.1.2p20
+68958e3 .ruby-version - Support ruby-3.1.2p20 - i.e. >= Preview 20
+947fbe3 PWN::VERSION - bump gem version
+ac9387b PWN::SAST::Signature module - initial commit
+67e9cde Packer provisioners - include env when setting user var, PWN_PROVIDER #bugfix
+066da28 Packer provisioners - include env when setting user var, PWN_PROVIDER #bugfix
+b1c87af *.sh in pwn repo root - bugfix in PWN_ROOT assignment when building within cloned ssrc
+ab3eb54 *.sh in pwn repo root - bugfix in PWN_ROOT assignment when building within cloned ssrc
+31bfdb9 Packer & Vagrant - fix bug in PWN_ROOT assignment when generating /etc/profile.d/pwn_envs.sh AND redirect STDERR to /dev/null when assigining PWN_ROOT
+21db2bc Packer & Vagrant - fix bug in PWN_ROOT assignment when generating /etc/profile.d/pwn_envs.sh
+007dc4d Packer & Vagrant - fix bug in PWN_ROOT assignment when generating /etc/profile.d/pwn_envs.sh
+917a82b .ruby-version - address weird versioning issue
+41fa60e .ruby-version - Bump to 3.1.2 #rubocop_fixes
+5d51b69 .ruby-version - Bump to 3.1.2
+a225371 PWN::SAST::* modules - fix NIST 800-53 links to show respective control desc for SAST module #bugfix
+321e5ea Packer && Vagrant - ensure PWN_ROOT reflects path of latest installed pwn gem
+eb5e59d PWN::Banner::* - slight tweaks
+959941d Gemfile && PWN::Plugins::CreditCard - reinstate module w/ compatible version of credit_card_validations (i.e.  5.0.0)
+3133eb6 pwn REPL driver - implement welcome-banner command in REPL session to display example usage on demand
+831d253 PWN::SAST::HTTPAuthorizationHeader module - initial commit
+611bbf0 PWN::Plugins::RabbitMQHole to PWN::Plugins::RabbitMQ module - update rdoc to include port parameter
+87e1ef5 PWN REPL driver - regress colors back to ansi strings to avoid readline issues on prompt && rename PWN::Plugins::RabbitMQHole to PWN::Plugins::RabbitMQ and include a port parameter that can be passed to the #open method

data/Gemfile

@@ -47,7 +47,7 @@ gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
 gem 'pdf-reader', '2.10.0'
-gem 'pg', '1.3.5'
+gem 'pg', '1.4.0'
 gem 'pry', '0.14.1'
 gem 'pry-doc', '1.3.0'
 gem 'rake', '13.0.6'
@@ -80,5 +80,6 @@ gem 'watir', '7.1.0'
 gem 'waveform', '0.1.2'
 gem 'webrick', '1.7.0'
 gem 'whois', '5.1.0'
+gem 'whois-parser', '1.2.0'
 gem 'wicked_pdf', '2.6.3'
 gem 'yard', '0.9.28'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.499]:001 >>> PWN.help
+pwn[v0.4.502]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.499]:001 >>> PWN.help
+pwn[v0.4.502]:001 >>> PWN.help
 ```
 
 

data/git_commit_test_reinit_gem.sh

@@ -21,6 +21,9 @@ if (( $# == 3 )); then
     this_version=`ruby -r 'pwn' -e 'print PWN::VERSION'`
     echo "Tagging: ${this_version}"
     git tag $this_version
+    last_tag=$(git tag | tail -n 2 | head -n 1)
+    this_tag=$(git tag | tail -n 1)
+    git log $last_tag...$this_tag --oneline > CHANGELOG_BETWEEN_TAGS.txt
   fi
 else
   usage

data/lib/pwn/plugins/github.rb

@@ -0,0 +1,132 @@
+# frozen_string_literal: true
+
+require 'json'
+
+module PWN
+  module Plugins
+    # This plugin is used for interacting w/ Github's REST API using
+    # the 'rest' browser type of PWN::Plugins::TransparentBrowser.
+    module Github
+      @@logger = PWN::Plugins::PWNLogger.create
+
+      # Supported Method Parameters::
+      # github_rest_call(
+      #   http_method: 'optional HTTP method (defaults to GET)
+      #   rest_call: 'required rest call to make per the schema',
+      #   params: 'optional params passed in the URI or HTTP Headers',
+      #   http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'
+      # )
+
+      private_class_method def self.github_rest_call(opts = {})
+        http_method = if opts[:http_method].nil?
+                        :get
+                      else
+                        opts[:http_method].to_s.scrub.to_sym
+                      end
+        rest_call = opts[:rest_call].to_s.scrub
+        params = opts[:params]
+        http_body = opts[:http_body].to_s.scrub
+        base_gist_api_uri = 'https://api.github.com'
+
+        rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+
+        case http_method
+        when :get
+          response = rest_client.execute(
+            method: :get,
+            url: "#{base_gist_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              params: params
+            },
+            verify_ssl: false
+          )
+
+        when :post
+          response = rest_client.execute(
+            method: :post,
+            url: "#{base_gist_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              params: params
+            },
+            payload: http_body,
+            verify_ssl: false
+          )
+
+        else
+          raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
+        end
+
+        response
+      rescue RestClient::Forbidden
+        raise response
+      rescue RestClient::BadRequest, RestClient::NotFound, StandardError => e
+        raise
+      end
+
+      # Supported Method Parameters::
+      # response_json = PWN::Plugins::Github.download_all_gists(
+      #   username: 'required - username of gists to backup',
+      #   target_dir: 'required - target directory to save respective gists'
+      # )
+
+      public_class_method def self.download_all_gists(opts = {})
+        username = opts[:username].to_s.scrub
+        target_dir = opts[:target_dir].to_s.scrub
+
+        raise "ERROR: #{target_dir} Does Not Exist." unless Dir.exist?(target_dir)
+
+        params = {}
+        page = 1
+        response_json = [{}]
+        while response_json.any?
+          params[:page] = page
+          response_body = github_rest_call(
+            rest_call: "users/#{username}/gists",
+            params: params
+          ).body
+
+          Dir.chdir(target_dir)
+          response_json = JSON.parse(response_body, symbolize_names: true)
+          response_json.each do |gist_hash|
+            clone_dir = gist_hash[:id]
+            clone_uri = gist_hash[:git_pull_url]
+            next if Dir.exist?(clone_dir)
+
+            print "Cloning: #{clone_uri}..."
+            system('git', 'clone', clone_uri)
+            puts 'complete.'
+          end
+
+          page += 1
+        end
+
+        response_json
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <request.pentest@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          response_json = #{self}.download_all_gists(
+            username: 'required - username of gists to download',
+            target_dir: 'required - target directory to save respective gists'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/plugins.rb

@@ -25,6 +25,7 @@ module PWN
     autoload :FileFu, 'pwn/plugins/file_fu'
     autoload :Fuzz, 'pwn/plugins/fuzz'
     autoload :Git, 'pwn/plugins/git'
+    autoload :Github, 'pwn/plugins/github'
     autoload :HackerOne, 'pwn/plugins/hacker_one'
     autoload :IBMAppscan, 'pwn/plugins/ibm_appscan'
     autoload :IPInfo, 'pwn/plugins/ip_info'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.499'
+  VERSION = '0.4.502'
 end

data/spec/lib/pwn/plugins/github_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Plugins::Github do
+  it 'should display information for authors' do
+    authors_response = PWN::Plugins::Github
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Plugins::Github
+    expect(help_response).to respond_to :help
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.499
+  version: 0.4.502
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-16 00:00:00.000000000 Z
+date: 2022-06-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -506,14 +506,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.5
+        version: 1.4.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.3.5
+        version: 1.4.0
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -962,6 +962,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 5.1.0
+- !ruby/object:Gem::Dependency
+  name: whois-parser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
 - !ruby/object:Gem::Dependency
   name: wicked_pdf
   requirement: !ruby/object:Gem::Requirement
@@ -1049,6 +1063,7 @@ files:
 - ".ruby-gemset"
 - ".ruby-version"
 - ".travis.yml"
+- CHANGELOG_BETWEEN_TAGS.txt
 - CODE_OF_CONDUCT.md
 - CONTRIBUTING.md
 - Gemfile
@@ -1543,6 +1558,7 @@ files:
 - lib/pwn/plugins/file_fu.rb
 - lib/pwn/plugins/fuzz.rb
 - lib/pwn/plugins/git.rb
+- lib/pwn/plugins/github.rb
 - lib/pwn/plugins/hacker_one.rb
 - lib/pwn/plugins/http_intercept_helper.rb
 - lib/pwn/plugins/ibm_appscan.rb
@@ -1841,6 +1857,7 @@ files:
 - spec/lib/pwn/plugins/file_fu_spec.rb
 - spec/lib/pwn/plugins/fuzz_spec.rb
 - spec/lib/pwn/plugins/git_spec.rb
+- spec/lib/pwn/plugins/github_spec.rb
 - spec/lib/pwn/plugins/hacker_one_spec.rb
 - spec/lib/pwn/plugins/ibm_appscan_spec.rb
 - spec/lib/pwn/plugins/ip_info_spec.rb