pwn 0.4.594 → 0.4.595
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- metadata +8 -996
- data/.github/FUNDING.yml +0 -1
- data/.github/ISSUE_TEMPLATE/bug_report.md +0 -38
- data/.gitignore +0 -62
- data/.rubocop.yml +0 -14
- data/.rubocop_todo.yml +0 -117
- data/.ruby-gemset +0 -1
- data/.ruby-version +0 -1
- data/.travis.yml +0 -24
- data/CHANGELOG_BETWEEN_TAGS.txt +0 -108
- data/CODE_OF_CONDUCT.md +0 -46
- data/CONTRIBUTING.md +0 -10
- data/Gemfile +0 -86
- data/LICENSE.txt +0 -22
- data/README.md +0 -84
- data/Rakefile +0 -20
- data/Vagrantfile +0 -250
- data/bin/pwn +0 -101
- data/bin/pwn_android_war_dialer +0 -161
- data/bin/pwn_arachni +0 -157
- data/bin/pwn_arachni_rest +0 -174
- data/bin/pwn_autoinc_version +0 -58
- data/bin/pwn_aws_describe_resources +0 -728
- data/bin/pwn_burp_suite_pro_active_scan +0 -113
- data/bin/pwn_char_base64_encoding +0 -24
- data/bin/pwn_char_dec_encoding +0 -23
- data/bin/pwn_char_hex_escaped_encoding +0 -26
- data/bin/pwn_char_html_entity_encoding +0 -24
- data/bin/pwn_char_unicode_escaped_encoding +0 -23
- data/bin/pwn_char_url_encoding +0 -24
- data/bin/pwn_defectdojo_engagement_create +0 -158
- data/bin/pwn_defectdojo_importscan +0 -104
- data/bin/pwn_defectdojo_reimportscan +0 -104
- data/bin/pwn_domain_reversewhois +0 -89
- data/bin/pwn_fuzz_net_app_proto +0 -160
- data/bin/pwn_ibm_appscan_enterprise +0 -112
- data/bin/pwn_jenkins_create_job +0 -68
- data/bin/pwn_jenkins_create_view +0 -68
- data/bin/pwn_jenkins_install_plugin +0 -91
- data/bin/pwn_jenkins_thinBackup_aws_s3 +0 -123
- data/bin/pwn_jenkins_update_plugins +0 -87
- data/bin/pwn_jenkins_useradd +0 -86
- data/bin/pwn_mail_agent +0 -127
- data/bin/pwn_msf_postgres_login +0 -28
- data/bin/pwn_nessus_cloud_scan_crud +0 -345
- data/bin/pwn_nessus_cloud_vulnscan +0 -99
- data/bin/pwn_nexpose +0 -52
- data/bin/pwn_openvas_vulnscan +0 -102
- data/bin/pwn_owasp_zap_active_scan +0 -134
- data/bin/pwn_pastebin_sample_filter +0 -61
- data/bin/pwn_perimeter_recon +0 -326
- data/bin/pwn_phone +0 -131
- data/bin/pwn_sast +0 -183
- data/bin/pwn_serial_check_voicemail +0 -66
- data/bin/pwn_serial_msr206 +0 -175
- data/bin/pwn_serial_qualcomm_commands +0 -16
- data/bin/pwn_serial_son_micro_sm132_rfid +0 -132
- data/bin/pwn_shodan_search +0 -79
- data/bin/pwn_simple_http_server +0 -57
- data/bin/pwn_web_cache_deception +0 -233
- data/bin/pwn_www_checkip +0 -62
- data/bin/pwn_www_uri_buster +0 -237
- data/bin/pwn_xss_dom_vectors +0 -169
- data/build_pwn_gem.sh +0 -29
- data/documentation/PWN.png +0 -0
- data/documentation/PWN_Contributors_and_Users.png +0 -0
- data/documentation/fax-spectrogram.png +0 -0
- data/documentation/fax-waveform.png +0 -0
- data/documentation/pwn_android_war_dialer_session.png +0 -0
- data/documentation/pwn_install.png +0 -0
- data/documentation/pwn_wallpaper.jpg +0 -0
- data/documentation/ringing-spectrogram.png +0 -0
- data/documentation/ringing-waveform.png +0 -0
- data/etc/systemd/msfrpcd.service +0 -12
- data/etc/systemd/openvas.service +0 -14
- data/etc/userland/aws/apache2/jenkins_443.conf +0 -90
- data/etc/userland/aws/apache2/jenkins_80.conf +0 -7
- data/etc/userland/aws/apache2/openvas_443.conf +0 -87
- data/etc/userland/aws/apache2/openvas_80.conf +0 -7
- data/etc/userland/aws/apache2/sast_443.conf +0 -87
- data/etc/userland/aws/apache2/sast_80.conf +0 -9
- data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/aws/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/aws/jenkins/jenkins +0 -81
- data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/aws/vagrant.yaml.EXAMPLE +0 -35
- data/etc/userland/docker/apache2/jenkins_443.conf +0 -90
- data/etc/userland/docker/apache2/jenkins_80.conf +0 -7
- data/etc/userland/docker/apache2/openvas_443.conf +0 -87
- data/etc/userland/docker/apache2/openvas_80.conf +0 -7
- data/etc/userland/docker/apache2/sast_443.conf +0 -87
- data/etc/userland/docker/apache2/sast_80.conf +0 -9
- data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/docker/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/docker/jenkins/jenkins +0 -81
- data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/qemu/apache2/jenkins_443.conf +0 -90
- data/etc/userland/qemu/apache2/jenkins_80.conf +0 -7
- data/etc/userland/qemu/apache2/openvas_443.conf +0 -87
- data/etc/userland/qemu/apache2/openvas_80.conf +0 -7
- data/etc/userland/qemu/apache2/sast_443.conf +0 -87
- data/etc/userland/qemu/apache2/sast_80.conf +0 -9
- data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/qemu/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/qemu/jenkins/jenkins +0 -81
- data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/ruby-gem/apache2/jenkins_443.conf +0 -90
- data/etc/userland/ruby-gem/apache2/jenkins_80.conf +0 -7
- data/etc/userland/ruby-gem/apache2/openvas_443.conf +0 -87
- data/etc/userland/ruby-gem/apache2/openvas_80.conf +0 -7
- data/etc/userland/ruby-gem/apache2/sast_443.conf +0 -87
- data/etc/userland/ruby-gem/apache2/sast_80.conf +0 -9
- data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/ruby-gem/jenkins/jenkins +0 -81
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/virtualbox/apache2/jenkins_443.conf +0 -90
- data/etc/userland/virtualbox/apache2/jenkins_80.conf +0 -7
- data/etc/userland/virtualbox/apache2/openvas_443.conf +0 -87
- data/etc/userland/virtualbox/apache2/openvas_80.conf +0 -7
- data/etc/userland/virtualbox/apache2/sast_443.conf +0 -87
- data/etc/userland/virtualbox/apache2/sast_80.conf +0 -9
- data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/virtualbox/jenkins/jenkins +0 -81
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/vmware/apache2/jenkins_443.conf +0 -90
- data/etc/userland/vmware/apache2/jenkins_80.conf +0 -7
- data/etc/userland/vmware/apache2/openvas_443.conf +0 -87
- data/etc/userland/vmware/apache2/openvas_80.conf +0 -7
- data/etc/userland/vmware/apache2/sast_443.conf +0 -87
- data/etc/userland/vmware/apache2/sast_80.conf +0 -9
- data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/vmware/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/vmware/jenkins/jenkins +0 -81
- data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/vmware/vagrant.yaml.EXAMPLE +0 -5
- data/find_latest_gem_versions_per_Gemfile.sh +0 -11
- data/git_commit_test_reinit_gem.sh +0 -37
- data/install.sh +0 -176
- data/lib/pwn/aws/acm.rb +0 -92
- data/lib/pwn/aws/api_gateway.rb +0 -92
- data/lib/pwn/aws/app_stream.rb +0 -92
- data/lib/pwn/aws/application_auto_scaling.rb +0 -92
- data/lib/pwn/aws/application_discovery_service.rb +0 -92
- data/lib/pwn/aws/auto_scaling.rb +0 -92
- data/lib/pwn/aws/batch.rb +0 -92
- data/lib/pwn/aws/budgets.rb +0 -92
- data/lib/pwn/aws/cloud_formation.rb +0 -92
- data/lib/pwn/aws/cloud_front.rb +0 -92
- data/lib/pwn/aws/cloud_hsm.rb +0 -92
- data/lib/pwn/aws/cloud_search.rb +0 -92
- data/lib/pwn/aws/cloud_search_domain.rb +0 -92
- data/lib/pwn/aws/cloud_trail.rb +0 -92
- data/lib/pwn/aws/cloud_watch.rb +0 -92
- data/lib/pwn/aws/cloud_watch_events.rb +0 -92
- data/lib/pwn/aws/cloud_watch_logs.rb +0 -92
- data/lib/pwn/aws/code_build.rb +0 -92
- data/lib/pwn/aws/code_commit.rb +0 -92
- data/lib/pwn/aws/code_deploy.rb +0 -92
- data/lib/pwn/aws/code_pipeline.rb +0 -92
- data/lib/pwn/aws/cognito_identity.rb +0 -92
- data/lib/pwn/aws/cognito_identity_provider.rb +0 -92
- data/lib/pwn/aws/cognito_sync.rb +0 -92
- data/lib/pwn/aws/config_service.rb +0 -92
- data/lib/pwn/aws/data_pipleline.rb +0 -92
- data/lib/pwn/aws/database_migration_service.rb +0 -92
- data/lib/pwn/aws/device_farm.rb +0 -92
- data/lib/pwn/aws/direct_connect.rb +0 -92
- data/lib/pwn/aws/directory_service.rb +0 -92
- data/lib/pwn/aws/dynamo_db.rb +0 -92
- data/lib/pwn/aws/dynamo_db_streams.rb +0 -92
- data/lib/pwn/aws/ec2.rb +0 -92
- data/lib/pwn/aws/ecr.rb +0 -92
- data/lib/pwn/aws/ecs.rb +0 -92
- data/lib/pwn/aws/efs.rb +0 -92
- data/lib/pwn/aws/elasti_cache.rb +0 -92
- data/lib/pwn/aws/elastic_beanstalk.rb +0 -89
- data/lib/pwn/aws/elastic_load_balancing.rb +0 -92
- data/lib/pwn/aws/elastic_load_balancing_v2.rb +0 -92
- data/lib/pwn/aws/elastic_transcoder.rb +0 -92
- data/lib/pwn/aws/elasticsearch_service.rb +0 -92
- data/lib/pwn/aws/emr.rb +0 -92
- data/lib/pwn/aws/firehose.rb +0 -92
- data/lib/pwn/aws/game_lift.rb +0 -92
- data/lib/pwn/aws/glacier.rb +0 -92
- data/lib/pwn/aws/health.rb +0 -92
- data/lib/pwn/aws/iam.rb +0 -92
- data/lib/pwn/aws/import_export.rb +0 -92
- data/lib/pwn/aws/inspector.rb +0 -92
- data/lib/pwn/aws/iot.rb +0 -92
- data/lib/pwn/aws/iot_data_plane.rb +0 -92
- data/lib/pwn/aws/kinesis.rb +0 -92
- data/lib/pwn/aws/kinesis_analytics.rb +0 -92
- data/lib/pwn/aws/kms.rb +0 -92
- data/lib/pwn/aws/lambda.rb +0 -92
- data/lib/pwn/aws/lambda_preview.rb +0 -92
- data/lib/pwn/aws/lex.rb +0 -92
- data/lib/pwn/aws/lightsail.rb +0 -92
- data/lib/pwn/aws/machine_learning.rb +0 -92
- data/lib/pwn/aws/marketplace_commerce_analytics.rb +0 -92
- data/lib/pwn/aws/marketplace_metering.rb +0 -92
- data/lib/pwn/aws/ops_works.rb +0 -92
- data/lib/pwn/aws/ops_works_cm.rb +0 -92
- data/lib/pwn/aws/pinpoint.rb +0 -92
- data/lib/pwn/aws/polly.rb +0 -92
- data/lib/pwn/aws/rds.rb +0 -92
- data/lib/pwn/aws/redshift.rb +0 -92
- data/lib/pwn/aws/rekognition.rb +0 -92
- data/lib/pwn/aws/route53.rb +0 -92
- data/lib/pwn/aws/route53_domains.rb +0 -92
- data/lib/pwn/aws/s3.rb +0 -92
- data/lib/pwn/aws/service_catalog.rb +0 -92
- data/lib/pwn/aws/ses.rb +0 -92
- data/lib/pwn/aws/shield.rb +0 -92
- data/lib/pwn/aws/simple_db.rb +0 -92
- data/lib/pwn/aws/sms.rb +0 -92
- data/lib/pwn/aws/snowball.rb +0 -92
- data/lib/pwn/aws/sns.rb +0 -92
- data/lib/pwn/aws/sqs.rb +0 -92
- data/lib/pwn/aws/ssm.rb +0 -92
- data/lib/pwn/aws/states.rb +0 -92
- data/lib/pwn/aws/storage_gateway.rb +0 -92
- data/lib/pwn/aws/sts.rb +0 -63
- data/lib/pwn/aws/support.rb +0 -92
- data/lib/pwn/aws/swf.rb +0 -92
- data/lib/pwn/aws/waf.rb +0 -92
- data/lib/pwn/aws/waf_regional.rb +0 -92
- data/lib/pwn/aws/workspaces.rb +0 -92
- data/lib/pwn/aws/x_ray.rb +0 -92
- data/lib/pwn/aws.rb +0 -105
- data/lib/pwn/banner/bubble.rb +0 -42
- data/lib/pwn/banner/matrix.rb +0 -199
- data/lib/pwn/banner/ninja.rb +0 -54
- data/lib/pwn/banner/off_the_air.rb +0 -73
- data/lib/pwn/banner/pirate.rb +0 -62
- data/lib/pwn/banner.rb +0 -78
- data/lib/pwn/ffi.rb +0 -16
- data/lib/pwn/plugins/android.rb +0 -1616
- data/lib/pwn/plugins/ansible_vault.rb +0 -75
- data/lib/pwn/plugins/authentication_helper.rb +0 -79
- data/lib/pwn/plugins/baresip.rb +0 -704
- data/lib/pwn/plugins/basic_auth.rb +0 -63
- data/lib/pwn/plugins/beef.rb +0 -309
- data/lib/pwn/plugins/burp_suite.rb +0 -344
- data/lib/pwn/plugins/bus_pirate.rb +0 -148
- data/lib/pwn/plugins/char.rb +0 -459
- data/lib/pwn/plugins/credit_card.rb +0 -68
- data/lib/pwn/plugins/dao_ldap.rb +0 -131
- data/lib/pwn/plugins/dao_mongo.rb +0 -96
- data/lib/pwn/plugins/dao_postgres.rb +0 -224
- data/lib/pwn/plugins/dao_sqlite3.rb +0 -125
- data/lib/pwn/plugins/defect_dojo.rb +0 -759
- data/lib/pwn/plugins/detect_os.rb +0 -40
- data/lib/pwn/plugins/ein.rb +0 -141
- data/lib/pwn/plugins/file_fu.rb +0 -73
- data/lib/pwn/plugins/fuzz.rb +0 -206
- data/lib/pwn/plugins/git.rb +0 -166
- data/lib/pwn/plugins/github.rb +0 -136
- data/lib/pwn/plugins/hacker_one.rb +0 -152
- data/lib/pwn/plugins/http_intercept_helper.rb +0 -122
- data/lib/pwn/plugins/ibm_appscan.rb +0 -927
- data/lib/pwn/plugins/ip_info.rb +0 -100
- data/lib/pwn/plugins/jenkins.rb +0 -545
- data/lib/pwn/plugins/json_pathify.rb +0 -46
- data/lib/pwn/plugins/mail_agent.rb +0 -344
- data/lib/pwn/plugins/metasploit.rb +0 -151
- data/lib/pwn/plugins/msr206.rb +0 -1193
- data/lib/pwn/plugins/nessus_cloud.rb +0 -840
- data/lib/pwn/plugins/nexpose_vuln_scan.rb +0 -356
- data/lib/pwn/plugins/nmap_it.rb +0 -100
- data/lib/pwn/plugins/oauth2.rb +0 -67
- data/lib/pwn/plugins/ocr.rb +0 -43
- data/lib/pwn/plugins/open_ai.rb +0 -239
- data/lib/pwn/plugins/openvas.rb +0 -308
- data/lib/pwn/plugins/owasp_zap.rb +0 -550
- data/lib/pwn/plugins/packet.rb +0 -1313
- data/lib/pwn/plugins/pdf_parse.rb +0 -53
- data/lib/pwn/plugins/pony.rb +0 -282
- data/lib/pwn/plugins/pwn_logger.rb +0 -46
- data/lib/pwn/plugins/rabbit_mq.rb +0 -70
- data/lib/pwn/plugins/rfidler.rb +0 -56
- data/lib/pwn/plugins/serial.rb +0 -315
- data/lib/pwn/plugins/shodan.rb +0 -566
- data/lib/pwn/plugins/slack_client.rb +0 -104
- data/lib/pwn/plugins/sock.rb +0 -188
- data/lib/pwn/plugins/son_micro_rfid.rb +0 -504
- data/lib/pwn/plugins/spider.rb +0 -80
- data/lib/pwn/plugins/ssn.rb +0 -52
- data/lib/pwn/plugins/thread_pool.rb +0 -88
- data/lib/pwn/plugins/transparent_browser.rb +0 -423
- data/lib/pwn/plugins/twitter_api.rb +0 -148
- data/lib/pwn/plugins/uri_scheme.rb +0 -328
- data/lib/pwn/plugins/vsphere.rb +0 -82
- data/lib/pwn/plugins.rb +0 -70
- data/lib/pwn/reports/fuzz.rb +0 -272
- data/lib/pwn/reports/phone.rb +0 -312
- data/lib/pwn/reports/sast.rb +0 -311
- data/lib/pwn/reports/uri_buster.rb +0 -248
- data/lib/pwn/reports.rb +0 -23
- data/lib/pwn/sast/amqp_connect_as_guest.rb +0 -143
- data/lib/pwn/sast/apache_file_system_util_api.rb +0 -144
- data/lib/pwn/sast/aws.rb +0 -145
- data/lib/pwn/sast/banned_function_calls_c.rb +0 -272
- data/lib/pwn/sast/base64.rb +0 -143
- data/lib/pwn/sast/beef_hook.rb +0 -143
- data/lib/pwn/sast/cmd_execution_java.rb +0 -145
- data/lib/pwn/sast/cmd_execution_python.rb +0 -147
- data/lib/pwn/sast/cmd_execution_ruby.rb +0 -155
- data/lib/pwn/sast/cmd_execution_scala.rb +0 -145
- data/lib/pwn/sast/csrf.rb +0 -142
- data/lib/pwn/sast/deserial_java.rb +0 -150
- data/lib/pwn/sast/emoticon.rb +0 -151
- data/lib/pwn/sast/eval.rb +0 -144
- data/lib/pwn/sast/factory.rb +0 -145
- data/lib/pwn/sast/http_authorization_header.rb +0 -148
- data/lib/pwn/sast/inner_html.rb +0 -144
- data/lib/pwn/sast/keystore.rb +0 -143
- data/lib/pwn/sast/location_hash.rb +0 -144
- data/lib/pwn/sast/log4j.rb +0 -143
- data/lib/pwn/sast/logger.rb +0 -158
- data/lib/pwn/sast/outer_html.rb +0 -144
- data/lib/pwn/sast/password.rb +0 -143
- data/lib/pwn/sast/php_input_mechanisms.rb +0 -149
- data/lib/pwn/sast/php_type_juggling.rb +0 -144
- data/lib/pwn/sast/pom_version.rb +0 -152
- data/lib/pwn/sast/port.rb +0 -150
- data/lib/pwn/sast/private_key.rb +0 -143
- data/lib/pwn/sast/redirect.rb +0 -145
- data/lib/pwn/sast/redos.rb +0 -150
- data/lib/pwn/sast/shell.rb +0 -151
- data/lib/pwn/sast/signature.rb +0 -143
- data/lib/pwn/sast/sql.rb +0 -147
- data/lib/pwn/sast/ssl.rb +0 -147
- data/lib/pwn/sast/sudo.rb +0 -143
- data/lib/pwn/sast/task_tag.rb +0 -157
- data/lib/pwn/sast/throw_errors.rb +0 -143
- data/lib/pwn/sast/token.rb +0 -145
- data/lib/pwn/sast/version.rb +0 -144
- data/lib/pwn/sast/window_location_hash.rb +0 -143
- data/lib/pwn/sast.rb +0 -56
- data/lib/pwn/version.rb +0 -5
- data/lib/pwn/www/app_cobalt_io.rb +0 -137
- data/lib/pwn/www/bing.rb +0 -89
- data/lib/pwn/www/bug_crowd.rb +0 -134
- data/lib/pwn/www/checkip.rb +0 -71
- data/lib/pwn/www/coinbase_pro.rb +0 -134
- data/lib/pwn/www/duckduckgo.rb +0 -111
- data/lib/pwn/www/facebook.rb +0 -122
- data/lib/pwn/www/google.rb +0 -114
- data/lib/pwn/www/hacker_one.rb +0 -122
- data/lib/pwn/www/linkedin.rb +0 -122
- data/lib/pwn/www/pandora.rb +0 -122
- data/lib/pwn/www/pastebin.rb +0 -84
- data/lib/pwn/www/paypal.rb +0 -204
- data/lib/pwn/www/synack.rb +0 -134
- data/lib/pwn/www/torch.rb +0 -106
- data/lib/pwn/www/trading_view.rb +0 -125
- data/lib/pwn/www/twitter.rb +0 -134
- data/lib/pwn/www/uber.rb +0 -122
- data/lib/pwn/www/upwork.rb +0 -122
- data/lib/pwn/www/youtube.rb +0 -89
- data/lib/pwn/www.rb +0 -35
- data/lib/pwn.rb +0 -25
- data/packer/daemons/msfrpcd.rb +0 -64
- data/packer/daemons/openvas.rb +0 -51
- data/packer/deploy_docker_containers.sh +0 -9
- data/packer/deploy_packer_box.sh +0 -87
- data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +0 -44
- data/packer/docker/kali_rolling_docker_pwn_prototyper.json +0 -48
- data/packer/docker/kali_rolling_docker_pwn_sast.json +0 -44
- data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +0 -46
- data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +0 -34
- data/packer/http/kali_rolling_preseed.cfg +0 -81
- data/packer/kali_rolling_aws_ami.json +0 -137
- data/packer/kali_rolling_qemu_kvm.json +0 -157
- data/packer/kali_rolling_virtualbox.json +0 -184
- data/packer/kali_rolling_vmware.json +0 -165
- data/packer/packer_secrets.json.EXAMPLE +0 -9
- data/packer/provisioners/PayloadsAllTheThings.sh +0 -5
- data/packer/provisioners/SecLists.sh +0 -5
- data/packer/provisioners/afl.sh +0 -28
- data/packer/provisioners/aliases.rb +0 -18
- data/packer/provisioners/amass.sh +0 -5
- data/packer/provisioners/android.sh +0 -18
- data/packer/provisioners/ansible.sh +0 -5
- data/packer/provisioners/apache2.sh +0 -24
- data/packer/provisioners/arachni.sh +0 -28
- data/packer/provisioners/awscli.sh +0 -5
- data/packer/provisioners/bashrc.sh +0 -13
- data/packer/provisioners/beef.rb +0 -23
- data/packer/provisioners/burpsuite.sh +0 -23
- data/packer/provisioners/chrome.sh +0 -11
- data/packer/provisioners/coreutils.sh +0 -6
- data/packer/provisioners/curl.sh +0 -6
- data/packer/provisioners/docker.sh +0 -43
- data/packer/provisioners/docker_bashrc.sh +0 -2
- data/packer/provisioners/docker_rvm.sh +0 -22
- data/packer/provisioners/eyewitness.sh +0 -5
- data/packer/provisioners/ffmpeg.sh +0 -6
- data/packer/provisioners/firefox.sh +0 -7
- data/packer/provisioners/fuzzdb.sh +0 -5
- data/packer/provisioners/gdb.sh +0 -5
- data/packer/provisioners/geckodriver.sh +0 -9
- data/packer/provisioners/ghidra.sh +0 -5
- data/packer/provisioners/git.sh +0 -6
- data/packer/provisioners/init_image.sh +0 -103
- data/packer/provisioners/install_vagrant_ssh_key.sh +0 -15
- data/packer/provisioners/jenkins.sh +0 -62
- data/packer/provisioners/metasploit.rb +0 -59
- data/packer/provisioners/nmap_all_live_hosts.sh +0 -8
- data/packer/provisioners/openvas.sh +0 -23
- data/packer/provisioners/openvas_wrappers.sh +0 -4
- data/packer/provisioners/openvpn.sh +0 -7
- data/packer/provisioners/peda.sh +0 -4
- data/packer/provisioners/phantomjs.rb +0 -28
- data/packer/provisioners/phantomjs_wrapper.sh +0 -22
- data/packer/provisioners/post_install.sh +0 -41
- data/packer/provisioners/postgresql.sh +0 -49
- data/packer/provisioners/preeny.sh +0 -8
- data/packer/provisioners/pwn.sh +0 -100
- data/packer/provisioners/pwntools.sh +0 -13
- data/packer/provisioners/radamsa.sh +0 -7
- data/packer/provisioners/rc.local.sh +0 -16
- data/packer/provisioners/reboot_os.sh +0 -7
- data/packer/provisioners/ruby.sh +0 -35
- data/packer/provisioners/rvm.sh +0 -31
- data/packer/provisioners/scapy.sh +0 -5
- data/packer/provisioners/scout2.sh +0 -5
- data/packer/provisioners/sox.sh +0 -5
- data/packer/provisioners/ssllabs-scan.sh +0 -9
- data/packer/provisioners/strace.sh +0 -5
- data/packer/provisioners/sublist3r.sh +0 -5
- data/packer/provisioners/terminator.sh +0 -5
- data/packer/provisioners/toggle_tor.sh +0 -2
- data/packer/provisioners/tor.sh +0 -5
- data/packer/provisioners/twinkle.sh +0 -6
- data/packer/provisioners/update_os.sh +0 -108
- data/packer/provisioners/upload_globals.sh +0 -63
- data/packer/provisioners/vim.sh +0 -19
- data/packer/provisioners/virtualbox_guest_additions.sh +0 -20
- data/packer/provisioners/vmware_tools.sh +0 -8
- data/packer/provisioners/wpscan.rb +0 -23
- data/packer/provisioners/xrdp.sh +0 -22
- data/packer/provisioners/zzuf.sh +0 -5
- data/pwn.gemspec +0 -55
- data/reinstall_pwn_gemset.sh +0 -27
- data/spec/lib/pwn/aws/acm_spec.rb +0 -15
- data/spec/lib/pwn/aws/api_gateway_spec.rb +0 -15
- data/spec/lib/pwn/aws/app_stream_spec.rb +0 -15
- data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +0 -15
- data/spec/lib/pwn/aws/application_discovery_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/auto_scaling_spec.rb +0 -15
- data/spec/lib/pwn/aws/batch_spec.rb +0 -15
- data/spec/lib/pwn/aws/budgets_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_formation_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_front_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_hsm_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_search_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_trail_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_build_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_commit_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_deploy_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_pipeline_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_identity_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_sync_spec.rb +0 -15
- data/spec/lib/pwn/aws/config_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/data_pipleline_spec.rb +0 -15
- data/spec/lib/pwn/aws/database_migration_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/device_farm_spec.rb +0 -15
- data/spec/lib/pwn/aws/direct_connect_spec.rb +0 -15
- data/spec/lib/pwn/aws/directory_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/dynamo_db_spec.rb +0 -15
- data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +0 -15
- data/spec/lib/pwn/aws/ec2_spec.rb +0 -15
- data/spec/lib/pwn/aws/ecr_spec.rb +0 -15
- data/spec/lib/pwn/aws/ecs_spec.rb +0 -15
- data/spec/lib/pwn/aws/efs_spec.rb +0 -15
- data/spec/lib/pwn/aws/elasti_cache_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +0 -15
- data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/emr_spec.rb +0 -15
- data/spec/lib/pwn/aws/firehose_spec.rb +0 -15
- data/spec/lib/pwn/aws/game_lift_spec.rb +0 -15
- data/spec/lib/pwn/aws/glacier_spec.rb +0 -15
- data/spec/lib/pwn/aws/health_spec.rb +0 -15
- data/spec/lib/pwn/aws/iam_spec.rb +0 -15
- data/spec/lib/pwn/aws/import_export_spec.rb +0 -15
- data/spec/lib/pwn/aws/inspector_spec.rb +0 -15
- data/spec/lib/pwn/aws/iot_data_plane_spec.rb +0 -15
- data/spec/lib/pwn/aws/iot_spec.rb +0 -15
- data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +0 -15
- data/spec/lib/pwn/aws/kinesis_spec.rb +0 -15
- data/spec/lib/pwn/aws/kms_spec.rb +0 -15
- data/spec/lib/pwn/aws/lambda_preview_spec.rb +0 -15
- data/spec/lib/pwn/aws/lambda_spec.rb +0 -15
- data/spec/lib/pwn/aws/lex_spec.rb +0 -15
- data/spec/lib/pwn/aws/lightsail_spec.rb +0 -15
- data/spec/lib/pwn/aws/machine_learning_spec.rb +0 -15
- data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +0 -15
- data/spec/lib/pwn/aws/marketplace_metering_spec.rb +0 -15
- data/spec/lib/pwn/aws/ops_works_cm_spec.rb +0 -15
- data/spec/lib/pwn/aws/ops_works_spec.rb +0 -15
- data/spec/lib/pwn/aws/pinpoint_spec.rb +0 -15
- data/spec/lib/pwn/aws/polly_spec.rb +0 -15
- data/spec/lib/pwn/aws/rds_spec.rb +0 -15
- data/spec/lib/pwn/aws/redshift_spec.rb +0 -15
- data/spec/lib/pwn/aws/rekognition_spec.rb +0 -15
- data/spec/lib/pwn/aws/route53_domains_spec.rb +0 -15
- data/spec/lib/pwn/aws/route53_spec.rb +0 -15
- data/spec/lib/pwn/aws/s3_spec.rb +0 -15
- data/spec/lib/pwn/aws/service_catalog_spec.rb +0 -15
- data/spec/lib/pwn/aws/ses_spec.rb +0 -15
- data/spec/lib/pwn/aws/shield_spec.rb +0 -15
- data/spec/lib/pwn/aws/simple_db_spec.rb +0 -15
- data/spec/lib/pwn/aws/sms_spec.rb +0 -15
- data/spec/lib/pwn/aws/snowball_spec.rb +0 -15
- data/spec/lib/pwn/aws/sns_spec.rb +0 -15
- data/spec/lib/pwn/aws/sqs_spec.rb +0 -15
- data/spec/lib/pwn/aws/ssm_spec.rb +0 -15
- data/spec/lib/pwn/aws/states_spec.rb +0 -15
- data/spec/lib/pwn/aws/storage_gateway_spec.rb +0 -15
- data/spec/lib/pwn/aws/sts_spec.rb +0 -15
- data/spec/lib/pwn/aws/support_spec.rb +0 -15
- data/spec/lib/pwn/aws/swf_spec.rb +0 -15
- data/spec/lib/pwn/aws/waf_regional_spec.rb +0 -15
- data/spec/lib/pwn/aws/waf_spec.rb +0 -15
- data/spec/lib/pwn/aws/workspaces_spec.rb +0 -15
- data/spec/lib/pwn/aws/x_ray_spec.rb +0 -15
- data/spec/lib/pwn/aws_spec.rb +0 -10
- data/spec/lib/pwn/banner/bubble_spec.rb +0 -20
- data/spec/lib/pwn/banner/matrix_spec.rb +0 -20
- data/spec/lib/pwn/banner/ninja_spec.rb +0 -20
- data/spec/lib/pwn/banner/off_the_air_spec.rb +0 -20
- data/spec/lib/pwn/banner/pirate_spec.rb +0 -20
- data/spec/lib/pwn/banner_spec.rb +0 -15
- data/spec/lib/pwn/ffi_spec.rb +0 -10
- data/spec/lib/pwn/plugins/android_spec.rb +0 -15
- data/spec/lib/pwn/plugins/authentication_helper_spec.rb +0 -15
- data/spec/lib/pwn/plugins/basic_auth_spec.rb +0 -15
- data/spec/lib/pwn/plugins/beef_spec.rb +0 -15
- data/spec/lib/pwn/plugins/burp_suite_spec.rb +0 -15
- data/spec/lib/pwn/plugins/bus_pirate_spec.rb +0 -15
- data/spec/lib/pwn/plugins/char_spec.rb +0 -15
- data/spec/lib/pwn/plugins/credit_card_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_ldap_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_mongo_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_postgres_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +0 -15
- data/spec/lib/pwn/plugins/defect_dojo_spec.rb +0 -15
- data/spec/lib/pwn/plugins/detect_os_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ein_spec.rb +0 -15
- data/spec/lib/pwn/plugins/file_fu_spec.rb +0 -15
- data/spec/lib/pwn/plugins/fuzz_spec.rb +0 -15
- data/spec/lib/pwn/plugins/git_spec.rb +0 -15
- data/spec/lib/pwn/plugins/github_spec.rb +0 -15
- data/spec/lib/pwn/plugins/hacker_one_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ibm_appscan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ip_info_spec.rb +0 -15
- data/spec/lib/pwn/plugins/jenkins_spec.rb +0 -15
- data/spec/lib/pwn/plugins/json_pathify_spec.rb +0 -15
- data/spec/lib/pwn/plugins/mail_agent_spec.rb +0 -15
- data/spec/lib/pwn/plugins/metasploit_spec.rb +0 -15
- data/spec/lib/pwn/plugins/msr206_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nmap_it_spec.rb +0 -15
- data/spec/lib/pwn/plugins/oauth2_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ocr_spec.rb +0 -15
- data/spec/lib/pwn/plugins/openvas_spec.rb +0 -15
- data/spec/lib/pwn/plugins/owasp_zap_spec.rb +0 -15
- data/spec/lib/pwn/plugins/packet_spec.rb +0 -15
- data/spec/lib/pwn/plugins/pdf_parse_spec.rb +0 -15
- data/spec/lib/pwn/plugins/pony_spec.rb +0 -15
- data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +0 -15
- data/spec/lib/pwn/plugins/rfidler_spec.rb +0 -15
- data/spec/lib/pwn/plugins/serial_spec.rb +0 -15
- data/spec/lib/pwn/plugins/shodan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/slack_client_spec.rb +0 -15
- data/spec/lib/pwn/plugins/sock_spec.rb +0 -15
- data/spec/lib/pwn/plugins/son_micro_rfid_spec.rb +0 -15
- data/spec/lib/pwn/plugins/spider_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ssn_spec.rb +0 -15
- data/spec/lib/pwn/plugins/thread_pool_spec.rb +0 -15
- data/spec/lib/pwn/plugins/transparent_browser_spec.rb +0 -15
- data/spec/lib/pwn/plugins/twitter_api_spec.rb +0 -15
- data/spec/lib/pwn/plugins/uri_scheme_spec.rb +0 -15
- data/spec/lib/pwn/plugins/vsphere_spec.rb +0 -15
- data/spec/lib/pwn/plugins_spec.rb +0 -10
- data/spec/lib/pwn/reports/fuzz_spec.rb +0 -15
- data/spec/lib/pwn/reports/phone_spec.rb +0 -15
- data/spec/lib/pwn/reports/sast_spec.rb +0 -15
- data/spec/lib/pwn/reports/uri_buster_spec.rb +0 -15
- data/spec/lib/pwn/reports_spec.rb +0 -10
- data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +0 -25
- data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +0 -25
- data/spec/lib/pwn/sast/aws_spec.rb +0 -25
- data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +0 -25
- data/spec/lib/pwn/sast/base64_spec.rb +0 -25
- data/spec/lib/pwn/sast/beef_hook_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +0 -25
- data/spec/lib/pwn/sast/csrf_spec.rb +0 -25
- data/spec/lib/pwn/sast/deserial_java_spec.rb +0 -25
- data/spec/lib/pwn/sast/emoticon_spec.rb +0 -25
- data/spec/lib/pwn/sast/eval_spec.rb +0 -25
- data/spec/lib/pwn/sast/factory_spec.rb +0 -25
- data/spec/lib/pwn/sast/http_authorization_header_spec.rb +0 -25
- data/spec/lib/pwn/sast/inner_html_spec.rb +0 -25
- data/spec/lib/pwn/sast/keystore_spec.rb +0 -25
- data/spec/lib/pwn/sast/location_hash_spec.rb +0 -25
- data/spec/lib/pwn/sast/log4j_spec.rb +0 -25
- data/spec/lib/pwn/sast/logger_spec.rb +0 -25
- data/spec/lib/pwn/sast/password_spec.rb +0 -25
- data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +0 -25
- data/spec/lib/pwn/sast/php_type_juggling_spec.rb +0 -25
- data/spec/lib/pwn/sast/pom_version_spec.rb +0 -25
- data/spec/lib/pwn/sast/port_spec.rb +0 -25
- data/spec/lib/pwn/sast/private_key_spec.rb +0 -25
- data/spec/lib/pwn/sast/redirect_spec.rb +0 -25
- data/spec/lib/pwn/sast/redos_spec.rb +0 -25
- data/spec/lib/pwn/sast/shell_spec.rb +0 -25
- data/spec/lib/pwn/sast/signature_spec.rb +0 -25
- data/spec/lib/pwn/sast/sql_spec.rb +0 -25
- data/spec/lib/pwn/sast/ssl_spec.rb +0 -25
- data/spec/lib/pwn/sast/sudo_spec.rb +0 -25
- data/spec/lib/pwn/sast/task_tag_spec.rb +0 -25
- data/spec/lib/pwn/sast/throw_errors_spec.rb +0 -25
- data/spec/lib/pwn/sast/token_spec.rb +0 -25
- data/spec/lib/pwn/sast/version_spec.rb +0 -25
- data/spec/lib/pwn/sast/window_location_hash_spec.rb +0 -25
- data/spec/lib/pwn/sast_spec.rb +0 -10
- data/spec/lib/pwn/www/app_cobalt_io_spec.rb +0 -15
- data/spec/lib/pwn/www/bing_spec.rb +0 -15
- data/spec/lib/pwn/www/bug_crowd.rb +0 -15
- data/spec/lib/pwn/www/checkip_spec.rb +0 -15
- data/spec/lib/pwn/www/coinbase_pro_spec.rb +0 -15
- data/spec/lib/pwn/www/duckduckgo_spec.rb +0 -15
- data/spec/lib/pwn/www/facebook_spec.rb +0 -15
- data/spec/lib/pwn/www/google_spec.rb +0 -15
- data/spec/lib/pwn/www/hacker_one_spec.rb +0 -15
- data/spec/lib/pwn/www/linkedin_spec.rb +0 -15
- data/spec/lib/pwn/www/pandora_spec.rb +0 -15
- data/spec/lib/pwn/www/pastebin_spec.rb +0 -15
- data/spec/lib/pwn/www/paypal_spec.rb +0 -15
- data/spec/lib/pwn/www/synack_spec.rb +0 -15
- data/spec/lib/pwn/www/torch_spec.rb +0 -15
- data/spec/lib/pwn/www/trading_view_spec.rb +0 -15
- data/spec/lib/pwn/www/twitter_spec.rb +0 -15
- data/spec/lib/pwn/www/uber_spec.rb +0 -15
- data/spec/lib/pwn/www/upwork_spec.rb +0 -15
- data/spec/lib/pwn/www/youtube_spec.rb +0 -15
- data/spec/lib/pwn/www_spec.rb +0 -10
- data/spec/lib/pwn_spec.rb +0 -10
- data/spec/spec_helper.rb +0 -3
- data/third_party/.gitkeep +0 -0
- data/update_pwn.sh +0 -9
- data/upgrade_ruby.sh +0 -42
- data/vagrant/provisioners/apache2.sh +0 -76
- data/vagrant/provisioners/beef.rb +0 -30
- data/vagrant/provisioners/burpsuite_pro.rb +0 -37
- data/vagrant/provisioners/exploit-db.sh +0 -2
- data/vagrant/provisioners/gem.sh +0 -4
- data/vagrant/provisioners/init_env.sh +0 -22
- data/vagrant/provisioners/jenkins.sh +0 -87
- data/vagrant/provisioners/jenkins_ssh-keygen.rb +0 -86
- data/vagrant/provisioners/kali_customize.rb +0 -130
- data/vagrant/provisioners/letsencrypt.rb +0 -35
- data/vagrant/provisioners/metasploit.rb +0 -25
- data/vagrant/provisioners/nmap_all_live_hosts.sh +0 -2
- data/vagrant/provisioners/openvas.sh +0 -23
- data/vagrant/provisioners/openvas_wrappers.sh +0 -2
- data/vagrant/provisioners/post_install.sh +0 -14
- data/vagrant/provisioners/postgres.sh +0 -22
- data/vagrant/provisioners/pwn.sh +0 -15
- data/vagrant/provisioners/rvm.sh +0 -18
- data/vagrant/provisioners/ssllabs-scan.sh +0 -10
- data/vagrant/provisioners/toggle_tor.sh +0 -2
- data/vagrant/provisioners/update_jenkins_plugins.rb +0 -30
- data/vagrant/provisioners/update_os.sh +0 -108
- data/vagrant/provisioners/upload_globals.sh +0 -63
- data/vagrant/provisioners/userland_fdisk.sh +0 -22
- data/vagrant/provisioners/userland_lvm.sh +0 -5
- data/vagrant/provisioners/wpscan.rb +0 -25
- data/vagrant_rsync_third_party.lst +0 -1
- data/vagrant_rsync_userland_template.lst +0 -8
data/bin/pwn_web_cache_deception
DELETED
@@ -1,233 +0,0 @@
|
|
1
|
-
#!/usr/bin/env ruby
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
require 'pwn'
|
5
|
-
require 'optparse'
|
6
|
-
|
7
|
-
opts = {}
|
8
|
-
OptionParser.new do |options|
|
9
|
-
options.banner = "USAGE:
|
10
|
-
#{$PROGRAM_NAME} [opts]
|
11
|
-
"
|
12
|
-
|
13
|
-
options.on('-tURL', '--target-url=URL', '<Required - URL to Target>') do |t|
|
14
|
-
opts[:target_url] = t
|
15
|
-
end
|
16
|
-
|
17
|
-
options.on('-rRESULTS', '--output-results=RESULTS', '<Required - Path of Results File>') do |r|
|
18
|
-
opts[:output_results] = r
|
19
|
-
end
|
20
|
-
|
21
|
-
options.on('-l', '---list-pwn-www-mods', '<Optional - Provide a List of PWN::WWW Modules to Support Post-AuthN w/ -m Flag') do |l|
|
22
|
-
opts[:list_pwn_mods] = l
|
23
|
-
end
|
24
|
-
|
25
|
-
options.on('-mMOD', '--pwn-www-mod=MOD', '<Optional - PWN::WWW Module to Support Post-AuthN (-l to list Modules)') do |m|
|
26
|
-
opts[:pwn_www_mod_str] = m
|
27
|
-
end
|
28
|
-
|
29
|
-
options.on('-uUSER', '--username=USER', '<Optional - PWN::WWW Module username') do |u|
|
30
|
-
opts[:username] = u
|
31
|
-
end
|
32
|
-
|
33
|
-
options.on('-pPASS', '--password=PASS', '<Optional - PWN::WWW Module password (Will Prompt if nil)') do |p|
|
34
|
-
opts[:password] = p
|
35
|
-
end
|
36
|
-
|
37
|
-
options.on('-f', '--[no-]mfa', '<Optional - Enable MFA PWN::WWW Module') do |f|
|
38
|
-
opts[:mfa] = f
|
39
|
-
end
|
40
|
-
|
41
|
-
options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
|
42
|
-
opts[:proxy] = p
|
43
|
-
end
|
44
|
-
|
45
|
-
options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
|
46
|
-
opts[:with_tor] = w
|
47
|
-
end
|
48
|
-
end.parse!
|
49
|
-
|
50
|
-
if opts.empty?
|
51
|
-
puts `#{$PROGRAM_NAME} --help`
|
52
|
-
exit 1
|
53
|
-
end
|
54
|
-
|
55
|
-
# Colors!
|
56
|
-
@dark_red = "\e[1m\e[31m"
|
57
|
-
@green = "\e[32m"
|
58
|
-
@yellow = "\e[33m"
|
59
|
-
@end_of_color = "\e[0m"
|
60
|
-
|
61
|
-
# if -l Flag is passed, list all PWN::WWW Modules and exit
|
62
|
-
if opts[:list_pwn_mods]
|
63
|
-
puts "#{@green}Available PWN::WWW modules to obtain a Post AuthN state:#{@end_of_color}:"
|
64
|
-
puts "#{@yellow}#{PWN::WWW.help.join(',').tr(',', "\n")}#{@end_of_color}"
|
65
|
-
exit
|
66
|
-
end
|
67
|
-
|
68
|
-
# Required Flag Variables
|
69
|
-
target_url = opts[:target_url].to_s.scrub.strip.chomp
|
70
|
-
output_results = opts[:output_results].to_s.scrub.strip.chomp
|
71
|
-
|
72
|
-
# Optional Flag Variables
|
73
|
-
pwn_www_mod_str = opts[:pwn_www_mod_str].to_s.scrub.strip.chomp
|
74
|
-
|
75
|
-
username = opts[:username].to_s.scrub.strip.chomp
|
76
|
-
|
77
|
-
password = opts[:password] # Don't cast to string to detect if PWN::Plugins::AuthenticationHelper is necessary
|
78
|
-
if password.nil?
|
79
|
-
password = PWN::Plugins::AuthenticationHelper.mask_password
|
80
|
-
else
|
81
|
-
password = opts[:password].to_s.scrub.strip.chomp
|
82
|
-
end
|
83
|
-
|
84
|
-
if opts[:mfa]
|
85
|
-
mfa = true
|
86
|
-
else
|
87
|
-
mfa = false
|
88
|
-
end
|
89
|
-
|
90
|
-
proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
|
91
|
-
with_tor = opts[:with_tor]
|
92
|
-
|
93
|
-
begin
|
94
|
-
def get_web_cache_deception(opts = {})
|
95
|
-
browser_obj = opts[:browser_obj]
|
96
|
-
target_url = opts[:target_url].to_s.scrub.chomp.strip
|
97
|
-
payload = opts[:payload].to_s.scrub.chomp.strip
|
98
|
-
|
99
|
-
# Browse to original page to compare response lengths
|
100
|
-
browser_obj.goto(target_url)
|
101
|
-
orig_url_response_length = browser_obj.html.length
|
102
|
-
|
103
|
-
http_result = ''
|
104
|
-
if target_url.include?('?')
|
105
|
-
injected_target_url = URI.parse(target_url)
|
106
|
-
# Add non-existent file at the end of the path
|
107
|
-
injected_target_url.path = "#{injected_target_url.path.to_s.chomp('/')}/wcd.#{payload}"
|
108
|
-
web_cache_deception_url = injected_target_url.to_s
|
109
|
-
|
110
|
-
browser_obj.goto(injected_target_url.to_s)
|
111
|
-
injected_url_response_length = browser_obj.html.length
|
112
|
-
|
113
|
-
if injected_url_response_length == orig_url_response_length
|
114
|
-
# TODO: Add incognito Chrome browser
|
115
|
-
puts "\n#{@dark_red}Alert! Potential Candidate: #{web_cache_deception_url}#{@end_of_color}\n"
|
116
|
-
http_result = "Alert! Potential Candidate: #{web_cache_deception_url}"
|
117
|
-
else
|
118
|
-
print "#{@yellow}.#{@end_of_color}"
|
119
|
-
http_result = "Response Length Mismatch: Orig Len: #{orig_url_response_length} | Inj Len: #{injected_url_response_length} | WCD: #{web_cache_deception_url}"
|
120
|
-
end
|
121
|
-
else
|
122
|
-
web_cache_deception_url = "#{target_url.chomp('/')}/wcd.#{payload}"
|
123
|
-
browser_obj.goto(web_cache_deception_url)
|
124
|
-
wcd_url_response_length = browser_obj.html.length
|
125
|
-
|
126
|
-
if orig_url_response_length == wcd_url_response_length
|
127
|
-
# TODO: Add incognito Chrome browser
|
128
|
-
puts "\n#{@dark_red}Alert! Potential Candidate: #{web_cache_deception_url}#{@end_of_color}\n"
|
129
|
-
http_result = "Alert! Potential Candidate: #{web_cache_deception_url}"
|
130
|
-
else
|
131
|
-
print "#{@yellow}.#{@end_of_color}"
|
132
|
-
http_result = "Response Length Mismatch: Orig Len: #{orig_url_response_length} | WCD Len: #{wcd_url_response_length} | WCD: #{web_cache_deception_url}"
|
133
|
-
end
|
134
|
-
end
|
135
|
-
rescue Net::ReadTimeout => e
|
136
|
-
http_result = "#{e} Orig: #{target_url} | WCD: #{web_cache_deception_url}"
|
137
|
-
rescue StandardError => e
|
138
|
-
raise e
|
139
|
-
ensure
|
140
|
-
http_result
|
141
|
-
end
|
142
|
-
|
143
|
-
# Script starts crunching here...
|
144
|
-
if pwn_www_mod_str != ''
|
145
|
-
begin
|
146
|
-
pwn_www_mod = PWN::WWW.const_get(pwn_www_mod_str)
|
147
|
-
unless pwn_www_mod.respond_to?('open') && pwn_www_mod.respond_to?('login') && pwn_www_mod.respond_to?('logout')
|
148
|
-
puts "#{@dark_red}Module PWN::WWW::#{pwn_www_mod_str} Missing #open #login and/or #logout Method(s)#{@end_of_color}"
|
149
|
-
puts `#{$PROGRAM_NAME} -l`
|
150
|
-
exit
|
151
|
-
end
|
152
|
-
rescue NAME_ERROR => e
|
153
|
-
puts "#{@dark_red}Invalid module PWN::WWW::#{pwn_www_mod_str}#{@end_of_color}"
|
154
|
-
puts `#{$PROGRAM_NAME} -l`
|
155
|
-
exit
|
156
|
-
end
|
157
|
-
|
158
|
-
puts "#{@green}Leveraging PWN::WWW::#{pwn_www_mod_str} to Obtain a Post AuhN State...#{@end_of_color}"
|
159
|
-
if proxy
|
160
|
-
if with_tor
|
161
|
-
browser_obj = pwn_www_mod.open(
|
162
|
-
browser_type: :chrome,
|
163
|
-
proxy: proxy,
|
164
|
-
with_tor: true
|
165
|
-
)
|
166
|
-
else
|
167
|
-
browser_obj = pwn_www_mod.open(
|
168
|
-
browser_type: :chrome,
|
169
|
-
proxy: proxy
|
170
|
-
)
|
171
|
-
end
|
172
|
-
else
|
173
|
-
browser_obj = pwn_www_mod.open(browser_type: :chrome)
|
174
|
-
end
|
175
|
-
# Now AuthN via PWN::WWW::<MODULE>
|
176
|
-
browser_obj = pwn_www_mod.login(
|
177
|
-
browser_obj: browser_obj,
|
178
|
-
username: username,
|
179
|
-
password: password,
|
180
|
-
mfa: mfa
|
181
|
-
)
|
182
|
-
puts "#{@green}complete.#{@end_of_color}\n\n\n"
|
183
|
-
elsif pwn_www_mod_str == '' && proxy
|
184
|
-
if with_tor
|
185
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(
|
186
|
-
browser_type: :chrome,
|
187
|
-
proxy: proxy,
|
188
|
-
with_tor: true
|
189
|
-
)
|
190
|
-
else
|
191
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(
|
192
|
-
browser_type: :chrome,
|
193
|
-
proxy: proxy
|
194
|
-
)
|
195
|
-
end
|
196
|
-
else
|
197
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :chrome)
|
198
|
-
end
|
199
|
-
|
200
|
-
puts "#{@green}Navigating to Target URL: #{target_url}#{@end_of_color}\n\n\n"
|
201
|
-
browser_obj.goto(target_url)
|
202
|
-
|
203
|
-
web_cache_deception_payload_arr = %w[
|
204
|
-
aif aiff au avi bin bmp cab carb cct cdf class css doc dcr dtd gcf gff gif grv hdml hqx ico ini jpeg jpg js mov mp3 mp4 nc pct ppc pws swa swf txt vbs w32 wav wbmp wml wmlc wmls wmlsc xsd zip
|
205
|
-
]
|
206
|
-
|
207
|
-
File.open(output_results, 'w') do |f|
|
208
|
-
web_cache_deception_payload_arr.each do |payload|
|
209
|
-
http_result = get_web_cache_deception(
|
210
|
-
browser_obj: browser_obj,
|
211
|
-
target_url: target_url,
|
212
|
-
payload: payload
|
213
|
-
)
|
214
|
-
|
215
|
-
f.puts http_result
|
216
|
-
end
|
217
|
-
end
|
218
|
-
puts "\n#{@yellow}Results Location: #{output_results}#{@end_of_color}\n\n\n"
|
219
|
-
puts "#{@green}complete.#{@end_of_color}"
|
220
|
-
rescue StandardError => e
|
221
|
-
raise e
|
222
|
-
ensure
|
223
|
-
if browser_obj &&
|
224
|
-
pwn_www_mod
|
225
|
-
|
226
|
-
browser_obj = pwn_www_mod.logout(browser_obj: browser_obj)
|
227
|
-
browser_obj = pwn_www_mod.close(browser_obj: browser_obj)
|
228
|
-
else
|
229
|
-
browser_obj = PWN::Plugins::TransparentBrowser.close(
|
230
|
-
browser_obj: browser_obj
|
231
|
-
)
|
232
|
-
end
|
233
|
-
end
|
data/bin/pwn_www_checkip
DELETED
@@ -1,62 +0,0 @@
|
|
1
|
-
#!/usr/bin/env ruby
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
require 'pwn'
|
5
|
-
require 'optparse'
|
6
|
-
|
7
|
-
opts = {}
|
8
|
-
OptionParser.new do |options|
|
9
|
-
options.banner = "USAGE:
|
10
|
-
#{$PROGRAM_NAME} [opts]
|
11
|
-
"
|
12
|
-
|
13
|
-
options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
|
14
|
-
opts[:proxy] = p
|
15
|
-
end
|
16
|
-
|
17
|
-
options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
|
18
|
-
opts[:with_tor] = w
|
19
|
-
end
|
20
|
-
|
21
|
-
options.on('-i', '--[no-]ipinfo', '<Optional - Return Details about Public IP Returned from CheckIP>') do |i|
|
22
|
-
opts[:ipinfo] = i
|
23
|
-
end
|
24
|
-
end.parse!
|
25
|
-
|
26
|
-
proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
|
27
|
-
with_tor = opts[:with_tor]
|
28
|
-
ipinfo = opts[:ipinfo]
|
29
|
-
|
30
|
-
begin
|
31
|
-
if proxy != '' && with_tor
|
32
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest, proxy: proxy, with_tor: true)::Request
|
33
|
-
elsif proxy != '' && with_tor.nil?
|
34
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest, proxy: proxy)::Request
|
35
|
-
else
|
36
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
|
37
|
-
end
|
38
|
-
|
39
|
-
if proxy
|
40
|
-
public_ip_address = browser_obj.execute(
|
41
|
-
method: :get,
|
42
|
-
url: 'https://checkip.amazonaws.com',
|
43
|
-
verify_ssl: false
|
44
|
-
).to_s.chomp
|
45
|
-
else
|
46
|
-
public_ip_address = browser_obj.execute(
|
47
|
-
method: :get,
|
48
|
-
url: 'https://checkip.amazonaws.com'
|
49
|
-
).to_s.chomp
|
50
|
-
end
|
51
|
-
|
52
|
-
puts "PUBLIC IP: #{public_ip_address}"
|
53
|
-
puts PWN::Plugins::IPInfo.get(ip_or_host: public_ip_address) unless ipinfo.nil?
|
54
|
-
rescue StandardError => e
|
55
|
-
raise e
|
56
|
-
ensure
|
57
|
-
if browser_obj
|
58
|
-
browser_obj = PWN::Plugins::TransparentBrowser.close(
|
59
|
-
browser_obj: browser_obj
|
60
|
-
)
|
61
|
-
end
|
62
|
-
end
|
data/bin/pwn_www_uri_buster
DELETED
@@ -1,237 +0,0 @@
|
|
1
|
-
#!/usr/bin/env ruby
|
2
|
-
# frozen_string_literal: false
|
3
|
-
|
4
|
-
require 'pwn'
|
5
|
-
require 'optparse'
|
6
|
-
require 'uri'
|
7
|
-
require 'cgi'
|
8
|
-
require 'htmlentities'
|
9
|
-
|
10
|
-
opts = {}
|
11
|
-
OptionParser.new do |options|
|
12
|
-
options.banner = "USAGE:
|
13
|
-
#{$PROGRAM_NAME} [opts]
|
14
|
-
"
|
15
|
-
|
16
|
-
options.on('-uURL', '--target-url=URL', '<Required - Target URL)>') do |t|
|
17
|
-
opts[:target_url] = t
|
18
|
-
end
|
19
|
-
|
20
|
-
options.on('-wFILE', '--word-list=FILE', '<Required - Wordlist File to Use>') do |w|
|
21
|
-
opts[:wordlist] = w
|
22
|
-
end
|
23
|
-
|
24
|
-
options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
|
25
|
-
opts[:proxy] = p
|
26
|
-
end
|
27
|
-
|
28
|
-
options.on('-tTHREADS', '--max-threads=THREADS', '<Optional # HTTP Requests to Run Simultaneously (Default 100)>') do |t|
|
29
|
-
opts[:max_threads] = t
|
30
|
-
end
|
31
|
-
|
32
|
-
options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
|
33
|
-
opts[:http_request_headers] = h
|
34
|
-
end
|
35
|
-
|
36
|
-
options.on('-cCODES', '--only-report-response-codes=CODES', '<Optional - Comma-Delimited List of Response Codes to Only Include in Report)>') do |c|
|
37
|
-
opts[:http_response_codes] = c
|
38
|
-
end
|
39
|
-
|
40
|
-
options.on('-dDIR', '--dir-path=DIR', '<Optional - Report Output Directory (Defaults to ".")>') do |w|
|
41
|
-
opts[:wordlist] = w
|
42
|
-
end
|
43
|
-
|
44
|
-
options.on('-nREPORTNAME', '--report-name=REPORTNAME', '<Optional Report Name (Defaults to, "<TARGET_URL_HOST>-<File.basename(wordlist)>-<Time.now.strftime("%Y-%m-%d_%H-%M-%S")>")>') do |n|
|
45
|
-
opts[:report_name] = n
|
46
|
-
end
|
47
|
-
|
48
|
-
options.on('-s', '--[no-]start-reporting-server', '<Optional - Start Simple HTTP Server for Reporting>') do |s|
|
49
|
-
opts[:start_reporting_server] = s
|
50
|
-
end
|
51
|
-
end.parse!
|
52
|
-
|
53
|
-
if opts.empty?
|
54
|
-
puts `#{$PROGRAM_NAME} --help`
|
55
|
-
exit 1
|
56
|
-
end
|
57
|
-
|
58
|
-
def request_path(opts = {})
|
59
|
-
target_url = opts[:target_url]
|
60
|
-
proxy = opts[:proxy]
|
61
|
-
http_request_headers = opts[:http_request_headers]
|
62
|
-
wordlist_line = opts[:wordlist_line]
|
63
|
-
http_method = opts[:http_method]
|
64
|
-
|
65
|
-
rest_client_resp_hash = {}
|
66
|
-
begin
|
67
|
-
print '.'
|
68
|
-
http_uri = "#{target_url}/#{wordlist_line}"
|
69
|
-
if proxy
|
70
|
-
rest_client = PWN::Plugins::TransparentBrowser.open(
|
71
|
-
browser_type: :rest,
|
72
|
-
proxy: proxy
|
73
|
-
)::Request
|
74
|
-
else
|
75
|
-
rest_client = PWN::Plugins::TransparentBrowser.open(
|
76
|
-
browser_type: :rest
|
77
|
-
)::Request
|
78
|
-
end
|
79
|
-
|
80
|
-
headers = nil
|
81
|
-
if http_request_headers
|
82
|
-
headers = JSON.parse(
|
83
|
-
http_request_headers,
|
84
|
-
symbolize_names: true
|
85
|
-
)
|
86
|
-
end
|
87
|
-
|
88
|
-
response = rest_client.execute(
|
89
|
-
method: http_method,
|
90
|
-
url: http_uri,
|
91
|
-
headers: headers,
|
92
|
-
verify_ssl: false
|
93
|
-
)
|
94
|
-
|
95
|
-
rest_client_resp_hash = {
|
96
|
-
request_timestamp: Time.now.strftime('%Y-%m-%d_%H-%M-%S'),
|
97
|
-
http_uri: http_uri,
|
98
|
-
http_method: http_method,
|
99
|
-
http_resp_code: response.code,
|
100
|
-
http_resp_length: response.body.length,
|
101
|
-
http_resp: "#{response.body[0..300]}..."
|
102
|
-
}
|
103
|
-
rescue Errno::ECONNRESET,
|
104
|
-
RestClient::Exceptions::ReadTimeout,
|
105
|
-
RestClient::ServerBrokeConnection => e
|
106
|
-
rest_client_resp_hash = {
|
107
|
-
request_timestamp: Time.now.strftime('%Y-%m-%d_%H-%M-%S'),
|
108
|
-
http_uri: http_uri,
|
109
|
-
http_method: http_method,
|
110
|
-
http_resp_code: e.class,
|
111
|
-
http_resp_length: 'N/A',
|
112
|
-
http_resp: e.class
|
113
|
-
}
|
114
|
-
rescue RestClient::ExceptionWithResponse => e
|
115
|
-
rest_client_resp_hash = {
|
116
|
-
request_timestamp: Time.now.strftime('%Y-%m-%d_%H-%M-%S'),
|
117
|
-
http_uri: http_uri,
|
118
|
-
http_method: http_method,
|
119
|
-
http_resp_code: e.response.code,
|
120
|
-
http_resp_length: e.response.body.length,
|
121
|
-
http_resp: "#{e.response.body[0..300]}..."
|
122
|
-
}
|
123
|
-
rescue URI::InvalidURIError
|
124
|
-
url_encoded_wordlist_arr = []
|
125
|
-
wordlist_line.split('/').each do |path|
|
126
|
-
url_encoded_wordlist_arr.push(CGI.escape(path))
|
127
|
-
end
|
128
|
-
wordlist_line = url_encoded_wordlist_arr.join('/')
|
129
|
-
|
130
|
-
retry
|
131
|
-
rescue RestClient::TooManyRequests
|
132
|
-
sleep 60
|
133
|
-
end
|
134
|
-
|
135
|
-
rest_client_resp_hash
|
136
|
-
end
|
137
|
-
|
138
|
-
begin
|
139
|
-
pwn_provider = 'ruby-gem'
|
140
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
141
|
-
$stdout.sync = true
|
142
|
-
|
143
|
-
target_url = opts[:target_url]
|
144
|
-
parsed_target_url = URI.parse(target_url)
|
145
|
-
|
146
|
-
wordlist = opts[:wordlist]
|
147
|
-
raise "ERROR: #{wordlist} Does Not Exist." unless File.exist?(wordlist)
|
148
|
-
|
149
|
-
proxy = opts[:proxy]
|
150
|
-
|
151
|
-
max_threads = opts[:max_threads]
|
152
|
-
max_threads ||= 100
|
153
|
-
|
154
|
-
http_request_headers = opts[:http_request_headers]
|
155
|
-
http_response_codes = opts[:http_response_codes]
|
156
|
-
http_response_codes = http_response_codes.delete("\s").split(',') if http_response_codes
|
157
|
-
|
158
|
-
dir_path = opts[:dir_path]
|
159
|
-
dir_path ||= '.'
|
160
|
-
|
161
|
-
report_name = opts[:report_name]
|
162
|
-
report_name ||= "#{parsed_target_url.host}-#{File.basename(wordlist)}-#{Time.now.strftime('%Y-%m-%d_%H-%M-%S')}"
|
163
|
-
|
164
|
-
start_reporting_server = opts[:start_reporting_server]
|
165
|
-
|
166
|
-
mutex = Mutex.new
|
167
|
-
|
168
|
-
results_hash = {
|
169
|
-
report_name: HTMLEntities.new.encode(
|
170
|
-
report_name.to_s.scrub.strip.chomp
|
171
|
-
),
|
172
|
-
data: []
|
173
|
-
}
|
174
|
-
|
175
|
-
wordlist_arr = File.readlines(wordlist)
|
176
|
-
PWN::Plugins::ThreadPool.fill(
|
177
|
-
enumerable_array: wordlist_arr,
|
178
|
-
max_threads: max_threads
|
179
|
-
) do |this_wl_line|
|
180
|
-
wordlist_line = this_wl_line.to_s.scrub.strip.chomp
|
181
|
-
|
182
|
-
next if wordlist_line.match?(/^#/)
|
183
|
-
|
184
|
-
http_methods = %i[DELETE GET HEAD OPTIONS PATCH POST PUT TRACE]
|
185
|
-
http_methods.each do |http_method|
|
186
|
-
rest_client_resp_hash = request_path(
|
187
|
-
target_url: target_url,
|
188
|
-
proxy: proxy,
|
189
|
-
http_request_headers: http_request_headers,
|
190
|
-
wordlist_line: wordlist_line,
|
191
|
-
http_method: http_method
|
192
|
-
)
|
193
|
-
|
194
|
-
mutex.synchronize do
|
195
|
-
if http_response_codes
|
196
|
-
ret_http_resp_code = rest_client_resp_hash[:http_resp_code].to_s
|
197
|
-
results_hash[:data].push(rest_client_resp_hash) if http_response_codes.include?(ret_http_resp_code)
|
198
|
-
else
|
199
|
-
results_hash[:data].push(rest_client_resp_hash)
|
200
|
-
end
|
201
|
-
end
|
202
|
-
end
|
203
|
-
end
|
204
|
-
|
205
|
-
# Generate HTML Report
|
206
|
-
print "#{$PROGRAM_NAME} Generating Report..."
|
207
|
-
PWN::Reports::URIBuster.generate(
|
208
|
-
dir_path: dir_path,
|
209
|
-
results_hash: results_hash
|
210
|
-
)
|
211
|
-
puts 'complete.'
|
212
|
-
|
213
|
-
# Start Simple HTTP Server (If Requested)
|
214
|
-
if start_reporting_server
|
215
|
-
listen_port = Random.rand(1_025..65_535).to_s
|
216
|
-
|
217
|
-
if pwn_provider == 'docker'
|
218
|
-
listen_ip = '0.0.0.0'
|
219
|
-
else
|
220
|
-
listen_ip = '127.0.0.1'
|
221
|
-
end
|
222
|
-
|
223
|
-
puts "For Scan Results Navigate to: http://127.0.0.1:#{listen_port}/pwn_www_uri_buster.html"
|
224
|
-
Dir.chdir(dir_path)
|
225
|
-
system(
|
226
|
-
'pwn_simple_http_server',
|
227
|
-
'-i',
|
228
|
-
listen_ip,
|
229
|
-
'-p',
|
230
|
-
listen_port
|
231
|
-
)
|
232
|
-
end
|
233
|
-
rescue SystemExit, Interrupt
|
234
|
-
puts "\nGoodbye."
|
235
|
-
rescue StandardError => e
|
236
|
-
raise e
|
237
|
-
end
|
data/bin/pwn_xss_dom_vectors
DELETED
@@ -1,169 +0,0 @@
|
|
1
|
-
#!/usr/bin/env ruby
|
2
|
-
# frozen_string_literal: true
|
3
|
-
|
4
|
-
require 'pwn'
|
5
|
-
require 'optparse'
|
6
|
-
|
7
|
-
opts = {}
|
8
|
-
OptionParser.new do |options|
|
9
|
-
options.banner = "USAGE:
|
10
|
-
#{$PROGRAM_NAME} [opts]
|
11
|
-
"
|
12
|
-
|
13
|
-
options.on('-tFQDN', '--target-fqdn=FQDN', '<Required - FQDN to Target>') do |t|
|
14
|
-
opts[:target_fqdn] = t
|
15
|
-
end
|
16
|
-
|
17
|
-
options.on('-dDIR', '--output-dir=DIR', '<Required - Directory to Save Results>') do |d|
|
18
|
-
opts[:output_dir] = d
|
19
|
-
end
|
20
|
-
|
21
|
-
options.on('-uURI', '--uri-source-root=URI', '<Required - URI to Source Root (for pwn_sast Results)>') do |u|
|
22
|
-
opts[:uri_source_root] = u
|
23
|
-
end
|
24
|
-
|
25
|
-
options.on('-bTYPE', '--browser-type=BROWSER', '<Optional - Browser Type chrome|firefox|headless (Default)>') do |b|
|
26
|
-
opts[:browser_type] = b
|
27
|
-
end
|
28
|
-
|
29
|
-
options.on('-pPROXY', '--proxy=PROXY', '<Optional - HTTP or Socks Proxy>') do |p|
|
30
|
-
opts[:proxy] = p
|
31
|
-
end
|
32
|
-
|
33
|
-
options.on('-T', '--[no-]with-tor', '<Optional - Proxy w/ TOR (Defaults to false)>') do |w|
|
34
|
-
opts[:with_tor] = w
|
35
|
-
end
|
36
|
-
|
37
|
-
options.on('-S', '--[no-]spider-fqdn', '<Optional - Spider Target FQDN>') do |s|
|
38
|
-
opts[:spider] = s
|
39
|
-
end
|
40
|
-
end.parse!
|
41
|
-
|
42
|
-
if opts.empty?
|
43
|
-
puts `#{$PROGRAM_NAME} --help`
|
44
|
-
exit 1
|
45
|
-
end
|
46
|
-
|
47
|
-
# Required Flag Variables
|
48
|
-
target_fqdn = opts[:target_fqdn].to_s.scrub.strip.chomp
|
49
|
-
output_dir = opts[:output_dir].to_s.scrub.strip.chomp if Dir.exist?(opts[:output_dir].to_s.scrub.strip.chomp)
|
50
|
-
uri_source_root = opts[:uri_source_root].to_s.scrub
|
51
|
-
|
52
|
-
if opts[:browser_type]
|
53
|
-
browser_type = opts[:browser_type].to_s.scrub.chomp.strip.to_sym
|
54
|
-
else
|
55
|
-
browser_type = :headless
|
56
|
-
end
|
57
|
-
|
58
|
-
proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
|
59
|
-
with_tor = opts[:with_tor]
|
60
|
-
|
61
|
-
if opts[:spider]
|
62
|
-
spider = true
|
63
|
-
else
|
64
|
-
spider = false
|
65
|
-
end
|
66
|
-
|
67
|
-
spider_results = "#{output_dir}/#{File.basename($PROGRAM_NAME)}.spider"
|
68
|
-
|
69
|
-
# Colors!
|
70
|
-
@dark_red = "\e[1m\e[31m"
|
71
|
-
@green = "\e[32m"
|
72
|
-
@yellow = "\e[33m"
|
73
|
-
@end_of_color = "\e[0m"
|
74
|
-
|
75
|
-
begin
|
76
|
-
def grab_js_in_page(opts = {})
|
77
|
-
browser_obj = opts[:browser_obj]
|
78
|
-
target_page = opts[:url].to_s.scrub.chomp.strip
|
79
|
-
output_dir = opts[:output_dir].to_s.scrub.chomp.strip
|
80
|
-
|
81
|
-
puts "#{@green}Navigating to Page #{target_page}#{@end_of_color}"
|
82
|
-
browser_obj.goto(target_page)
|
83
|
-
browser_obj.scripts.each do |script|
|
84
|
-
if script.src == ''
|
85
|
-
# Save a copy of the outer_html
|
86
|
-
puts "#{@yellow}Saving OuterHTML of Native '<script>' Element#{@end_of_color}"
|
87
|
-
sha256_hexdigest = OpenSSL::Digest::SHA256.hexdigest(script.outer_html)
|
88
|
-
script_results = "#{output_dir}/#{sha256_hexdigest}.js"
|
89
|
-
File.open(script_results, 'w') do |f|
|
90
|
-
f.puts script.outer_html
|
91
|
-
end
|
92
|
-
else
|
93
|
-
# Save a copy of the script
|
94
|
-
puts "#{@yellow}Navigating to #{script.src}#{@end_of_color}"
|
95
|
-
browser_obj.goto(script.src)
|
96
|
-
sha256_hexdigest = OpenSSL::Digest::SHA256.hexdigest(browser_obj.text)
|
97
|
-
uri = URI.parse(browser_obj.url)
|
98
|
-
script_filename = File.basename(uri.path)
|
99
|
-
script_results = "#{output_dir}/#{File.basename(script_filename, '.*')}-#{sha256_hexdigest}#{File.extname(script_filename)}".to_s.scrub.chomp.strip
|
100
|
-
File.open(script_results, 'w') do |f|
|
101
|
-
f.puts browser_obj.text
|
102
|
-
end
|
103
|
-
browser_obj.back
|
104
|
-
end
|
105
|
-
puts "#{@green}Saved #{script_results}#{@end_of_color}\n\n\n"
|
106
|
-
end
|
107
|
-
rescue StandardError => e
|
108
|
-
raise e
|
109
|
-
end
|
110
|
-
|
111
|
-
if proxy
|
112
|
-
if with_tor
|
113
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(
|
114
|
-
browser_type: browser_type,
|
115
|
-
proxy: proxy,
|
116
|
-
with_tor: true
|
117
|
-
)
|
118
|
-
else
|
119
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(
|
120
|
-
browser_type: browser_type,
|
121
|
-
proxy: proxy
|
122
|
-
)
|
123
|
-
end
|
124
|
-
else
|
125
|
-
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: browser_type)
|
126
|
-
end
|
127
|
-
|
128
|
-
puts "#{@green}Navigating to Target FQDN: #{target_fqdn}#{@end_of_color}\n\n\n"
|
129
|
-
browser_obj.goto(target_fqdn)
|
130
|
-
|
131
|
-
if spider
|
132
|
-
if File.exist?(spider_results)
|
133
|
-
puts "#{@dark_red}Using Existing Spider Results: #{spider_results}#{@end_of_color}"
|
134
|
-
else
|
135
|
-
puts "#{@dark_red}Spidering Target FQDN: #{target_fqdn}#{@end_of_color}"
|
136
|
-
PWN::Plugins::Spider.crawl(
|
137
|
-
target_fqdn: target_fqdn,
|
138
|
-
results_path: spider_results
|
139
|
-
)
|
140
|
-
end
|
141
|
-
end
|
142
|
-
|
143
|
-
# Grab JavaScript for Each Page Discovered
|
144
|
-
if spider
|
145
|
-
File.readlines(spider_results).uniq.each do |this_page|
|
146
|
-
grab_js_in_page(browser_obj: browser_obj, url: this_page, output_dir: output_dir)
|
147
|
-
end
|
148
|
-
else
|
149
|
-
grab_js_in_page(browser_obj: browser_obj, url: target_fqdn, output_dir: output_dir)
|
150
|
-
end
|
151
|
-
|
152
|
-
# Run DOM XSS SAST Test Cases
|
153
|
-
puts `pwn_sast -d #{output_dir} -t 1 -T 'InnerHTML, OuterHTML, WindowLocationHash' -u #{uri_source_root}`
|
154
|
-
|
155
|
-
# For future use
|
156
|
-
# page_script_elements = browser_obj.execute_script("
|
157
|
-
# // JavaScript Goes Here
|
158
|
-
# var script_elements = [];
|
159
|
-
# var script_query = document.querySelectorAll('script');
|
160
|
-
# for (var i = 0; i < script_query.length; i++) {
|
161
|
-
# script_elements.push(script_query[i]);
|
162
|
-
# }
|
163
|
-
# return script_elements;
|
164
|
-
# ")
|
165
|
-
rescue StandardError => e
|
166
|
-
raise e
|
167
|
-
ensure
|
168
|
-
browser_obj = PWN::Plugins::TransparentBrowser.close(browser_obj: browser_obj) unless browser_obj.nil?
|
169
|
-
end
|