pwn 0.4.562 → 0.4.565

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f252259d718c00f89c51573750cb300cc1a020810936cd1693e67ce29eeca7c8
-  data.tar.gz: 106025f0c0d06e671908d551001f7b321916194875970ec6028ba3869a95c5f5
+  metadata.gz: 7628c99b9233f9d0432a2aecb486056b9f54bbd47d418a56dd28673a76b7e5cb
+  data.tar.gz: d7317d4f68e4a2c954b663ea4e953866237a0a7c2a1a4ed1f449f553ef9d64c2
 SHA512:
-  metadata.gz: 054f8cef077f38baf2fd3fa5cd84a31481c3153f896432ed606e2e1505e8801bf436629e83a567b4b40cc6aec3406cdca6c7453b980b8b79323d975bc28c9f38
-  data.tar.gz: 68585e9e5fcc901ff52db929527aed6ac4391d603762212c98f735cabbadd5b114e20dc670a73a6570f605fe608eadf7b0850ef5e6a6771dba8816dbafbaf4f2
+  metadata.gz: ef9ec95c5312a57a08d85f84d726a0a4eaf6cb1a163fa7eb3d9b963ad4f4f7a677c39b302de4133fc344779ebcbdbdf5fd3847635a96581585feaf8e7664fb0b
+  data.tar.gz: 932abad9c6e2610b2fe2a990dfba0122316a5ff1b3c07ae137408fe4a47911cea81a19a97a9d1e9c71097ea936110789029043bed6abf8fd5b11cf50110b74b0

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.562]:001 >>> PWN.help
+pwn[v0.4.565]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.562]:001 >>> PWN.help
+pwn[v0.4.565]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_fuzz_net_app_proto

@@ -78,7 +78,7 @@ if opts.empty?
 end
 
 pwn_provider = 'ruby-gem'
-pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
 
 dir_path = opts[:dir_path].to_s.scrub
 target = opts[:target]

data/bin/pwn_phone

@@ -62,7 +62,7 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
   $stdout.sync = true
 
   # Required Flag Variables

data/bin/pwn_sast

@@ -47,7 +47,7 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
 
   green = "\e[32m"
   end_of_color = "\e[0m"

data/bin/pwn_www_uri_buster

@@ -21,10 +21,6 @@ OptionParser.new do |options|
     opts[:wordlist] = w
   end
 
-  options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
-    opts[:http_request_headers] = h
-  end
-
   options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
     opts[:proxy] = p
   end
@@ -33,6 +29,14 @@ OptionParser.new do |options|
     opts[:max_threads] = t
   end
 
+  options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
+    opts[:http_request_headers] = h
+  end
+
+  options.on('-cCODES', '--only-report-response-codes=CODES', '<Optional - Comma-Delimited List of Response Codes to Only Include in Report)>') do |c|
+    opts[:http_response_codes] = c
+  end
+
   options.on('-dDIR', '--dir-path=DIR', '<Optional - Report Output Directory (Defaults to ".")>') do |w|
     opts[:wordlist] = w
   end
@@ -53,8 +57,8 @@ end
 
 def request_path(opts = {})
   target_url = opts[:target_url]
-  http_request_headers = opts[:http_request_headers]
   proxy = opts[:proxy]
+  http_request_headers = opts[:http_request_headers]
   wordlist_line = opts[:wordlist_line]
   http_method = opts[:http_method]
 
@@ -123,7 +127,7 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
   $stdout.sync = true
 
   target_url = opts[:target_url]
@@ -132,13 +136,15 @@ begin
   wordlist = opts[:wordlist]
   raise "ERROR: #{wordlist} Does Not Exist." unless File.exist?(wordlist)
 
-  http_request_headers = opts[:http_request_headers]
-
   proxy = opts[:proxy]
 
   max_threads = opts[:max_threads]
   max_threads ||= 100
 
+  http_request_headers = opts[:http_request_headers]
+  http_response_codes = opts[:http_response_codes]
+  http_response_codes = http_response_codes.delete("\s").split(',') if http_response_codes
+
   dir_path = opts[:dir_path]
   dir_path ||= '.'
 
@@ -169,14 +175,19 @@ begin
     http_methods.each do |http_method|
       rest_client_resp_hash = request_path(
         target_url: target_url,
-        http_request_headers: http_request_headers,
         proxy: proxy,
+        http_request_headers: http_request_headers,
         wordlist_line: wordlist_line,
         http_method: http_method
       )
 
       mutex.synchronize do
-        results_hash[:data].push(rest_client_resp_hash)
+        if http_response_codes.any?
+          ret_http_resp_code = rest_client_resp_hash[:http_resp_code]
+          results_hash[:data].push(rest_client_resp_hash) if http_response_codes.include?(ret_http_resp_code)
+        else
+          results_hash[:data].push(rest_client_resp_hash)
+        end
       end
     end
   end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.562'
+  VERSION = '0.4.565'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.562
+  version: 0.4.565
 platform: ruby
 authors:
 - 0day Inc.