pwn 0.4.594 → 0.4.595
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- metadata +8 -996
- data/.github/FUNDING.yml +0 -1
- data/.github/ISSUE_TEMPLATE/bug_report.md +0 -38
- data/.gitignore +0 -62
- data/.rubocop.yml +0 -14
- data/.rubocop_todo.yml +0 -117
- data/.ruby-gemset +0 -1
- data/.ruby-version +0 -1
- data/.travis.yml +0 -24
- data/CHANGELOG_BETWEEN_TAGS.txt +0 -108
- data/CODE_OF_CONDUCT.md +0 -46
- data/CONTRIBUTING.md +0 -10
- data/Gemfile +0 -86
- data/LICENSE.txt +0 -22
- data/README.md +0 -84
- data/Rakefile +0 -20
- data/Vagrantfile +0 -250
- data/bin/pwn +0 -101
- data/bin/pwn_android_war_dialer +0 -161
- data/bin/pwn_arachni +0 -157
- data/bin/pwn_arachni_rest +0 -174
- data/bin/pwn_autoinc_version +0 -58
- data/bin/pwn_aws_describe_resources +0 -728
- data/bin/pwn_burp_suite_pro_active_scan +0 -113
- data/bin/pwn_char_base64_encoding +0 -24
- data/bin/pwn_char_dec_encoding +0 -23
- data/bin/pwn_char_hex_escaped_encoding +0 -26
- data/bin/pwn_char_html_entity_encoding +0 -24
- data/bin/pwn_char_unicode_escaped_encoding +0 -23
- data/bin/pwn_char_url_encoding +0 -24
- data/bin/pwn_defectdojo_engagement_create +0 -158
- data/bin/pwn_defectdojo_importscan +0 -104
- data/bin/pwn_defectdojo_reimportscan +0 -104
- data/bin/pwn_domain_reversewhois +0 -89
- data/bin/pwn_fuzz_net_app_proto +0 -160
- data/bin/pwn_ibm_appscan_enterprise +0 -112
- data/bin/pwn_jenkins_create_job +0 -68
- data/bin/pwn_jenkins_create_view +0 -68
- data/bin/pwn_jenkins_install_plugin +0 -91
- data/bin/pwn_jenkins_thinBackup_aws_s3 +0 -123
- data/bin/pwn_jenkins_update_plugins +0 -87
- data/bin/pwn_jenkins_useradd +0 -86
- data/bin/pwn_mail_agent +0 -127
- data/bin/pwn_msf_postgres_login +0 -28
- data/bin/pwn_nessus_cloud_scan_crud +0 -345
- data/bin/pwn_nessus_cloud_vulnscan +0 -99
- data/bin/pwn_nexpose +0 -52
- data/bin/pwn_openvas_vulnscan +0 -102
- data/bin/pwn_owasp_zap_active_scan +0 -134
- data/bin/pwn_pastebin_sample_filter +0 -61
- data/bin/pwn_perimeter_recon +0 -326
- data/bin/pwn_phone +0 -131
- data/bin/pwn_sast +0 -183
- data/bin/pwn_serial_check_voicemail +0 -66
- data/bin/pwn_serial_msr206 +0 -175
- data/bin/pwn_serial_qualcomm_commands +0 -16
- data/bin/pwn_serial_son_micro_sm132_rfid +0 -132
- data/bin/pwn_shodan_search +0 -79
- data/bin/pwn_simple_http_server +0 -57
- data/bin/pwn_web_cache_deception +0 -233
- data/bin/pwn_www_checkip +0 -62
- data/bin/pwn_www_uri_buster +0 -237
- data/bin/pwn_xss_dom_vectors +0 -169
- data/build_pwn_gem.sh +0 -29
- data/documentation/PWN.png +0 -0
- data/documentation/PWN_Contributors_and_Users.png +0 -0
- data/documentation/fax-spectrogram.png +0 -0
- data/documentation/fax-waveform.png +0 -0
- data/documentation/pwn_android_war_dialer_session.png +0 -0
- data/documentation/pwn_install.png +0 -0
- data/documentation/pwn_wallpaper.jpg +0 -0
- data/documentation/ringing-spectrogram.png +0 -0
- data/documentation/ringing-waveform.png +0 -0
- data/etc/systemd/msfrpcd.service +0 -12
- data/etc/systemd/openvas.service +0 -14
- data/etc/userland/aws/apache2/jenkins_443.conf +0 -90
- data/etc/userland/aws/apache2/jenkins_80.conf +0 -7
- data/etc/userland/aws/apache2/openvas_443.conf +0 -87
- data/etc/userland/aws/apache2/openvas_80.conf +0 -7
- data/etc/userland/aws/apache2/sast_443.conf +0 -87
- data/etc/userland/aws/apache2/sast_80.conf +0 -9
- data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/aws/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/aws/jenkins/jenkins +0 -81
- data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/aws/vagrant.yaml.EXAMPLE +0 -35
- data/etc/userland/docker/apache2/jenkins_443.conf +0 -90
- data/etc/userland/docker/apache2/jenkins_80.conf +0 -7
- data/etc/userland/docker/apache2/openvas_443.conf +0 -87
- data/etc/userland/docker/apache2/openvas_80.conf +0 -7
- data/etc/userland/docker/apache2/sast_443.conf +0 -87
- data/etc/userland/docker/apache2/sast_80.conf +0 -9
- data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/docker/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/docker/jenkins/jenkins +0 -81
- data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/qemu/apache2/jenkins_443.conf +0 -90
- data/etc/userland/qemu/apache2/jenkins_80.conf +0 -7
- data/etc/userland/qemu/apache2/openvas_443.conf +0 -87
- data/etc/userland/qemu/apache2/openvas_80.conf +0 -7
- data/etc/userland/qemu/apache2/sast_443.conf +0 -87
- data/etc/userland/qemu/apache2/sast_80.conf +0 -9
- data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/qemu/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/qemu/jenkins/jenkins +0 -81
- data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/ruby-gem/apache2/jenkins_443.conf +0 -90
- data/etc/userland/ruby-gem/apache2/jenkins_80.conf +0 -7
- data/etc/userland/ruby-gem/apache2/openvas_443.conf +0 -87
- data/etc/userland/ruby-gem/apache2/openvas_80.conf +0 -7
- data/etc/userland/ruby-gem/apache2/sast_443.conf +0 -87
- data/etc/userland/ruby-gem/apache2/sast_80.conf +0 -9
- data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/ruby-gem/jenkins/jenkins +0 -81
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/virtualbox/apache2/jenkins_443.conf +0 -90
- data/etc/userland/virtualbox/apache2/jenkins_80.conf +0 -7
- data/etc/userland/virtualbox/apache2/openvas_443.conf +0 -87
- data/etc/userland/virtualbox/apache2/openvas_80.conf +0 -7
- data/etc/userland/virtualbox/apache2/sast_443.conf +0 -87
- data/etc/userland/virtualbox/apache2/sast_80.conf +0 -9
- data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/virtualbox/jenkins/jenkins +0 -81
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/vmware/apache2/jenkins_443.conf +0 -90
- data/etc/userland/vmware/apache2/jenkins_80.conf +0 -7
- data/etc/userland/vmware/apache2/openvas_443.conf +0 -87
- data/etc/userland/vmware/apache2/openvas_80.conf +0 -7
- data/etc/userland/vmware/apache2/sast_443.conf +0 -87
- data/etc/userland/vmware/apache2/sast_80.conf +0 -9
- data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +0 -9
- data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +0 -29
- data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +0 -3
- data/etc/userland/vmware/jenkins/inject_build_envs.sh +0 -15
- data/etc/userland/vmware/jenkins/jenkins +0 -81
- data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +0 -298
- data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +0 -462
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +0 -35
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +0 -44
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +0 -35
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +0 -45
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +0 -71
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +0 -56
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +0 -59
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +0 -45
- data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +0 -43
- data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +0 -42
- data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +0 -5
- data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +0 -2
- data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +0 -14
- data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +0 -8
- data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +0 -9
- data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +0 -2
- data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +0 -8
- data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +0 -5
- data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +0 -4
- data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +0 -15
- data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +0 -3
- data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +0 -2
- data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +0 -52
- data/etc/userland/vmware/vagrant.yaml.EXAMPLE +0 -5
- data/find_latest_gem_versions_per_Gemfile.sh +0 -11
- data/git_commit_test_reinit_gem.sh +0 -37
- data/install.sh +0 -176
- data/lib/pwn/aws/acm.rb +0 -92
- data/lib/pwn/aws/api_gateway.rb +0 -92
- data/lib/pwn/aws/app_stream.rb +0 -92
- data/lib/pwn/aws/application_auto_scaling.rb +0 -92
- data/lib/pwn/aws/application_discovery_service.rb +0 -92
- data/lib/pwn/aws/auto_scaling.rb +0 -92
- data/lib/pwn/aws/batch.rb +0 -92
- data/lib/pwn/aws/budgets.rb +0 -92
- data/lib/pwn/aws/cloud_formation.rb +0 -92
- data/lib/pwn/aws/cloud_front.rb +0 -92
- data/lib/pwn/aws/cloud_hsm.rb +0 -92
- data/lib/pwn/aws/cloud_search.rb +0 -92
- data/lib/pwn/aws/cloud_search_domain.rb +0 -92
- data/lib/pwn/aws/cloud_trail.rb +0 -92
- data/lib/pwn/aws/cloud_watch.rb +0 -92
- data/lib/pwn/aws/cloud_watch_events.rb +0 -92
- data/lib/pwn/aws/cloud_watch_logs.rb +0 -92
- data/lib/pwn/aws/code_build.rb +0 -92
- data/lib/pwn/aws/code_commit.rb +0 -92
- data/lib/pwn/aws/code_deploy.rb +0 -92
- data/lib/pwn/aws/code_pipeline.rb +0 -92
- data/lib/pwn/aws/cognito_identity.rb +0 -92
- data/lib/pwn/aws/cognito_identity_provider.rb +0 -92
- data/lib/pwn/aws/cognito_sync.rb +0 -92
- data/lib/pwn/aws/config_service.rb +0 -92
- data/lib/pwn/aws/data_pipleline.rb +0 -92
- data/lib/pwn/aws/database_migration_service.rb +0 -92
- data/lib/pwn/aws/device_farm.rb +0 -92
- data/lib/pwn/aws/direct_connect.rb +0 -92
- data/lib/pwn/aws/directory_service.rb +0 -92
- data/lib/pwn/aws/dynamo_db.rb +0 -92
- data/lib/pwn/aws/dynamo_db_streams.rb +0 -92
- data/lib/pwn/aws/ec2.rb +0 -92
- data/lib/pwn/aws/ecr.rb +0 -92
- data/lib/pwn/aws/ecs.rb +0 -92
- data/lib/pwn/aws/efs.rb +0 -92
- data/lib/pwn/aws/elasti_cache.rb +0 -92
- data/lib/pwn/aws/elastic_beanstalk.rb +0 -89
- data/lib/pwn/aws/elastic_load_balancing.rb +0 -92
- data/lib/pwn/aws/elastic_load_balancing_v2.rb +0 -92
- data/lib/pwn/aws/elastic_transcoder.rb +0 -92
- data/lib/pwn/aws/elasticsearch_service.rb +0 -92
- data/lib/pwn/aws/emr.rb +0 -92
- data/lib/pwn/aws/firehose.rb +0 -92
- data/lib/pwn/aws/game_lift.rb +0 -92
- data/lib/pwn/aws/glacier.rb +0 -92
- data/lib/pwn/aws/health.rb +0 -92
- data/lib/pwn/aws/iam.rb +0 -92
- data/lib/pwn/aws/import_export.rb +0 -92
- data/lib/pwn/aws/inspector.rb +0 -92
- data/lib/pwn/aws/iot.rb +0 -92
- data/lib/pwn/aws/iot_data_plane.rb +0 -92
- data/lib/pwn/aws/kinesis.rb +0 -92
- data/lib/pwn/aws/kinesis_analytics.rb +0 -92
- data/lib/pwn/aws/kms.rb +0 -92
- data/lib/pwn/aws/lambda.rb +0 -92
- data/lib/pwn/aws/lambda_preview.rb +0 -92
- data/lib/pwn/aws/lex.rb +0 -92
- data/lib/pwn/aws/lightsail.rb +0 -92
- data/lib/pwn/aws/machine_learning.rb +0 -92
- data/lib/pwn/aws/marketplace_commerce_analytics.rb +0 -92
- data/lib/pwn/aws/marketplace_metering.rb +0 -92
- data/lib/pwn/aws/ops_works.rb +0 -92
- data/lib/pwn/aws/ops_works_cm.rb +0 -92
- data/lib/pwn/aws/pinpoint.rb +0 -92
- data/lib/pwn/aws/polly.rb +0 -92
- data/lib/pwn/aws/rds.rb +0 -92
- data/lib/pwn/aws/redshift.rb +0 -92
- data/lib/pwn/aws/rekognition.rb +0 -92
- data/lib/pwn/aws/route53.rb +0 -92
- data/lib/pwn/aws/route53_domains.rb +0 -92
- data/lib/pwn/aws/s3.rb +0 -92
- data/lib/pwn/aws/service_catalog.rb +0 -92
- data/lib/pwn/aws/ses.rb +0 -92
- data/lib/pwn/aws/shield.rb +0 -92
- data/lib/pwn/aws/simple_db.rb +0 -92
- data/lib/pwn/aws/sms.rb +0 -92
- data/lib/pwn/aws/snowball.rb +0 -92
- data/lib/pwn/aws/sns.rb +0 -92
- data/lib/pwn/aws/sqs.rb +0 -92
- data/lib/pwn/aws/ssm.rb +0 -92
- data/lib/pwn/aws/states.rb +0 -92
- data/lib/pwn/aws/storage_gateway.rb +0 -92
- data/lib/pwn/aws/sts.rb +0 -63
- data/lib/pwn/aws/support.rb +0 -92
- data/lib/pwn/aws/swf.rb +0 -92
- data/lib/pwn/aws/waf.rb +0 -92
- data/lib/pwn/aws/waf_regional.rb +0 -92
- data/lib/pwn/aws/workspaces.rb +0 -92
- data/lib/pwn/aws/x_ray.rb +0 -92
- data/lib/pwn/aws.rb +0 -105
- data/lib/pwn/banner/bubble.rb +0 -42
- data/lib/pwn/banner/matrix.rb +0 -199
- data/lib/pwn/banner/ninja.rb +0 -54
- data/lib/pwn/banner/off_the_air.rb +0 -73
- data/lib/pwn/banner/pirate.rb +0 -62
- data/lib/pwn/banner.rb +0 -78
- data/lib/pwn/ffi.rb +0 -16
- data/lib/pwn/plugins/android.rb +0 -1616
- data/lib/pwn/plugins/ansible_vault.rb +0 -75
- data/lib/pwn/plugins/authentication_helper.rb +0 -79
- data/lib/pwn/plugins/baresip.rb +0 -704
- data/lib/pwn/plugins/basic_auth.rb +0 -63
- data/lib/pwn/plugins/beef.rb +0 -309
- data/lib/pwn/plugins/burp_suite.rb +0 -344
- data/lib/pwn/plugins/bus_pirate.rb +0 -148
- data/lib/pwn/plugins/char.rb +0 -459
- data/lib/pwn/plugins/credit_card.rb +0 -68
- data/lib/pwn/plugins/dao_ldap.rb +0 -131
- data/lib/pwn/plugins/dao_mongo.rb +0 -96
- data/lib/pwn/plugins/dao_postgres.rb +0 -224
- data/lib/pwn/plugins/dao_sqlite3.rb +0 -125
- data/lib/pwn/plugins/defect_dojo.rb +0 -759
- data/lib/pwn/plugins/detect_os.rb +0 -40
- data/lib/pwn/plugins/ein.rb +0 -141
- data/lib/pwn/plugins/file_fu.rb +0 -73
- data/lib/pwn/plugins/fuzz.rb +0 -206
- data/lib/pwn/plugins/git.rb +0 -166
- data/lib/pwn/plugins/github.rb +0 -136
- data/lib/pwn/plugins/hacker_one.rb +0 -152
- data/lib/pwn/plugins/http_intercept_helper.rb +0 -122
- data/lib/pwn/plugins/ibm_appscan.rb +0 -927
- data/lib/pwn/plugins/ip_info.rb +0 -100
- data/lib/pwn/plugins/jenkins.rb +0 -545
- data/lib/pwn/plugins/json_pathify.rb +0 -46
- data/lib/pwn/plugins/mail_agent.rb +0 -344
- data/lib/pwn/plugins/metasploit.rb +0 -151
- data/lib/pwn/plugins/msr206.rb +0 -1193
- data/lib/pwn/plugins/nessus_cloud.rb +0 -840
- data/lib/pwn/plugins/nexpose_vuln_scan.rb +0 -356
- data/lib/pwn/plugins/nmap_it.rb +0 -100
- data/lib/pwn/plugins/oauth2.rb +0 -67
- data/lib/pwn/plugins/ocr.rb +0 -43
- data/lib/pwn/plugins/open_ai.rb +0 -239
- data/lib/pwn/plugins/openvas.rb +0 -308
- data/lib/pwn/plugins/owasp_zap.rb +0 -550
- data/lib/pwn/plugins/packet.rb +0 -1313
- data/lib/pwn/plugins/pdf_parse.rb +0 -53
- data/lib/pwn/plugins/pony.rb +0 -282
- data/lib/pwn/plugins/pwn_logger.rb +0 -46
- data/lib/pwn/plugins/rabbit_mq.rb +0 -70
- data/lib/pwn/plugins/rfidler.rb +0 -56
- data/lib/pwn/plugins/serial.rb +0 -315
- data/lib/pwn/plugins/shodan.rb +0 -566
- data/lib/pwn/plugins/slack_client.rb +0 -104
- data/lib/pwn/plugins/sock.rb +0 -188
- data/lib/pwn/plugins/son_micro_rfid.rb +0 -504
- data/lib/pwn/plugins/spider.rb +0 -80
- data/lib/pwn/plugins/ssn.rb +0 -52
- data/lib/pwn/plugins/thread_pool.rb +0 -88
- data/lib/pwn/plugins/transparent_browser.rb +0 -423
- data/lib/pwn/plugins/twitter_api.rb +0 -148
- data/lib/pwn/plugins/uri_scheme.rb +0 -328
- data/lib/pwn/plugins/vsphere.rb +0 -82
- data/lib/pwn/plugins.rb +0 -70
- data/lib/pwn/reports/fuzz.rb +0 -272
- data/lib/pwn/reports/phone.rb +0 -312
- data/lib/pwn/reports/sast.rb +0 -311
- data/lib/pwn/reports/uri_buster.rb +0 -248
- data/lib/pwn/reports.rb +0 -23
- data/lib/pwn/sast/amqp_connect_as_guest.rb +0 -143
- data/lib/pwn/sast/apache_file_system_util_api.rb +0 -144
- data/lib/pwn/sast/aws.rb +0 -145
- data/lib/pwn/sast/banned_function_calls_c.rb +0 -272
- data/lib/pwn/sast/base64.rb +0 -143
- data/lib/pwn/sast/beef_hook.rb +0 -143
- data/lib/pwn/sast/cmd_execution_java.rb +0 -145
- data/lib/pwn/sast/cmd_execution_python.rb +0 -147
- data/lib/pwn/sast/cmd_execution_ruby.rb +0 -155
- data/lib/pwn/sast/cmd_execution_scala.rb +0 -145
- data/lib/pwn/sast/csrf.rb +0 -142
- data/lib/pwn/sast/deserial_java.rb +0 -150
- data/lib/pwn/sast/emoticon.rb +0 -151
- data/lib/pwn/sast/eval.rb +0 -144
- data/lib/pwn/sast/factory.rb +0 -145
- data/lib/pwn/sast/http_authorization_header.rb +0 -148
- data/lib/pwn/sast/inner_html.rb +0 -144
- data/lib/pwn/sast/keystore.rb +0 -143
- data/lib/pwn/sast/location_hash.rb +0 -144
- data/lib/pwn/sast/log4j.rb +0 -143
- data/lib/pwn/sast/logger.rb +0 -158
- data/lib/pwn/sast/outer_html.rb +0 -144
- data/lib/pwn/sast/password.rb +0 -143
- data/lib/pwn/sast/php_input_mechanisms.rb +0 -149
- data/lib/pwn/sast/php_type_juggling.rb +0 -144
- data/lib/pwn/sast/pom_version.rb +0 -152
- data/lib/pwn/sast/port.rb +0 -150
- data/lib/pwn/sast/private_key.rb +0 -143
- data/lib/pwn/sast/redirect.rb +0 -145
- data/lib/pwn/sast/redos.rb +0 -150
- data/lib/pwn/sast/shell.rb +0 -151
- data/lib/pwn/sast/signature.rb +0 -143
- data/lib/pwn/sast/sql.rb +0 -147
- data/lib/pwn/sast/ssl.rb +0 -147
- data/lib/pwn/sast/sudo.rb +0 -143
- data/lib/pwn/sast/task_tag.rb +0 -157
- data/lib/pwn/sast/throw_errors.rb +0 -143
- data/lib/pwn/sast/token.rb +0 -145
- data/lib/pwn/sast/version.rb +0 -144
- data/lib/pwn/sast/window_location_hash.rb +0 -143
- data/lib/pwn/sast.rb +0 -56
- data/lib/pwn/version.rb +0 -5
- data/lib/pwn/www/app_cobalt_io.rb +0 -137
- data/lib/pwn/www/bing.rb +0 -89
- data/lib/pwn/www/bug_crowd.rb +0 -134
- data/lib/pwn/www/checkip.rb +0 -71
- data/lib/pwn/www/coinbase_pro.rb +0 -134
- data/lib/pwn/www/duckduckgo.rb +0 -111
- data/lib/pwn/www/facebook.rb +0 -122
- data/lib/pwn/www/google.rb +0 -114
- data/lib/pwn/www/hacker_one.rb +0 -122
- data/lib/pwn/www/linkedin.rb +0 -122
- data/lib/pwn/www/pandora.rb +0 -122
- data/lib/pwn/www/pastebin.rb +0 -84
- data/lib/pwn/www/paypal.rb +0 -204
- data/lib/pwn/www/synack.rb +0 -134
- data/lib/pwn/www/torch.rb +0 -106
- data/lib/pwn/www/trading_view.rb +0 -125
- data/lib/pwn/www/twitter.rb +0 -134
- data/lib/pwn/www/uber.rb +0 -122
- data/lib/pwn/www/upwork.rb +0 -122
- data/lib/pwn/www/youtube.rb +0 -89
- data/lib/pwn/www.rb +0 -35
- data/lib/pwn.rb +0 -25
- data/packer/daemons/msfrpcd.rb +0 -64
- data/packer/daemons/openvas.rb +0 -51
- data/packer/deploy_docker_containers.sh +0 -9
- data/packer/deploy_packer_box.sh +0 -87
- data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +0 -44
- data/packer/docker/kali_rolling_docker_pwn_prototyper.json +0 -48
- data/packer/docker/kali_rolling_docker_pwn_sast.json +0 -44
- data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +0 -46
- data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +0 -34
- data/packer/http/kali_rolling_preseed.cfg +0 -81
- data/packer/kali_rolling_aws_ami.json +0 -137
- data/packer/kali_rolling_qemu_kvm.json +0 -157
- data/packer/kali_rolling_virtualbox.json +0 -184
- data/packer/kali_rolling_vmware.json +0 -165
- data/packer/packer_secrets.json.EXAMPLE +0 -9
- data/packer/provisioners/PayloadsAllTheThings.sh +0 -5
- data/packer/provisioners/SecLists.sh +0 -5
- data/packer/provisioners/afl.sh +0 -28
- data/packer/provisioners/aliases.rb +0 -18
- data/packer/provisioners/amass.sh +0 -5
- data/packer/provisioners/android.sh +0 -18
- data/packer/provisioners/ansible.sh +0 -5
- data/packer/provisioners/apache2.sh +0 -24
- data/packer/provisioners/arachni.sh +0 -28
- data/packer/provisioners/awscli.sh +0 -5
- data/packer/provisioners/bashrc.sh +0 -13
- data/packer/provisioners/beef.rb +0 -23
- data/packer/provisioners/burpsuite.sh +0 -23
- data/packer/provisioners/chrome.sh +0 -11
- data/packer/provisioners/coreutils.sh +0 -6
- data/packer/provisioners/curl.sh +0 -6
- data/packer/provisioners/docker.sh +0 -43
- data/packer/provisioners/docker_bashrc.sh +0 -2
- data/packer/provisioners/docker_rvm.sh +0 -22
- data/packer/provisioners/eyewitness.sh +0 -5
- data/packer/provisioners/ffmpeg.sh +0 -6
- data/packer/provisioners/firefox.sh +0 -7
- data/packer/provisioners/fuzzdb.sh +0 -5
- data/packer/provisioners/gdb.sh +0 -5
- data/packer/provisioners/geckodriver.sh +0 -9
- data/packer/provisioners/ghidra.sh +0 -5
- data/packer/provisioners/git.sh +0 -6
- data/packer/provisioners/init_image.sh +0 -103
- data/packer/provisioners/install_vagrant_ssh_key.sh +0 -15
- data/packer/provisioners/jenkins.sh +0 -62
- data/packer/provisioners/metasploit.rb +0 -59
- data/packer/provisioners/nmap_all_live_hosts.sh +0 -8
- data/packer/provisioners/openvas.sh +0 -23
- data/packer/provisioners/openvas_wrappers.sh +0 -4
- data/packer/provisioners/openvpn.sh +0 -7
- data/packer/provisioners/peda.sh +0 -4
- data/packer/provisioners/phantomjs.rb +0 -28
- data/packer/provisioners/phantomjs_wrapper.sh +0 -22
- data/packer/provisioners/post_install.sh +0 -41
- data/packer/provisioners/postgresql.sh +0 -49
- data/packer/provisioners/preeny.sh +0 -8
- data/packer/provisioners/pwn.sh +0 -100
- data/packer/provisioners/pwntools.sh +0 -13
- data/packer/provisioners/radamsa.sh +0 -7
- data/packer/provisioners/rc.local.sh +0 -16
- data/packer/provisioners/reboot_os.sh +0 -7
- data/packer/provisioners/ruby.sh +0 -35
- data/packer/provisioners/rvm.sh +0 -31
- data/packer/provisioners/scapy.sh +0 -5
- data/packer/provisioners/scout2.sh +0 -5
- data/packer/provisioners/sox.sh +0 -5
- data/packer/provisioners/ssllabs-scan.sh +0 -9
- data/packer/provisioners/strace.sh +0 -5
- data/packer/provisioners/sublist3r.sh +0 -5
- data/packer/provisioners/terminator.sh +0 -5
- data/packer/provisioners/toggle_tor.sh +0 -2
- data/packer/provisioners/tor.sh +0 -5
- data/packer/provisioners/twinkle.sh +0 -6
- data/packer/provisioners/update_os.sh +0 -108
- data/packer/provisioners/upload_globals.sh +0 -63
- data/packer/provisioners/vim.sh +0 -19
- data/packer/provisioners/virtualbox_guest_additions.sh +0 -20
- data/packer/provisioners/vmware_tools.sh +0 -8
- data/packer/provisioners/wpscan.rb +0 -23
- data/packer/provisioners/xrdp.sh +0 -22
- data/packer/provisioners/zzuf.sh +0 -5
- data/pwn.gemspec +0 -55
- data/reinstall_pwn_gemset.sh +0 -27
- data/spec/lib/pwn/aws/acm_spec.rb +0 -15
- data/spec/lib/pwn/aws/api_gateway_spec.rb +0 -15
- data/spec/lib/pwn/aws/app_stream_spec.rb +0 -15
- data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +0 -15
- data/spec/lib/pwn/aws/application_discovery_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/auto_scaling_spec.rb +0 -15
- data/spec/lib/pwn/aws/batch_spec.rb +0 -15
- data/spec/lib/pwn/aws/budgets_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_formation_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_front_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_hsm_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_search_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_trail_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +0 -15
- data/spec/lib/pwn/aws/cloud_watch_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_build_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_commit_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_deploy_spec.rb +0 -15
- data/spec/lib/pwn/aws/code_pipeline_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_identity_spec.rb +0 -15
- data/spec/lib/pwn/aws/cognito_sync_spec.rb +0 -15
- data/spec/lib/pwn/aws/config_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/data_pipleline_spec.rb +0 -15
- data/spec/lib/pwn/aws/database_migration_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/device_farm_spec.rb +0 -15
- data/spec/lib/pwn/aws/direct_connect_spec.rb +0 -15
- data/spec/lib/pwn/aws/directory_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/dynamo_db_spec.rb +0 -15
- data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +0 -15
- data/spec/lib/pwn/aws/ec2_spec.rb +0 -15
- data/spec/lib/pwn/aws/ecr_spec.rb +0 -15
- data/spec/lib/pwn/aws/ecs_spec.rb +0 -15
- data/spec/lib/pwn/aws/efs_spec.rb +0 -15
- data/spec/lib/pwn/aws/elasti_cache_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +0 -15
- data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +0 -15
- data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +0 -15
- data/spec/lib/pwn/aws/emr_spec.rb +0 -15
- data/spec/lib/pwn/aws/firehose_spec.rb +0 -15
- data/spec/lib/pwn/aws/game_lift_spec.rb +0 -15
- data/spec/lib/pwn/aws/glacier_spec.rb +0 -15
- data/spec/lib/pwn/aws/health_spec.rb +0 -15
- data/spec/lib/pwn/aws/iam_spec.rb +0 -15
- data/spec/lib/pwn/aws/import_export_spec.rb +0 -15
- data/spec/lib/pwn/aws/inspector_spec.rb +0 -15
- data/spec/lib/pwn/aws/iot_data_plane_spec.rb +0 -15
- data/spec/lib/pwn/aws/iot_spec.rb +0 -15
- data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +0 -15
- data/spec/lib/pwn/aws/kinesis_spec.rb +0 -15
- data/spec/lib/pwn/aws/kms_spec.rb +0 -15
- data/spec/lib/pwn/aws/lambda_preview_spec.rb +0 -15
- data/spec/lib/pwn/aws/lambda_spec.rb +0 -15
- data/spec/lib/pwn/aws/lex_spec.rb +0 -15
- data/spec/lib/pwn/aws/lightsail_spec.rb +0 -15
- data/spec/lib/pwn/aws/machine_learning_spec.rb +0 -15
- data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +0 -15
- data/spec/lib/pwn/aws/marketplace_metering_spec.rb +0 -15
- data/spec/lib/pwn/aws/ops_works_cm_spec.rb +0 -15
- data/spec/lib/pwn/aws/ops_works_spec.rb +0 -15
- data/spec/lib/pwn/aws/pinpoint_spec.rb +0 -15
- data/spec/lib/pwn/aws/polly_spec.rb +0 -15
- data/spec/lib/pwn/aws/rds_spec.rb +0 -15
- data/spec/lib/pwn/aws/redshift_spec.rb +0 -15
- data/spec/lib/pwn/aws/rekognition_spec.rb +0 -15
- data/spec/lib/pwn/aws/route53_domains_spec.rb +0 -15
- data/spec/lib/pwn/aws/route53_spec.rb +0 -15
- data/spec/lib/pwn/aws/s3_spec.rb +0 -15
- data/spec/lib/pwn/aws/service_catalog_spec.rb +0 -15
- data/spec/lib/pwn/aws/ses_spec.rb +0 -15
- data/spec/lib/pwn/aws/shield_spec.rb +0 -15
- data/spec/lib/pwn/aws/simple_db_spec.rb +0 -15
- data/spec/lib/pwn/aws/sms_spec.rb +0 -15
- data/spec/lib/pwn/aws/snowball_spec.rb +0 -15
- data/spec/lib/pwn/aws/sns_spec.rb +0 -15
- data/spec/lib/pwn/aws/sqs_spec.rb +0 -15
- data/spec/lib/pwn/aws/ssm_spec.rb +0 -15
- data/spec/lib/pwn/aws/states_spec.rb +0 -15
- data/spec/lib/pwn/aws/storage_gateway_spec.rb +0 -15
- data/spec/lib/pwn/aws/sts_spec.rb +0 -15
- data/spec/lib/pwn/aws/support_spec.rb +0 -15
- data/spec/lib/pwn/aws/swf_spec.rb +0 -15
- data/spec/lib/pwn/aws/waf_regional_spec.rb +0 -15
- data/spec/lib/pwn/aws/waf_spec.rb +0 -15
- data/spec/lib/pwn/aws/workspaces_spec.rb +0 -15
- data/spec/lib/pwn/aws/x_ray_spec.rb +0 -15
- data/spec/lib/pwn/aws_spec.rb +0 -10
- data/spec/lib/pwn/banner/bubble_spec.rb +0 -20
- data/spec/lib/pwn/banner/matrix_spec.rb +0 -20
- data/spec/lib/pwn/banner/ninja_spec.rb +0 -20
- data/spec/lib/pwn/banner/off_the_air_spec.rb +0 -20
- data/spec/lib/pwn/banner/pirate_spec.rb +0 -20
- data/spec/lib/pwn/banner_spec.rb +0 -15
- data/spec/lib/pwn/ffi_spec.rb +0 -10
- data/spec/lib/pwn/plugins/android_spec.rb +0 -15
- data/spec/lib/pwn/plugins/authentication_helper_spec.rb +0 -15
- data/spec/lib/pwn/plugins/basic_auth_spec.rb +0 -15
- data/spec/lib/pwn/plugins/beef_spec.rb +0 -15
- data/spec/lib/pwn/plugins/burp_suite_spec.rb +0 -15
- data/spec/lib/pwn/plugins/bus_pirate_spec.rb +0 -15
- data/spec/lib/pwn/plugins/char_spec.rb +0 -15
- data/spec/lib/pwn/plugins/credit_card_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_ldap_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_mongo_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_postgres_spec.rb +0 -15
- data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +0 -15
- data/spec/lib/pwn/plugins/defect_dojo_spec.rb +0 -15
- data/spec/lib/pwn/plugins/detect_os_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ein_spec.rb +0 -15
- data/spec/lib/pwn/plugins/file_fu_spec.rb +0 -15
- data/spec/lib/pwn/plugins/fuzz_spec.rb +0 -15
- data/spec/lib/pwn/plugins/git_spec.rb +0 -15
- data/spec/lib/pwn/plugins/github_spec.rb +0 -15
- data/spec/lib/pwn/plugins/hacker_one_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ibm_appscan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ip_info_spec.rb +0 -15
- data/spec/lib/pwn/plugins/jenkins_spec.rb +0 -15
- data/spec/lib/pwn/plugins/json_pathify_spec.rb +0 -15
- data/spec/lib/pwn/plugins/mail_agent_spec.rb +0 -15
- data/spec/lib/pwn/plugins/metasploit_spec.rb +0 -15
- data/spec/lib/pwn/plugins/msr206_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/nmap_it_spec.rb +0 -15
- data/spec/lib/pwn/plugins/oauth2_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ocr_spec.rb +0 -15
- data/spec/lib/pwn/plugins/openvas_spec.rb +0 -15
- data/spec/lib/pwn/plugins/owasp_zap_spec.rb +0 -15
- data/spec/lib/pwn/plugins/packet_spec.rb +0 -15
- data/spec/lib/pwn/plugins/pdf_parse_spec.rb +0 -15
- data/spec/lib/pwn/plugins/pony_spec.rb +0 -15
- data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +0 -15
- data/spec/lib/pwn/plugins/rfidler_spec.rb +0 -15
- data/spec/lib/pwn/plugins/serial_spec.rb +0 -15
- data/spec/lib/pwn/plugins/shodan_spec.rb +0 -15
- data/spec/lib/pwn/plugins/slack_client_spec.rb +0 -15
- data/spec/lib/pwn/plugins/sock_spec.rb +0 -15
- data/spec/lib/pwn/plugins/son_micro_rfid_spec.rb +0 -15
- data/spec/lib/pwn/plugins/spider_spec.rb +0 -15
- data/spec/lib/pwn/plugins/ssn_spec.rb +0 -15
- data/spec/lib/pwn/plugins/thread_pool_spec.rb +0 -15
- data/spec/lib/pwn/plugins/transparent_browser_spec.rb +0 -15
- data/spec/lib/pwn/plugins/twitter_api_spec.rb +0 -15
- data/spec/lib/pwn/plugins/uri_scheme_spec.rb +0 -15
- data/spec/lib/pwn/plugins/vsphere_spec.rb +0 -15
- data/spec/lib/pwn/plugins_spec.rb +0 -10
- data/spec/lib/pwn/reports/fuzz_spec.rb +0 -15
- data/spec/lib/pwn/reports/phone_spec.rb +0 -15
- data/spec/lib/pwn/reports/sast_spec.rb +0 -15
- data/spec/lib/pwn/reports/uri_buster_spec.rb +0 -15
- data/spec/lib/pwn/reports_spec.rb +0 -10
