pwn 0.4.516 → 0.4.519

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad76153d92ea2f3a0a50a38ff991a823ae23f464a154db7eb277678dce706c15
-  data.tar.gz: 1124c4da2fe0ca44691b35d25b6dd5b9a8df9b8d4e369bf751c4fb690f5c6a13
+  metadata.gz: fe3ddbaf62f25dd464ff0f20bc246bf64de86e8da5dd99ee9e4bb1e96809ed0e
+  data.tar.gz: c412d6c18bdd5050f593315fb246d7269bac6af1de1cfa5dc604fdf1f5dc959c
 SHA512:
-  metadata.gz: 25b1acd559f11a62091a23fc6baea38f11e8b36aee451a54eddd112dba59ab9a5c2e110925d8c9f86d23172ed8fb4217ba0ba35153146146014ab114a2203205
-  data.tar.gz: 6ba27b32c50d28b16723c15c9894cefbeda0ebab27b3a8b9d298b90b3cd4d28697f966954c3d1007d436548f0d6eecef4a2b3dba92167e2311034ef656e1b861
+  metadata.gz: e13ccc9856631374e168cd58877891784b45ea653eeed58e1c4cd2cc59737078f71aa5891e93c6afa0c0fb1f81f9ca7074cbcad48b411f33981bd495ba0eacca
+  data.tar.gz: 5c341c124a7c4df33d0f63f272eb00b63e0f6f8a2bddbadade06bc1792fda1a57eddafe79cf70d4c4da28e1bc1538df473b33a892d05bdc06296531e482008ec

data/Gemfile

@@ -16,9 +16,9 @@ gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
-gem 'brakeman', '5.2.3'
+gem 'brakeman', '5.3.1'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.3.19'
+gem 'bundler', '>=2.3.20'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -48,7 +48,7 @@ gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
 gem 'pdf-reader', '2.10.0'
-gem 'pg', '1.4.2'
+gem 'pg', '1.4.3'
 gem 'pry', '0.14.1'
 gem 'pry-doc', '1.3.0'
 gem 'rake', '13.0.6'
@@ -60,14 +60,14 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '4.2.6'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.32.0'
+gem 'rubocop', '1.35.1'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.12.1'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '0.10.0'
 gem 'ruby-saml', '1.14.0'
 gem 'rvm', '1.11.3.9'
-gem 'savon', '2.12.1'
+gem 'savon', '2.13.0'
 gem 'selenium-devtools', '0.104.0'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '2.2.2'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.516]:001 >>> PWN.help
+pwn[v0.4.519]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.516]:001 >>> PWN.help
+pwn[v0.4.519]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/baresip.rb

@@ -291,6 +291,10 @@ module PWN
       # )
 
       public_class_method def self.apply_src_num_rules(opts = {})
+        config_root = opts[:config_root] if Dir.exist?(
+          opts[:config_root].to_s
+        )
+        config_root ||= "#{Dir.home}/.baresip"
         src_num_rules = opts[:src_num_rules]
         target_num = opts[:target_num]
 
@@ -307,25 +311,25 @@ module PWN
           country = ''
         when 11
           # 1 digit country+area+prefix+suffix
-          country = format('%0.1s', Random.rand(1..9))
+          country = format('%0.1d', Random.rand(1..9))
           country = target_num.to_s.chars.first if src_num_rules_arr.include?(
             :same_country
           )
         when 12
           # 2 digit country+area+prefix+suffix
-          country = format('%0.2s', Random.rand(1..99))
+          country = format('%0.2d', Random.rand(1..99))
           country = target_num.to_s.chars[0..1].join if src_num_rules_arr.include?(
             :same_country
           )
         when 13
           # 3 digit country+area+prefix+suffix
-          country = format('%0.3s', Random.rand(1..999))
+          country = format('%0.3d', Random.rand(1..999))
           country = target_num.to_s.chars[0..2].join if src_num_rules_arr.include?(
             :same_country
           )
         when 14
           # 4 digit country+area+prefix+suffix
-          country = format('%0.4s', Random.rand(1..9999))
+          country = format('%0.4d', Random.rand(1..9999))
           country = target_num.to_s.chars[0..3].join if src_num_rules_arr.include?(
             :same_country
           )
@@ -333,22 +337,33 @@ module PWN
           raise "Target # should be 10-14 digits. Length is: #{target_num.to_s.length}"
         end
 
-        area = format('%0.3s', Random.rand(200..999))
+        # > 799 for prefix leads to call issues when calling 800 numbers.
+        # area = format('%0.3s', Random.rand(200..999))
+        area = format('%0.3d', Random.rand(200..999))
         area = target_num.to_s.chars[-10..-8].join if src_num_rules_arr.include?(
           :same_area
         )
 
-        prefix = format('%0.3s', Random.rand(200..999))
+        prefix = format('%0.3d', Random.rand(200..999))
         prefix = target_num.to_s.chars[-7..-5].join if src_num_rules_arr.include?(
           :same_prefix
         )
-        suffix = format('%0.4s', Random.rand(0..9999))
+        suffix = format('%0.4d', Random.rand(0..9999))
         src_num = "#{country}#{area}#{prefix}#{suffix}"
         src_num = target_num if src_num_rules_arr.include?(:self)
 
         # TODO: Update ~/.baresip/accounts to apply source number
-        # config_root = baresip_obj[:config_root]
-        # config = "#{config_root}/config"
+        sip_accounts_path = "#{config_root}/accounts"
+        updated_account_content = ''
+        File.read(sip_accounts_path).each_line do |line|
+          this_account_line = line
+          if line.match?(/^<sip:.+@.+>/)
+            sip_account_to_keep = this_account_line.split('@').last
+            this_account_line = "<sip:#{src_num}@#{sip_account_to_keep}"
+          end
+          updated_account_content = "#{updated_account_content}#{this_account_line}"
+        end
+        File.write(sip_accounts_path, updated_account_content)
 
         src_num
       rescue StandardError => e
@@ -366,6 +381,12 @@ module PWN
 
       public_class_method def self.recon(opts = {})
         baresip_bin = opts[:baresip_bin]
+
+        config_root = opts[:config_root] if Dir.exist?(
+          opts[:config_root].to_s
+        )
+        config_root ||= "#{Dir.home}/.baresip"
+
         session_root = opts[:session_root]
         session_root ||= Dir.pwd
         target_file = opts[:target_file]
@@ -414,6 +435,7 @@ module PWN
           Dir.chdir(session_root)
 
           src_num = apply_src_num_rules(
+            config_root: config_root,
             target_num: target_num,
             src_num_rules: src_num_rules
           )

data/lib/pwn/sast/amqp_connect_as_guest.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/apache_file_system_util_api.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/aws.rb

@@ -21,7 +21,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/banned_function_calls_c.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.c' || File.extname(entry) == '.cpp' || File.extname(entry) == '.c++' || File.extname(entry) == '.cxx' || File.extname(entry) == '.h' || File.extname(entry) == '.hpp' || File.extname(entry) == '.h++' || File.extname(entry) == '.hh' || File.extname(entry) == '.hxx' || File.extname(entry) == '.ii' || File.extname(entry) == '.ixx' || File.extname(entry) == '.ipp' || File.extname(entry) == '.inl' || File.extname(entry) == '.txx' || File.extname(entry) == '.tpp' || File.extname(entry) == '.tpl')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.c' || File.extname(entry) == '.cpp' || File.extname(entry) == '.c++' || File.extname(entry) == '.cxx' || File.extname(entry) == '.h' || File.extname(entry) == '.hpp' || File.extname(entry) == '.h++' || File.extname(entry) == '.hh' || File.extname(entry) == '.hxx' || File.extname(entry) == '.ii' || File.extname(entry) == '.ixx' || File.extname(entry) == '.ipp' || File.extname(entry) == '.inl' || File.extname(entry) == '.txx' || File.extname(entry) == '.tpp' || File.extname(entry) == '.tpl') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/base64.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/beef_hook.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -32,7 +32,10 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -Fin 'hook.js' #{entry}"
+            test_case_filter = "
+              grep -Fin \
+              -e 'hook.js' #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/cmd_execution_java.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.java'
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.java' && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/cmd_execution_python.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.py' || File.extname(entry) == '.pyc' || File.extname(entry) == '.pyo' || File.extname(entry) == '.pyd')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.py' || File.extname(entry) == '.pyc' || File.extname(entry) == '.pyo' || File.extname(entry) == '.pyd') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/cmd_execution_ruby.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.rb' || File.extname(entry) == '.rbw')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.rb' || File.extname(entry) == '.rbw') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.scala'
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.scala' && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/csrf.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -ni 'csrf' #{entry}
+              grep -ni \
+              -e 'csrf' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/deserial_java.rb

@@ -24,7 +24,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,17 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -in -e readObject -e XMLdecoder -e fromXML -e readObjectNodData -e readResolve -e readExternal -e readUnshared -e Serializable #{entry}"
+            test_case_filter = "
+              grep -in \
+              -e readObject \
+              -e XMLdecoder \
+              -e fromXML \
+              -e readObjectNodData \
+              -e readResolve \
+              -e readExternal \
+              -e readUnshared \
+              -e Serializable #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/emoticon.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -38,6 +38,9 @@ module PWN
               -e ';-)' \
               -e ':-P' \
               -e ':-D' \
+              -e '\_o_/' \
+              -e '\_O_/' \
+              -e '\_0_/' \
               -e ':-O' #{entry}
             "
 

data/lib/pwn/sast/eval.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -n 'eval(' #{entry}
+              grep -n \
+              -e 'eval(' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/factory.rb

@@ -24,7 +24,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,12 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -in -e DocumentBuilderFactory -e XMLInputFactory -e SAXParserFactory #{entry}"
+            test_case_filter = "
+              grep -in \
+              -e DocumentBuilderFactory \
+              -e XMLInputFactory \
+              -e SAXParserFactory #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/http_authorization_header.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/inner_html.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -n 'innerHTML' #{entry}
+              grep -n \
+              -e 'innerHTML' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/keystore.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -32,7 +32,10 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -Fin 'keystore' #{entry}"
+            test_case_filter = "
+              grep -Fin \
+              -e 'keystore' #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/location_hash.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -n 'location.hash' #{entry}
+              grep -n \
+              -e 'location.hash' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/log4j.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.java'
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && File.extname(entry) == '.java' && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/logger.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/outer_html.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -34,7 +34,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -n 'outerHTML' #{entry}
+              grep -n \
+              -e 'outerHTML' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/password.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/pom_version.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) == 'pom.xml'
+          if File.file?(entry) && File.basename(entry) == 'pom.xml' && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -33,7 +33,10 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -in -B2 'version' #{entry}"
+            test_case_filter = "
+              grep -in -B2 \
+              -e 'version' #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/port.rb

@@ -24,7 +24,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/private_key.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/redirect.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/redos.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/shell.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/signature.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/sql.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/ssl.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -32,7 +32,14 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -Fin -e 'ssl' -e 'tls' -e 'trustAll' -e 'trustmanager' -e 'ssl_version' #{entry}"
+            test_case_filter = "
+              grep -Fin \
+              -e 'ssl' \
+              -e 'tls' \
+              -e 'trustAll' \
+              -e 'trustmanager' \
+              -e 'ssl_version' #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/sudo.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/task_tag.rb

@@ -23,7 +23,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 

data/lib/pwn/sast/throw_errors.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java')
+          if (File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/) && (File.extname(entry) == '.scala' || File.extname(entry) == '.java') && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -33,7 +33,8 @@ module PWN
             end
 
             test_case_filter = %(
-              grep -in throw #{entry} | grep '"'
+              grep -in \
+              -e throw #{entry} | grep '"'
             )
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/sast/token.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -32,7 +32,12 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = "grep -Fin -e 'token' -e 'oauth' -e 'decodeAndVerify' #{entry}"
+            test_case_filter = "
+              grep -Fin \
+              -e 'token' \
+              -e 'oauth' \
+              -e 'decodeAndVerify' #{entry}
+            "
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/version.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -32,7 +32,11 @@ module PWN
               entry_beautified = true
             end
 
-            test_case_filter = %(grep -in "version\\s=\\s" #{entry} | grep -F '"')
+            test_case_filter = %(
+              grep -in \
+              -e "version\\s=\\s" #{entry} | \
+              grep -F '"'
+            )
 
             str = `#{test_case_filter}`.to_s.scrub
 

data/lib/pwn/sast/window_location_hash.rb

@@ -22,7 +22,7 @@ module PWN
         logger_results = ''
 
         PWN::Plugins::FileFu.recurse_dir(dir_path: dir_path) do |entry|
-          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/
+          if File.file?(entry) && File.basename(entry) !~ /^pwn.+(html|json|db)$/ && File.basename(entry) !~ /\.JS-BEAUTIFIED$/ && entry !~ /test/i
             line_no_and_contents_arr = []
             entry_beautified = false
 
@@ -33,7 +33,8 @@ module PWN
             end
 
             test_case_filter = "
-              grep -n 'window.location.hash' #{entry}
+              grep -n \
+              -e 'window.location.hash' #{entry}
             "
 
             str = `#{test_case_filter}`.to_s.scrub

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.516'
+  VERSION = '0.4.519'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.516
+  version: 0.4.519
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-08-03 00:00:00.000000000 Z
+date: 2022-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -86,14 +86,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: 5.3.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: 5.3.1
 - !ruby/object:Gem::Dependency
   name: bson
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.19
+        version: 2.3.20
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.19
+        version: 2.3.20
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -520,14 +520,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.2
+        version: 1.4.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.2
+        version: 1.4.3
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -688,14 +688,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.32.0
+        version: 1.35.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.32.0
+        version: 1.35.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -786,14 +786,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.12.1
+        version: 2.13.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.12.1
+        version: 2.13.0
 - !ruby/object:Gem::Dependency
   name: selenium-devtools
   requirement: !ruby/object:Gem::Requirement
@@ -2024,7 +2024,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.19
+rubygems_version: 3.3.20
 signing_key:
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond