pwn 0.4.529 → 0.4.532

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8edebfc80a2f2a49bb42640d91d3ccb1980a3e54ab4b199a67af322f44f5007
-  data.tar.gz: dc73dbe5239f0eed921a39175e2f9d075cb88b569ca6fdc1eb443c58d2f5abc7
+  metadata.gz: 366367f2b50f47f6cc4edae81d06dd3d6dbc484cbbfec463797d39069a987229
+  data.tar.gz: 77bc84d887ac27f4e9bbe7afa5215a95abd36125f6cf9863af2a64f14768a3df
 SHA512:
-  metadata.gz: a82d0cb3201138e6124a84156a8401529fbf9a73fc52bc40a52075da41a1d73aff0bc355e9ae302640d673815751d4eb1987ef923751b1a3106c49151760e07d
-  data.tar.gz: 983a1e1654687297cf5d31ee0995aa2bb77490a7820db234f714f8eaaae12c62046e9d4b424c9bada329c9c0c78b918ef92fa2fba5c1398ef9f405f60222365b
+  metadata.gz: afa9131945f78ab16cfdd7ebf5b11d861945d1399ac2c3ec7838b564cb9ffd7d343e8059c619a781c0d49f8d7753e74a145141891d5bac28ff7624ea61bc0583
+  data.tar.gz: 64723cf3d5b0488c0f860925869c63bd864e9841b94df5fe71cbf3673b66b71edf18eb990ecc36e8231df8bec77f55e4792d773c4fa46cb2b1af2c929c17b2f2

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.529]:001 >>> PWN.help
+pwn[v0.4.532]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.529]:001 >>> PWN.help
+pwn[v0.4.532]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_www_uri_buster

@@ -21,6 +21,10 @@ OptionParser.new do |options|
     opts[:wordlist] = w
   end
 
+  options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
+    opts[:http_request_headers] = h
+  end
+
   options.on('-tTHREADS', '--max-threads=THREADS', '<Optional # HTTP Requests to Run Simultaneously (Default 100)>') do |t|
     opts[:max_threads] = t
   end
@@ -53,6 +57,8 @@ begin
   wordlist = opts[:wordlist]
   raise "ERROR: #{wordlist} Does Not Exist." unless File.exist?(wordlist)
 
+  http_request_headers = opts[:http_request_headers]
+
   max_threads = opts[:max_threads]
   max_threads ||= 100
 
@@ -82,17 +88,27 @@ begin
 
     next if wordlist_line.match?(/^#/)
 
-    http_uri = "#{target_url}/#{CGI.escape(wordlist_line)}"
-
+    # http_methods = %i[CONNECT DELETE GET HEAD OPTIONS PATCH POST PUT TRACE]
     http_methods = %i[GET HEAD POST PUT DELETE OPTIONS TRACE]
     http_methods.each do |http_method|
       begin
         print '.'
+        http_uri = "#{target_url}/#{wordlist_line}"
         rest_client_resp_hash = {}
         rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+
+        headers = nil
+        if http_request_headers
+          headers = JSON.parse(
+            http_request_headers,
+            symbolize_names: true
+          )
+        end
+
         response = rest_client.execute(
           method: http_method,
           url: http_uri,
+          headers: headers,
           verify_ssl: false
         )
 
@@ -103,10 +119,11 @@ begin
           http_resp_code: response.code,
           http_resp: response.body[0..300]
         }
-      rescue RestClient::Forbidden,
-             RestClient::BadRequest,
+      rescue RestClient::BadRequest,
+             RestClient::Forbidden,
              RestClient::MethodNotAllowed,
-             RestClient::NotFound => e
+             RestClient::NotFound,
+             RestClient::ServiceUnavailable => e
 
         rest_client_resp_hash = {
           request_timestamp: Time.now.strftime('%Y-%m-%d_%H-%M-%S'),
@@ -116,6 +133,14 @@ begin
           http_resp: e.response.body[0..300]
         }
         next
+      rescue URI::InvalidURIError
+        url_encoded_wordlist_arr = []
+        wordlist_line.split('/').each do |path|
+          url_encoded_wordlist_arr.push(CGI.escape(path))
+        end
+        wordlist_line = url_encoded_wordlist_arr.join('/')
+
+        retry
       rescue RestClient::TooManyRequests
         sleep 60
       ensure

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.529'
+  VERSION = '0.4.532'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.529
+  version: 0.4.532
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-08-29 00:00:00.000000000 Z
+date: 2022-08-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport