pwn 0.4.510 → 0.4.513

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0caa8625d5bcbe7d423eca4644c94dbc753d295922c29c1008947360a22abf8e
-  data.tar.gz: d8c8b64f30fc2ce1fffaf61946d72707b7c4cca1f42b47e6d87fabbd2c994846
+  metadata.gz: 1169e57fa12d1e0274c2c67d2970cbeb4fadcbab56cf06ddc3cd52bf3871b952
+  data.tar.gz: 33721901ad464045c79c006fd54843d459ed7ebbf41a9ee5c4795fc354cf7d59
 SHA512:
-  metadata.gz: f731fdd40c62f92fe9c0ccddf06e3deef886ef58253b41bc89a62c71c55795da25521bba2c32c92c89a0a0fe5264269d8c303cadb51d6c5f5a3605683ec49f3e
-  data.tar.gz: daaa0bdec63ee6169d601d22353930f6a41937ab3091bc79657ff49bf789492d7ab619339cc2d76a169f623697438807ab3e032b7f55be8e060e2827fe150ec5
+  metadata.gz: a15f3517c53b04b1ea2b5e07a548d2f1591eef2ebd02707e7ec727d859662695f95edaf4764cfc719b9e70a750ed3ae60694c95bfdf81ed1ecd16dac0bd5a0ce
+  data.tar.gz: d49d46cf9e7b86e611b56445dca9b08823abe846f5cd13100a332d200ade4f304c170c55bc5ebacd30a45c7d8e296bf418d412999467200b68abbc360f74e31b

data/Gemfile

@@ -11,14 +11,14 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '7.0.3'
+gem 'activesupport', '7.0.3.1'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '5.2.3'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.3.17'
+gem 'bundler', '>=2.3.18'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -42,7 +42,7 @@ gem 'net-ldap', '0.17.1'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.3.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.13.6'
+gem 'nokogiri', '1.13.7'
 gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
@@ -67,7 +67,7 @@ gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.12.1'
-gem 'selenium-devtools', '0.103.0'
+gem 'selenium-devtools', '0.103.1'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '2.2.0'
 gem 'slack-ruby-client', '1.1.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.510]:001 >>> PWN.help
+pwn[v0.4.513]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.510]:001 >>> PWN.help
+pwn[v0.4.513]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/owasp_zap.rb

@@ -475,7 +475,7 @@ module PWN
         zap_obj = opts[:zap_obj]
         unless zap_obj.nil?
           pid = zap_obj[:pid]
-          File.unlink(zap_obj[:stdout_log])
+          # File.unlink(zap_obj[:stdout_log]) if File.exist?(zap_obj[:stdout_log])
 
           Process.kill('TERM', pid)
         end

data/lib/pwn/reports/sast.rb

@@ -101,7 +101,7 @@ module PWN
             <div>
               <b>Toggle Column(s):</b>&nbsp;
               <a class="toggle-vis" data-column="1" href="#">Timestamp</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="2" href="#">Test Case / Security Requirements</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="2" href="#">Test Case / Security References</a>&nbsp;|&nbsp;
               <a class="toggle-vis" data-column="3" href="#">Path</a>&nbsp;|&nbsp;
               <a class="toggle-vis" data-column="4" href="#">Line#, Formatted Content, &amp; Last Committed By</a>&nbsp;|&nbsp;
               <a class="toggle-vis" data-column="5" href="#">Raw Content</a>&nbsp;|&nbsp;
@@ -115,7 +115,7 @@ module PWN
                   <tr>
                     <th>#</th>
                     <th>Timestamp</th>
-                    <th>Test Case / Security Requirements</th>
+                    <th>Test Case / Security References</th>
                     <th>Path</th>
                     <th>Line#, Formatted Content, &amp; Last Committed By</th>
                     <th>Raw Content</th>
@@ -170,7 +170,7 @@ module PWN
                       "render": $.fn.dataTable.render.text()
                     },
                     {
-                      "data": "security_requirements",
+                      "data": "security_references",
                       "render": function (data, type, row, meta) {
                         var sast_dirname = data['sast_module'].split('::')[0].toLowerCase() + '/' + data['sast_module'].split('::')[1].toLowerCase();
                         var sast_module = data['sast_module'].split('::')[2];
@@ -182,12 +182,13 @@ module PWN
                     {
                       "data": "filename",
                       "render": function (data, type, row, meta) {
-                        for (var i = 0; i < data.length; i++) {
-                          line_entry_uri = data[i]['git_repo_root_uri'] + '/' + data[i]['entry'];
+                        line_entry_uri = htmlEntityEncode(
+                          data['git_repo_root_uri'] + '/' + data['entry']
+                        );
 
-                          return '<table class="squish"><tr class="highlighted"><td style="width:150px;" align="left"><a href="' + htmlEntityEncode(line_entry_uri) + '" target="_blank">' + htmlEntityEncode(data[i]['entry']) + '</a></td></tr></table>';
+                        file = htmlEntityEncode(data['entry']);
 
-                        }
+                        return '<table class="squish"><tr class="highlighted"><td style="width:150px;" align="left"><a href="' + line_entry_uri + '" target="_blank">' + file + '</a></td></tr></table>';
                       }
                     },
                     {
@@ -202,7 +203,7 @@ module PWN
 
                           var bug_comment = 'Timestamp: ' + row.timestamp + '\n' +
                                             'Test Case: http://' + window.location.hostname + ':8808/doc_root/pwn-0.1.0/' +
-                                              row.security_requirements['sast_module'].replace(/::/g, "/") + '\n' +
+                                              row.security_references['sast_module'].replace(/::/g, "/") + '\n' +
                                             'Source Code Impacted: ' + $("<div/>").html(filename_link).text() + '\n\n' +
                                             'Test Case Request:\n' +
                                             $("<div/>").html(row.test_case_filter.replace(/\s{2,}/g, " ")).text() + '\n\n' +

data/lib/pwn/sast/amqp_connect_as_guest.rb

@@ -25,7 +25,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -50,8 +49,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -79,9 +78,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
                 current_count += 2
               end
               result_arr.push(hash_line)
@@ -105,7 +106,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'ACCOUNT MANAGEMENT',

data/lib/pwn/sast/apache_file_system_util_api.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -49,8 +48,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -79,9 +78,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -106,7 +107,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/aws.rb

@@ -23,7 +23,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -50,8 +49,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -80,9 +79,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -107,7 +108,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',

data/lib/pwn/sast/banned_function_calls_c.rb

@@ -25,7 +25,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.c' || File.extname(entry) == '.cpp' || File.extname(entry) == '.c++' || File.extname(entry) == '.cxx' || File.extname(entry) == '.h' || File.extname(entry) == '.hpp' || File.extname(entry) == '.h++' || File.extname(entry) == '.hh' || File.extname(entry) == '.hxx' || File.extname(entry) == '.ii' || File.extname(entry) == '.ixx' || File.extname(entry) == '.ipp' || File.extname(entry) == '.inl' || File.extname(entry) == '.txx' || File.extname(entry) == '.tpp' || File.extname(entry) == '.tpl')
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -177,8 +176,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -207,9 +206,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -234,7 +235,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/base64.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -51,8 +50,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -81,9 +80,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -105,7 +106,7 @@ module PWN
 
       # Used to dictate Security Control Requirements for a Given SAST module.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'PROTECTION OF INFORMATION AT REST',

data/lib/pwn/sast/beef_hook.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -45,8 +44,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -75,9 +74,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -102,7 +103,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',

data/lib/pwn/sast/cmd_execution_java.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.java'
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -50,8 +49,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -80,9 +79,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -107,7 +108,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/cmd_execution_python.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.py' || File.extname(entry) == '.pyc' || File.extname(entry) == '.pyo' || File.extname(entry) == '.pyd')
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -52,8 +51,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -82,9 +81,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -109,7 +110,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/cmd_execution_ruby.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.rb' || File.extname(entry) == '.rbw')
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -60,8 +59,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -90,9 +89,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -117,7 +118,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -24,7 +24,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.scala'
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -50,8 +49,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -80,9 +79,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -107,7 +108,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'INFORMATION INPUT VALIDATION',

data/lib/pwn/sast/csrf.rb

@@ -25,7 +25,6 @@ module PWN
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
           if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
             line_no_and_contents_arr = []
-            filename_arr = []
             entry_beautified = false
 
             if File.extname(entry) == '.js' && (`wc -l #{entry}`.split.first.to_i < 20 || entry.include?('.min.js') || entry.include?('-all.js'))
@@ -48,8 +47,8 @@ module PWN
 
               hash_line = {
                 timestamp: Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s,
-                security_requirements: security_requirements,
-                filename: filename_arr.push(git_repo_root_uri: git_repo_root_uri, entry: entry),
+                security_references: security_references,
+                filename: { git_repo_root_uri: git_repo_root_uri, entry: entry },
                 line_no_and_contents: '',
                 raw_content: str,
                 test_case_filter: test_case_filter
@@ -78,9 +77,11 @@ module PWN
                 else
                   author = 'N/A'
                 end
-                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(line_no: line_no,
-                                                                                 contents: contents,
-                                                                                 author: author)
+                hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
+                  line_no: line_no,
+                  contents: contents,
+                  author: author
+                )
 
                 current_count += 2
               end
@@ -103,7 +104,7 @@ module PWN
       # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
       # Determine the level of Testing Coverage w/ PWN.
 
-      public_class_method def self.security_requirements
+      public_class_method def self.security_references
         {
           sast_module: self,
           section: 'MALICIOUS CODE PROTECTION',