pwn 0.4.524 → 0.4.527
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +2 -2
- data/bin/pwn_www_uri_buster +6 -6
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 97a29eb8082007674ab5011303a4ccb6897e03a99cc01201905e39a6b38e751f
|
|
4
|
+
data.tar.gz: d2fe796c9c3761a5d8a3e304946f590974c60bcc4c846cd0e22e727dbf705aff
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: aa2e8b4e875882c5a8a6458aad83def7064e9fd60f40fe7ab25e84a54bbec3595e197e841ab8e89abbb778992281892f7cd2f1b52cc3ab6523f35caa8751ec33
|
|
7
|
+
data.tar.gz: 9a620498f22d2c08196e395f4867034e6b13c544ce8d6f7f4bb9d857d1c5ec5339beae2b789a643f2191a829a02821ac7345b10f2115e54ac305d58491b83504
|
data/README.md
CHANGED
|
@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
|
37
37
|
$ rvm list gemsets
|
|
38
38
|
$ gem install --verbose pwn
|
|
39
39
|
$ pwn
|
|
40
|
-
pwn[v0.4.
|
|
40
|
+
pwn[v0.4.527]:001 >>> PWN.help
|
|
41
41
|
```
|
|
42
42
|
|
|
43
43
|
[](https://youtu.be/G7iLUY4FzsI)
|
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
|
53
53
|
$ gem install --verbose pwn
|
|
54
54
|
$ pwn
|
|
55
|
-
pwn[v0.4.
|
|
55
|
+
pwn[v0.4.527]:001 >>> PWN.help
|
|
56
56
|
```
|
|
57
57
|
|
|
58
58
|
|
data/bin/pwn_www_uri_buster
CHANGED
|
@@ -28,7 +28,7 @@ OptionParser.new do |options|
|
|
|
28
28
|
opts[:wordlist] = w
|
|
29
29
|
end
|
|
30
30
|
|
|
31
|
-
options.on('-nREPORTNAME', '--report-name=REPORTNAME', '<Optional Report Name (Defaults to, "<TARGET_URL_HOST>-<Time.now.strftime("%Y-%m-%d_%H-%M-%S")>")>') do |n|
|
|
31
|
+
options.on('-nREPORTNAME', '--report-name=REPORTNAME', '<Optional Report Name (Defaults to, "<TARGET_URL_HOST>-<File.basename(wordlist)>-<Time.now.strftime("%Y-%m-%d_%H-%M-%S")>")>') do |n|
|
|
32
32
|
opts[:report_name] = n
|
|
33
33
|
end
|
|
34
34
|
|
|
@@ -56,7 +56,7 @@ begin
|
|
|
56
56
|
dir_path ||= '.'
|
|
57
57
|
|
|
58
58
|
report_name = opts[:report_name]
|
|
59
|
-
report_name ||= "#{parsed_target_url.host}-#{Time.now.strftime('%Y-%m-%d_%H-%M-%S')}"
|
|
59
|
+
report_name ||= "#{parsed_target_url.host}-#{File.basename(wordlist)}-#{Time.now.strftime('%Y-%m-%d_%H-%M-%S')}"
|
|
60
60
|
|
|
61
61
|
start_reporting_server = opts[:start_reporting_server]
|
|
62
62
|
|
|
@@ -78,13 +78,13 @@ begin
|
|
|
78
78
|
|
|
79
79
|
next if wordlist_line.match?(/^#/)
|
|
80
80
|
|
|
81
|
-
|
|
81
|
+
http_uri = "#{target_url}/#{CGI.escape(wordlist_line)}"
|
|
82
82
|
|
|
83
|
+
http_methods = %i[GET HEAD POST PUT DELETE OPTIONS TRACE]
|
|
83
84
|
http_methods.each do |http_method|
|
|
84
85
|
begin
|
|
85
86
|
print '.'
|
|
86
87
|
rest_client_resp_hash = {}
|
|
87
|
-
http_uri = "#{target_url}/#{wordlist_line}"
|
|
88
88
|
rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
|
|
89
89
|
response = rest_client.execute(
|
|
90
90
|
method: http_method,
|
|
@@ -97,7 +97,7 @@ begin
|
|
|
97
97
|
http_uri: http_uri,
|
|
98
98
|
http_method: http_method,
|
|
99
99
|
http_resp_code: response.code,
|
|
100
|
-
http_resp: response.body
|
|
100
|
+
http_resp: response.body[0..300]
|
|
101
101
|
}
|
|
102
102
|
rescue RestClient::Forbidden,
|
|
103
103
|
RestClient::BadRequest,
|
|
@@ -108,7 +108,7 @@ begin
|
|
|
108
108
|
http_uri: http_uri,
|
|
109
109
|
http_method: http_method,
|
|
110
110
|
http_resp_code: e.response.code,
|
|
111
|
-
http_resp: e.response.body
|
|
111
|
+
http_resp: e.response.body[0..300]
|
|
112
112
|
}
|
|
113
113
|
next
|
|
114
114
|
ensure
|
data/lib/pwn/version.rb
CHANGED