pwn 0.4.571 → 0.4.573
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +3 -3
- data/README.md +2 -2
- data/lib/pwn/plugins/burp_suite.rb +7 -3
- data/lib/pwn/plugins/nmap_it.rb +4 -3
- data/lib/pwn/version.rb +1 -1
- data/packer/provisioners/pwn.sh +7 -0
- data/packer/provisioners/ruby.sh +1 -2
- data/packer/provisioners/rvm.sh +2 -1
- metadata +8 -8
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 3fe744f8009abe973548a7a25bb7dd3dfba3b2e2a8003ded871d00a709488dee
|
4
|
+
data.tar.gz: 6dfb03841d6f805b272c8c82cfddac8384ac6ea144eec1f0614c77a276860f00
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 0b4b30e32dcc0510fb40691f612935dad4b640ab7b843db85cc3aed6d91fa3b91f6133b76df074fb4435c8979c8fe6a53b8939b722ce55e566cc062ef1b4c6fd
|
7
|
+
data.tar.gz: 3073d23d062871624d5f170f005c4aa9564382253f0ea9a35ab20fbf50df4f3c17a5f3b6854c19baf14a586f8a4438d9f26285b9bc5e741fa11d6d8c2ce21c3c
|
data/Gemfile
CHANGED
@@ -60,17 +60,17 @@ gem 'rex', '2.0.13'
|
|
60
60
|
gem 'rmagick', '5.0.0'
|
61
61
|
gem 'rspec', '3.12.0'
|
62
62
|
gem 'rtesseract', '3.1.2'
|
63
|
-
gem 'rubocop', '1.
|
63
|
+
gem 'rubocop', '1.39.0'
|
64
64
|
gem 'rubocop-rake', '0.6.0'
|
65
65
|
gem 'rubocop-rspec', '2.15.0'
|
66
66
|
gem 'ruby-audio', '1.6.1'
|
67
|
-
gem 'ruby-nmap', '0.
|
67
|
+
gem 'ruby-nmap', '1.0.0'
|
68
68
|
gem 'ruby-saml', '1.14.0'
|
69
69
|
gem 'rvm', '1.11.3.9'
|
70
70
|
gem 'savon', '2.13.1'
|
71
71
|
gem 'selenium-devtools', '0.107.0'
|
72
72
|
gem 'serialport', '1.3.2'
|
73
|
-
gem 'sinatra', '3.0.
|
73
|
+
gem 'sinatra', '3.0.3'
|
74
74
|
gem 'slack-ruby-client', '2.0.0'
|
75
75
|
gem 'socksify', '1.7.1'
|
76
76
|
gem 'spreadsheet', '1.3.0'
|
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
37
37
|
$ rvm list gemsets
|
38
38
|
$ gem install --verbose pwn
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.573]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.573]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
|
@@ -245,9 +245,13 @@ module PWN
|
|
245
245
|
end
|
246
246
|
|
247
247
|
report_url = Base64.strict_encode64(target_domain)
|
248
|
-
# Ready scanreport API call in burpbuddy to support
|
249
|
-
report_resp = rest_browser.get(
|
250
|
-
#
|
248
|
+
# Ready scanreport API call in burpbuddy to support HTML & XML report generation
|
249
|
+
# report_resp = rest_browser.get(
|
250
|
+
# "http://#{burpbuddy_api}/scanreport/#{report_type.to_s.upcase}/#{report_url}"
|
251
|
+
# )
|
252
|
+
report_resp = rest_browser.get(
|
253
|
+
"http://#{burpbuddy_api}/scanreport/#{report_url}"
|
254
|
+
)
|
251
255
|
File.open(output_path, 'w') do |f|
|
252
256
|
f.puts(report_resp.body)
|
253
257
|
end
|
data/lib/pwn/plugins/nmap_it.rb
CHANGED
@@ -1,6 +1,7 @@
|
|
1
1
|
# frozen_string_literal: true
|
2
2
|
|
3
|
-
require 'nmap'
|
3
|
+
require 'nmap/command'
|
4
|
+
require 'nmap/xml'
|
4
5
|
|
5
6
|
module PWN
|
6
7
|
module Plugins
|
@@ -12,7 +13,7 @@ module PWN
|
|
12
13
|
# end
|
13
14
|
|
14
15
|
public_class_method def self.port_scan
|
15
|
-
Nmap::
|
16
|
+
Nmap::Command.sudo do |nmap|
|
16
17
|
yield(nmap)
|
17
18
|
end
|
18
19
|
rescue StandardError => e
|
@@ -43,7 +44,7 @@ module PWN
|
|
43
44
|
public_class_method def self.parse_xml_results(opts = {})
|
44
45
|
xml_file = opts[:xml_file].to_s.scrub.strip.chomp if File.exist?(opts[:xml_file].to_s.scrub.strip.chomp)
|
45
46
|
|
46
|
-
Nmap::XML.
|
47
|
+
Nmap::XML.open(xml_file) do |xml|
|
47
48
|
yield(xml)
|
48
49
|
end
|
49
50
|
rescue StandardError => e
|
data/lib/pwn/version.rb
CHANGED
data/packer/provisioners/pwn.sh
CHANGED
@@ -22,6 +22,9 @@ case $os in
|
|
22
22
|
echo "Installing fontconfig..."
|
23
23
|
sudo port -N install fontconfig
|
24
24
|
|
25
|
+
echo "Installing cmatrix..."
|
26
|
+
sudo port -N install cmatrix
|
27
|
+
|
25
28
|
echo 'Installing Postgres Libraries for pg gem...'
|
26
29
|
sudo port -N install postgresql96-server
|
27
30
|
|
@@ -49,6 +52,10 @@ case $os in
|
|
49
52
|
$screen_cmd "${apt} install -y fontconfig ${assess_update_errors}"
|
50
53
|
grok_error
|
51
54
|
|
55
|
+
echo "Installing fontmatrix..."
|
56
|
+
$screen_cmd "${apt} install -y fontmatrix ${assess_update_errors}"
|
57
|
+
grok_error
|
58
|
+
|
52
59
|
echo "Installing Postgres Libraries for pg gem..."
|
53
60
|
$screen_cmd "${apt} install -y postgresql-server-dev-all ${assess_update_errors}"
|
54
61
|
grok_error
|
data/packer/provisioners/ruby.sh
CHANGED
@@ -32,5 +32,4 @@ esac
|
|
32
32
|
sudo /bin/bash --login -c "git clone https://github.com/0dayinc/pwn.git ${pwn_root}"
|
33
33
|
|
34
34
|
ruby_version=`cat ${pwn_root}/.ruby-version`
|
35
|
-
|
36
|
-
sudo /bin/bash --login -c "source /etc/profile.d/rvm.sh && rvm install ruby-${ruby_version}"
|
35
|
+
rvmsudo rvm install ruby-$ruby_version
|
data/packer/provisioners/rvm.sh
CHANGED
@@ -27,4 +27,5 @@ sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-f
|
|
27
27
|
sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key2}"
|
28
28
|
|
29
29
|
# Multi-user install required due to the need to run MSFRPCD as root w/in metasploit gemset
|
30
|
-
curl -sSL https://get.rvm.io | sudo bash -s
|
30
|
+
curl -sSL https://get.rvm.io | sudo bash -s stable
|
31
|
+
rvm reload
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: pwn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.4.
|
4
|
+
version: 0.4.573
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- 0day Inc.
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-11-
|
11
|
+
date: 2022-11-14 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -688,14 +688,14 @@ dependencies:
|
|
688
688
|
requirements:
|
689
689
|
- - '='
|
690
690
|
- !ruby/object:Gem::Version
|
691
|
-
version: 1.
|
691
|
+
version: 1.39.0
|
692
692
|
type: :runtime
|
693
693
|
prerelease: false
|
694
694
|
version_requirements: !ruby/object:Gem::Requirement
|
695
695
|
requirements:
|
696
696
|
- - '='
|
697
697
|
- !ruby/object:Gem::Version
|
698
|
-
version: 1.
|
698
|
+
version: 1.39.0
|
699
699
|
- !ruby/object:Gem::Dependency
|
700
700
|
name: rubocop-rake
|
701
701
|
requirement: !ruby/object:Gem::Requirement
|
@@ -744,14 +744,14 @@ dependencies:
|
|
744
744
|
requirements:
|
745
745
|
- - '='
|
746
746
|
- !ruby/object:Gem::Version
|
747
|
-
version: 0.
|
747
|
+
version: 1.0.0
|
748
748
|
type: :runtime
|
749
749
|
prerelease: false
|
750
750
|
version_requirements: !ruby/object:Gem::Requirement
|
751
751
|
requirements:
|
752
752
|
- - '='
|
753
753
|
- !ruby/object:Gem::Version
|
754
|
-
version: 0.
|
754
|
+
version: 1.0.0
|
755
755
|
- !ruby/object:Gem::Dependency
|
756
756
|
name: ruby-saml
|
757
757
|
requirement: !ruby/object:Gem::Requirement
|
@@ -828,14 +828,14 @@ dependencies:
|
|
828
828
|
requirements:
|
829
829
|
- - '='
|
830
830
|
- !ruby/object:Gem::Version
|
831
|
-
version: 3.0.
|
831
|
+
version: 3.0.3
|
832
832
|
type: :runtime
|
833
833
|
prerelease: false
|
834
834
|
version_requirements: !ruby/object:Gem::Requirement
|
835
835
|
requirements:
|
836
836
|
- - '='
|
837
837
|
- !ruby/object:Gem::Version
|
838
|
-
version: 3.0.
|
838
|
+
version: 3.0.3
|
839
839
|
- !ruby/object:Gem::Dependency
|
840
840
|
name: slack-ruby-client
|
841
841
|
requirement: !ruby/object:Gem::Requirement
|