pwn 0.4.522 → 0.4.525
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +2 -2
- data/bin/pwn_www_uri_buster +6 -8
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 5a9473dde4c822125ce621a5fbb80390572776d98315e1ff7e0be4ae4324b561
|
4
|
+
data.tar.gz: 04cf6c753f70d1dc25ad254d7317eda494058fefb1ff93d5fc45dc7216170bb4
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 016a924abcc0933cb536b51ee8c89516b1ac9c087da9dedf083722c89b5b6d089b7ec9bbca4f056c60b02507060db060e2e3f82ee21c2bb3082171589a058ada
|
7
|
+
data.tar.gz: 200b6b0866968deb6ecb66df6a342ee72e1e3b64fe24fd7f332d9f7ca29248ee3923ea27f63817fff073d5770bbb2c31d20b46c14c80be7d69a018240844566a
|
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
37
37
|
$ rvm list gemsets
|
38
38
|
$ gem install --verbose pwn
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.525]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.525]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
|
data/bin/pwn_www_uri_buster
CHANGED
@@ -28,7 +28,7 @@ OptionParser.new do |options|
|
|
28
28
|
opts[:wordlist] = w
|
29
29
|
end
|
30
30
|
|
31
|
-
options.on('-nREPORTNAME', '--report-name=REPORTNAME', '<Optional Report Name (Defaults to, "<TARGET_URL_HOST>-<Time.now.strftime("%Y-%m-%d_%H-%M-%S")>")>') do |n|
|
31
|
+
options.on('-nREPORTNAME', '--report-name=REPORTNAME', '<Optional Report Name (Defaults to, "<TARGET_URL_HOST>-<File.basename(wordlist)>-<Time.now.strftime("%Y-%m-%d_%H-%M-%S")>")>') do |n|
|
32
32
|
opts[:report_name] = n
|
33
33
|
end
|
34
34
|
|
@@ -44,8 +44,6 @@ end
|
|
44
44
|
|
45
45
|
begin
|
46
46
|
target_url = opts[:target_url]
|
47
|
-
raise "ERROR: Invalid URL #{target_url}\nBe sure to include URL scheme (e.g. http://)" if target_url =~ URI::DEFAULT_PARSER.make_regexp.nil?
|
48
|
-
|
49
47
|
parsed_target_url = URI.parse(target_url)
|
50
48
|
|
51
49
|
wordlist = opts[:wordlist]
|
@@ -58,7 +56,7 @@ begin
|
|
58
56
|
dir_path ||= '.'
|
59
57
|
|
60
58
|
report_name = opts[:report_name]
|
61
|
-
report_name ||= "#{parsed_target_url.host}-#{Time.now.strftime('%Y-%m-%d_%H-%M-%S')}"
|
59
|
+
report_name ||= "#{parsed_target_url.host}-#{File.basename(wordlist)}-#{Time.now.strftime('%Y-%m-%d_%H-%M-%S')}"
|
62
60
|
|
63
61
|
start_reporting_server = opts[:start_reporting_server]
|
64
62
|
|
@@ -80,7 +78,7 @@ begin
|
|
80
78
|
|
81
79
|
next if wordlist_line.match?(/^#/)
|
82
80
|
|
83
|
-
http_methods = %i[GET HEAD POST PUT DELETE
|
81
|
+
http_methods = %i[GET HEAD POST PUT DELETE OPTIONS TRACE]
|
84
82
|
|
85
83
|
http_methods.each do |http_method|
|
86
84
|
begin
|
@@ -88,7 +86,7 @@ begin
|
|
88
86
|
rest_client_resp_hash = {}
|
89
87
|
http_uri = "#{target_url}/#{wordlist_line}"
|
90
88
|
rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
|
91
|
-
response =
|
89
|
+
response = rest_client.execute(
|
92
90
|
method: http_method,
|
93
91
|
url: http_uri,
|
94
92
|
verify_ssl: false
|
@@ -99,7 +97,7 @@ begin
|
|
99
97
|
http_uri: http_uri,
|
100
98
|
http_method: http_method,
|
101
99
|
http_resp_code: response.code,
|
102
|
-
http_resp: response.body
|
100
|
+
http_resp: response.body[0..300]
|
103
101
|
}
|
104
102
|
rescue RestClient::Forbidden,
|
105
103
|
RestClient::BadRequest,
|
@@ -110,7 +108,7 @@ begin
|
|
110
108
|
http_uri: http_uri,
|
111
109
|
http_method: http_method,
|
112
110
|
http_resp_code: e.response.code,
|
113
|
-
http_resp: e.response.body
|
111
|
+
http_resp: e.response.body[0..300]
|
114
112
|
}
|
115
113
|
next
|
116
114
|
ensure
|
data/lib/pwn/version.rb
CHANGED