pwn 0.4.553 → 0.4.556

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f6a9cf9077f04af8d1f05263ebf389014fc8d61847a2cc20d9e6f047c6c01c46
-  data.tar.gz: a70a0943345f3a5b4b1ee18f12d4fda080e1580dbf45af8a3dde677661d9fad7
+  metadata.gz: 11dbd600732237336ae57156038e3dfd2a50827ac3d17c700fe4e22f454d6719
+  data.tar.gz: 05ae0f33ecf325c838d9001d4df3d08937a995759ebc7cc9e49e7f8358f3e245
 SHA512:
-  metadata.gz: 2fdd15710865e4d378a779ba5800f4483723b8b5a512abfb9d98a888a4d2ccc06a1bf9bffe279b84dd6e186df83ea7eec92f1f0200f28a042eef16b63d009511
-  data.tar.gz: b9bdf91a136054cd20b8f5aa6b12e49a8302c6812656a3bc031f157459522e5c49a395c141e4f16974472b0a45e3b9460bbba0644f7c26b45e668545a7296a28
+  metadata.gz: 7bc057c08e032a99ffedda3c0112645cbbb1d0e772782e67939c15aefb8aa35123bbfc620c61d071beea1084ce9766f662d47f081b196c106b88711abd2d2bf0
+  data.tar.gz: a2fc493cbac49a1b74b1bc8614c5b40f1f074693189165222ca04d144f778016ddeee19e0d7235d5af7079513b52372c42c98be9bebbd606780cb7a29b2f2142

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2022-09-23 22:54:28 UTC using RuboCop version 1.36.0.
+# on 2022-10-23 04:53:17 UTC using RuboCop version 1.37.0.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -17,16 +17,16 @@ Layout/LineContinuationSpacing:
     - 'packer/provisioners/wpscan.rb'
     - 'vagrant/provisioners/beef.rb'
 
-# Offense count: 265
+# Offense count: 270
 Lint/UselessAssignment:
   Enabled: false
 
-# Offense count: 266
+# Offense count: 268
 # Configuration parameters: AllowedMethods, AllowedPatterns, IgnoredMethods, CountRepeatedAttributes.
 Metrics/AbcSize:
   Max: 328
 
-# Offense count: 71
+# Offense count: 69
 # Configuration parameters: CountComments, CountAsOne, ExcludedMethods, AllowedMethods, AllowedPatterns, IgnoredMethods.
 # AllowedMethods: refine
 Metrics/BlockLength:
@@ -37,7 +37,7 @@ Metrics/BlockLength:
 Metrics/BlockNesting:
   Max: 5
 
-# Offense count: 96
+# Offense count: 97
 # Configuration parameters: AllowedMethods, AllowedPatterns, IgnoredMethods.
 Metrics/CyclomaticComplexity:
   Max: 231
@@ -52,7 +52,7 @@ Metrics/MethodLength:
 Metrics/ModuleLength:
   Max: 1186
 
-# Offense count: 88
+# Offense count: 89
 # Configuration parameters: AllowedMethods, AllowedPatterns, IgnoredMethods.
 Metrics/PerceivedComplexity:
   Max: 51
@@ -93,12 +93,23 @@ Style/RedundantCondition:
     - 'bin/pwn_simple_http_server'
     - 'lib/pwn/plugins/packet.rb'
 
+# Offense count: 13
+# This cop supports safe autocorrection (--autocorrect).
+Style/RedundantStringEscape:
+  Exclude:
+    - 'bin/pwn_autoinc_version'
+    - 'lib/pwn/sast/emoticon.rb'
+    - 'lib/pwn/sast/php_type_juggling.rb'
+    - 'lib/pwn/sast/port.rb'
+    - 'lib/pwn/sast/redos.rb'
+    - 'vagrant/provisioners/kali_customize.rb'
+
 # Offense count: 45
 # This cop supports unsafe autocorrection (--autocorrect-all).
 Style/SlicingWithRange:
   Enabled: false
 
-# Offense count: 577
+# Offense count: 574
 # This cop supports safe autocorrection (--autocorrect).
 # Configuration parameters: AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, AllowedPatterns, IgnoredPatterns.
 # URISchemes: http, https

data/Gemfile

@@ -18,7 +18,7 @@ gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '5.3.1'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.3.23'
+gem 'bundler', '>=2.3.24'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.19.0'
 gem 'colorize', '0.8.1'
@@ -43,7 +43,7 @@ gem 'net-ldap', '0.17.1'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.3.2'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.13.8'
+gem 'nokogiri', '1.13.9'
 gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
@@ -60,7 +60,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.0.0'
 gem 'rspec', '3.11.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.36.0'
+gem 'rubocop', '1.37.0'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.13.2'
 gem 'ruby-audio', '1.6.1'
@@ -71,7 +71,7 @@ gem 'savon', '2.13.1'
 gem 'selenium-devtools', '0.106.0'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '3.0.2'
-gem 'slack-ruby-client', '1.1.0'
+gem 'slack-ruby-client', '2.0.0'
 gem 'socksify', '1.7.1'
 gem 'spreadsheet', '1.3.0'
 gem 'sqlite3', '1.5.3'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.553]:001 >>> PWN.help
+pwn[v0.4.556]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.553]:001 >>> PWN.help
+pwn[v0.4.556]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/baresip.rb

@@ -143,10 +143,6 @@ module PWN
           '-v'
         )
 
-        baresip_obj[:session_thread] = init_session_thread(
-          baresip_obj: baresip_obj
-        )
-
         ok = 'registered successfully'
         gone = 'account: No SIP accounts found'
         forb = '403 Forbidden'
@@ -154,7 +150,13 @@ module PWN
         # TODO: Make this faster.
         print 'Starting baresip...'
         loop do
-          break if @session_data.select { |s| s.include?(ok) }.length.positive?
+          next unless File.exist?(screenlog_path)
+
+          dump_session_data = File.readlines(screenlog_path)
+          dump_session_data.delete_if do |line|
+            line.include?('ua: using best effort AF: af=AF_INET')
+          end
+          break if dump_session_data.select { |s| s.include?(ok) }.length.positive?
 
           next unless dump_session_data.select { |s| s.include?(gone) }.length.positive?
           next unless dump_session_data.select { |s| s.include?(forb) }.length.positive?
@@ -170,53 +172,6 @@ module PWN
         raise e
       end
 
-      # Supported Method Parameters::
-      # session_thread = init_session_thread(
-      #   serial_conn: 'required - SerialPort.new object'
-      # )
-
-      private_class_method def self.init_session_thread(opts = {})
-        baresip_obj = opts[:baresip_obj]
-
-        session_root = baresip_obj[:session_root]
-        screenlog_path = baresip_obj[:screenlog_path]
-
-        # Spin up a baresip_obj session_thread
-        Thread.new do
-          loop do
-            next unless File.exist?(screenlog_path)
-
-            # Continuously consume contents of screenlog_path
-            @session_data = File.readlines(screenlog_path)
-            @session_data.delete_if do |line|
-              line.include?('ua: using best effort AF: af=AF_INET')
-            end
-          end
-        end
-      rescue StandardError => e
-        session_thread&.terminate
-
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # session_data = PWN::Plugins::BareSIP.dump_session_data
-
-      public_class_method def self.dump_session_data
-        @session_data
-      rescue StandardError => e
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # session_data = PWN::Plugins::BareSIP.flush_session_data
-
-      public_class_method def self.flush_session_data
-        @session_data.clear
-      rescue StandardError => e
-        raise e
-      end
-
       # Supported Method Parameters::
       # cmd_resp = PWN::Plugins::BareSIP.baresip_exec(
       #   baresip_obj: 'Required - baresip obj returned from #start method',
@@ -244,13 +199,8 @@ module PWN
 
       public_class_method def self.stop(opts = {})
         baresip_obj = opts[:baresip_obj]
-        session_thread = baresip_obj[:session_thread]
         screen_session = baresip_obj[:screen_session]
 
-        flush_session_data
-
-        session_thread.terminate
-
         puts "STOPPING #{baresip_obj[:screen_session]}"
         cmd_resp = baresip_exec(
           baresip_obj: baresip_obj,
@@ -509,24 +459,23 @@ module PWN
           print "#{seconds_to_record}s to record - remaining: #{format('%-9.9s', countdown)}"
           print "\r"
 
-          # TODO: Fix known issue - if remote terminates call early
-          # all calls in thread pool will be stopped prematurely :-/
-          # This likely has something to do w/ data scoping issues in dump_session_data
+          dump_session_data = File.readlines(screenlog_path)
+          dump_session_data.delete_if do |line|
+            line.include?('ua: using best effort AF: af=AF_INET')
+          end
+
           if dump_session_data.select { |s| s.include?(terminated) }.length.positive?
             reason = 'call terminated by other party'
-            flush_session_data
             break
           end
 
           if dump_session_data.select { |s| s.include?(unavail) }.length.positive?
             reason = 'SIP 503 (service unavailable)'
-            flush_session_data
             break
           end
 
           if dump_session_data.select { |s| s.include?(not_found) }.length.positive?
             reason = 'SIP 404 (not found)'
-            flush_session_data
             break
           end
 
@@ -720,8 +669,6 @@ module PWN
             screen_session: 'Optional name of screen session (Defaults baresip)'
           )
 
-          session_data_arr = #{self}.dump_session_data
-
           cmd_resp = #{self}.baresip_exec(
             baresip_obj: 'Required - baresip obj returned from #start method',
             cmd: 'Required - command to send to baresip HTTP daemon'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.553'
+  VERSION = '0.4.556'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.553
+  version: 0.4.556
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-10-13 00:00:00.000000000 Z
+date: 2022-10-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.23
+        version: 2.3.24
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.3.23
+        version: 2.3.24
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -450,14 +450,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.8
+        version: 1.13.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.13.8
+        version: 1.13.9
 - !ruby/object:Gem::Dependency
   name: oily_png
   requirement: !ruby/object:Gem::Requirement
@@ -688,14 +688,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.36.0
+        version: 1.37.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.36.0
+        version: 1.37.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -842,14 +842,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.1.0
+        version: 2.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.1.0
+        version: 2.0.0
 - !ruby/object:Gem::Dependency
   name: socksify
   requirement: !ruby/object:Gem::Requirement
@@ -2032,7 +2032,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.23
+rubygems_version: 3.3.24
 signing_key:
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond