pwn 0.4.594 → 0.4.595

data/bin/pwn_arachni_rest

@@ -1,174 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'pwn'
-require 'optparse'
-require 'securerandom'
-require 'pty'
-require 'json'
-
-opts = {}
-OptionParser.new do |options|
-  options.banner = "USAGE:
-    #{$PROGRAM_NAME} [opts]
-  "
-
-  options.on('-tTARGET', '--target_url=TARGET', '<Required - Target URI to Scan>') do |t|
-    opts[:target_url] = t
-  end
-
-  options.on('-oDIR', '--report_output_dir=DIR', '<Required - Output Directory for Results Generation>') do |o|
-    opts[:output_dir] = o
-  end
-
-  options.on('-IINST', '--navigation_instruct=INST', '<Required - Path to Navigation Instructions (e.g. Auth w/ Target - see /pwn/etc/arachni/navigation-REST.instruct.EXAMPLE)>') do |i|
-    opts[:navigation_instruct] = i
-  end
-
-  options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
-    opts[:proxy] = p
-  end
-
-  options.on('-xTYPE', '--proxy-type=TYPE', '<Optional - Proxy Type (See arachni --help)>') do |x|
-    opts[:proxy_type] = x
-  end
-
-  options.on('-ePATTERN', '--exclude-pattern=PATTERN', '<Optional - Exclude comma-delimited resources whose URL matches pattern>') do |e|
-    opts[:exclude_pattern] = e
-  end
-
-  options.on('-d', '--[no-]deep', '<Optional - Enable Deep Scanning (Much Longer to Complete)>') do |d|
-    opts[:deep_scan] = d
-  end
-end.parse!
-
-if opts.empty?
-  puts `#{$PROGRAM_NAME} --help`
-  exit 1
-end
-
-logger = PWN::Plugins::PWNLogger.create
-
-target_url = opts[:target_url].to_s.scrub
-output_dir = opts[:output_dir].to_s.scrub if Dir.exist?(opts[:output_dir].to_s.scrub)
-navigation_instruct = opts[:navigation_instruct].to_s.strip.chomp.scrub if File.exist?(opts[:navigation_instruct].to_s.strip.chomp.scrub)
-proxy = opts[:proxy]
-proxy_type = opts[:proxy_type]
-exclude_pattern = opts[:exclude_pattern]
-deep_scan = opts[:deep_scan]
-
-# Proxy defaults to 127.0.0.1:8282
-arachni_cmd_str = 'arachni --plugin=proxy:address=127.0.0.1,port=8282'
-arachni_cmd_str = "#{arachni_cmd_str} --output-debug"
-arachni_cmd_str = "#{arachni_cmd_str} --scope-page-limit=0"
-arachni_cmd_str = "#{arachni_cmd_str} --checks=*,-common_*,-backup*,-backdoors,-directory_listing,-csrf"
-arachni_cmd_str = "#{arachni_cmd_str} --report-save-path=#{output_dir}/arachni_results.afr"
-arachni_cmd_str = "#{arachni_cmd_str} --http-proxy #{proxy}" if proxy
-arachni_cmd_str = "#{arachni_cmd_str} --http-proxy-type #{proxy_type}" if proxy_type
-arachni_cmd_str = "#{arachni_cmd_str} --audit-jsons --audit-xmls --audit-forms --audit-links"
-arachni_cmd_str = "#{arachni_cmd_str} --audit-headers --audit-with-both-methods --audit-parameter-names" if deep_scan
-arachni_cmd_str = "#{arachni_cmd_str} #{target_url}"
-
-if exclude_pattern
-  exclude_pattern.to_s.split(',').each do |exclude_entry|
-    arachni_cmd_str = "#{arachni_cmd_str} --scope-exclude-pattern #{exclude_entry}"
-  end
-end
-
-arachni_stdout_log_path = "/tmp/pwn_arachni_rest-#{SecureRandom.hex}.log"
-arachni_stdout_log = File.new(arachni_stdout_log_path, 'w')
-# Immediately writes all buffered data in IO to disk
-arachni_stdout_log.sync = true
-arachni_stdout_log.fsync
-
-trained_attack_vectors_yaml = ''
-
-# Kick off scan as defined by pwn_arachni_rest flags
-begin
-  fork_pid = Process.fork do
-    PTY.spawn(
-      "sudo /bin/bash --login -c \"#{arachni_cmd_str}\""
-    ) do |stdout, _stdin, _pid|
-      stdout.each do |line|
-        puts line
-        arachni_stdout_log.puts line
-      end
-    end
-  end
-  Process.detach(fork_pid)
-  puts 'Arachni proxy plugin process exiting...'
-rescue StandardError => e
-  puts 'ERROR: Arachni proxy plugin process exiting...'
-  raise e
-rescue Interrupt
-  puts 'CTRL+C Detected - goodbye.'
-  exit 1
-ensure
-  Process.kill('TERM', fork_pid) if fork_pid
-  File.unlink(arachni_stdout_log_path)
-  File.unlink(trained_attack_vectors_yaml)
-end
-
-# Watch for Arachni proxy plugin to intialize prior to invoking navigation-REST.instruct
-return_pattern = 'Proxy: The scan will resume once you visit the shutdown URL.'
-loop do
-  if File.exist?(arachni_stdout_log_path) &&
-     File.read(arachni_stdout_log_path).include?(return_pattern)
-
-    print 'Proxy started...sleeping for 9s.  '
-    sleep 9
-    puts 'Ready to proceed.'
-    break
-  end
-  sleep 3
-end
-
-# Initiate rest_client object to pump requests through Arachni proxy plugin.
-rest_client = PWN::Plugins::TransparentBrowser.open(
-  browser_type: :rest,
-  proxy: 'http://127.0.0.1:8282'
-)::Request
-
-# Now that the proxy is up, we can run the navigation-REST.instruct through the Arachni
-# proxy plugin (http://127.0.0.1:8282) to train arachni how to interact w/ the API.
-puts "Initialize REST API Training: #{navigation_instruct}"
-pwn_arachni_rest_custom_http_header = instance_eval(File.read(navigation_instruct), navigation_instruct)
-puts "REST API Training Complete: #{navigation_instruct}"
-puts 'Sleeping for 9s prior to proceeding...'
-sleep 9
-
-# Close rest_client used for training Arachni
-PWN::Plugins::TransparentBrowser.close(browser_obj: rest_client)
-
-trained_attack_vectors_yaml = "#{File.dirname(arachni_stdout_log_path)}/#{File.basename(arachni_stdout_log_path, File.extname(arachni_stdout_log_path))}.yml"
-
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("/bin/bash --login -c \"http_proxy=http://127.0.0.1:8282 curl http://arachni.proxy/panel/vectors.yml -o #{trained_attack_vectors_yaml}\"")
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system('/bin/bash --login -c "http_proxy=http://127.0.0.1:8282 curl http://arachni.proxy/shutdown"')
-fork_pid = nil
-
-arachni_trained_cmd_str = "arachni --plugin=vector_feed:yaml_file=#{trained_attack_vectors_yaml}"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --output-debug"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --scope-page-limit=0"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --checks=*,-common_*,-backup*,-backdoors,-directory_listing,-csrf"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-request-header='#{pwn_arachni_rest_custom_http_header}'" if pwn_arachni_rest_custom_http_header != ''
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --report-save-path=#{output_dir}/arachni_results.afr"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-proxy #{proxy}" if proxy
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-proxy-type #{proxy_type}" if proxy_type
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --audit-jsons --audit-xmls --audit-forms --audit-links"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --audit-headers --audit-with-both-methods --audit-parameter-names" if deep_scan
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} #{target_url}"
-
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"#{arachni_trained_cmd_str}\"")
-
-# Report Scan Results
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=html:outfile=#{output_dir}/arachni_results.html.zip\"")
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=json:outfile=#{output_dir}/arachni_results.json\"")
-
-# Unzip Results in Output Dir
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"cd #{output_dir} && unzip -o arachni_results.html.zip\"")

data/bin/pwn_autoinc_version

@@ -1,58 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'pwn'
-
-old_rev = PWN::VERSION
-readme_md_path = './README.md'
-current_ruby = './.ruby-version'
-placeholder_arr = old_rev.split('.')
-major = placeholder_arr[0].to_i
-minor = placeholder_arr[1].to_i
-hotfix = placeholder_arr[2].to_i
-
-if hotfix < 999
-  hotfix += 1
-  placeholder_arr[2] = hotfix.to_s
-else
-  placeholder_arr[2] = '0'
-  if minor < 9
-    minor += 1
-    placeholder_arr[1] = minor.to_s
-  else
-    placeholder_arr[1] = '0'
-    major += 1
-    placeholder_arr[0] = major.to_s
-  end
-end
-
-new_rev = placeholder_arr.join('.')
-
-puts "Upgrading to #{new_rev}..."
-File.open('./lib/pwn/version.rb', 'w') do |f|
-  f.puts '# frozen_string_literal: true'
-  f.puts "\n"
-  f.puts 'module PWN'
-  f.puts "  VERSION = '#{new_rev}'"
-  f.puts 'end'
-end
-
-# Update README.md
-current_ruby_version = "ruby-#{File.read(current_ruby).chomp}"
-old_readme_md = File.read(readme_md_path, encoding: 'utf-8')
-pwn_regex = 'pwn\[v.+\..+\..+\]'
-rb_regex = 'ruby-.+'
-File.open(readme_md_path, 'w') do |file|
-  old_readme_md.each_line do |line|
-    if line.to_s.scrub.match?(/#{pwn_regex}/) ||
-       line.to_s.scrub.match?(/#{rb_regex}/)
-
-      new_line = line.to_s.gsub(/pwn\[v#{old_rev}\]/, "pwn\[v#{new_rev}\]") if line.to_s.scrub.match?(/#{pwn_regex}/)
-      new_line = line.to_s.gsub(/ruby-.+(?=(@))/, current_ruby_version) if line.to_s.scrub.match?(/#{rb_regex}/)
-
-      file.puts new_line
-    else
-      file.puts line
-    end
-  end
-end