- data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +0 -25
- data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +0 -25
- data/spec/lib/pwn/sast/aws_spec.rb +0 -25
- data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +0 -25
- data/spec/lib/pwn/sast/base64_spec.rb +0 -25
- data/spec/lib/pwn/sast/beef_hook_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +0 -25
- data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +0 -25
- data/spec/lib/pwn/sast/csrf_spec.rb +0 -25
- data/spec/lib/pwn/sast/deserial_java_spec.rb +0 -25
- data/spec/lib/pwn/sast/emoticon_spec.rb +0 -25
- data/spec/lib/pwn/sast/eval_spec.rb +0 -25
- data/spec/lib/pwn/sast/factory_spec.rb +0 -25
- data/spec/lib/pwn/sast/http_authorization_header_spec.rb +0 -25
- data/spec/lib/pwn/sast/inner_html_spec.rb +0 -25
- data/spec/lib/pwn/sast/keystore_spec.rb +0 -25
- data/spec/lib/pwn/sast/location_hash_spec.rb +0 -25
- data/spec/lib/pwn/sast/log4j_spec.rb +0 -25
- data/spec/lib/pwn/sast/logger_spec.rb +0 -25
- data/spec/lib/pwn/sast/password_spec.rb +0 -25
- data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +0 -25
- data/spec/lib/pwn/sast/php_type_juggling_spec.rb +0 -25
- data/spec/lib/pwn/sast/pom_version_spec.rb +0 -25
- data/spec/lib/pwn/sast/port_spec.rb +0 -25
- data/spec/lib/pwn/sast/private_key_spec.rb +0 -25
- data/spec/lib/pwn/sast/redirect_spec.rb +0 -25
- data/spec/lib/pwn/sast/redos_spec.rb +0 -25
- data/spec/lib/pwn/sast/shell_spec.rb +0 -25
- data/spec/lib/pwn/sast/signature_spec.rb +0 -25
- data/spec/lib/pwn/sast/sql_spec.rb +0 -25
- data/spec/lib/pwn/sast/ssl_spec.rb +0 -25
- data/spec/lib/pwn/sast/sudo_spec.rb +0 -25
- data/spec/lib/pwn/sast/task_tag_spec.rb +0 -25
- data/spec/lib/pwn/sast/throw_errors_spec.rb +0 -25
- data/spec/lib/pwn/sast/token_spec.rb +0 -25
- data/spec/lib/pwn/sast/version_spec.rb +0 -25
- data/spec/lib/pwn/sast/window_location_hash_spec.rb +0 -25
- data/spec/lib/pwn/sast_spec.rb +0 -10
- data/spec/lib/pwn/www/app_cobalt_io_spec.rb +0 -15
- data/spec/lib/pwn/www/bing_spec.rb +0 -15
- data/spec/lib/pwn/www/bug_crowd.rb +0 -15
- data/spec/lib/pwn/www/checkip_spec.rb +0 -15
- data/spec/lib/pwn/www/coinbase_pro_spec.rb +0 -15
- data/spec/lib/pwn/www/duckduckgo_spec.rb +0 -15
- data/spec/lib/pwn/www/facebook_spec.rb +0 -15
- data/spec/lib/pwn/www/google_spec.rb +0 -15
- data/spec/lib/pwn/www/hacker_one_spec.rb +0 -15
- data/spec/lib/pwn/www/linkedin_spec.rb +0 -15
- data/spec/lib/pwn/www/pandora_spec.rb +0 -15
- data/spec/lib/pwn/www/pastebin_spec.rb +0 -15
- data/spec/lib/pwn/www/paypal_spec.rb +0 -15
- data/spec/lib/pwn/www/synack_spec.rb +0 -15
- data/spec/lib/pwn/www/torch_spec.rb +0 -15
- data/spec/lib/pwn/www/trading_view_spec.rb +0 -15
- data/spec/lib/pwn/www/twitter_spec.rb +0 -15
- data/spec/lib/pwn/www/uber_spec.rb +0 -15
- data/spec/lib/pwn/www/upwork_spec.rb +0 -15
- data/spec/lib/pwn/www/youtube_spec.rb +0 -15
- data/spec/lib/pwn/www_spec.rb +0 -10
- data/spec/lib/pwn_spec.rb +0 -10
- data/spec/spec_helper.rb +0 -3
- data/third_party/.gitkeep +0 -0
- data/update_pwn.sh +0 -9
- data/upgrade_ruby.sh +0 -42
- data/vagrant/provisioners/apache2.sh +0 -76
- data/vagrant/provisioners/beef.rb +0 -30
- data/vagrant/provisioners/burpsuite_pro.rb +0 -37
- data/vagrant/provisioners/exploit-db.sh +0 -2
- data/vagrant/provisioners/gem.sh +0 -4
- data/vagrant/provisioners/init_env.sh +0 -22
- data/vagrant/provisioners/jenkins.sh +0 -87
- data/vagrant/provisioners/jenkins_ssh-keygen.rb +0 -86
- data/vagrant/provisioners/kali_customize.rb +0 -130
- data/vagrant/provisioners/letsencrypt.rb +0 -35
- data/vagrant/provisioners/metasploit.rb +0 -25
- data/vagrant/provisioners/nmap_all_live_hosts.sh +0 -2
- data/vagrant/provisioners/openvas.sh +0 -23
- data/vagrant/provisioners/openvas_wrappers.sh +0 -2
- data/vagrant/provisioners/post_install.sh +0 -14
- data/vagrant/provisioners/postgres.sh +0 -22
- data/vagrant/provisioners/pwn.sh +0 -15
- data/vagrant/provisioners/rvm.sh +0 -18
- data/vagrant/provisioners/ssllabs-scan.sh +0 -10
- data/vagrant/provisioners/toggle_tor.sh +0 -2
- data/vagrant/provisioners/update_jenkins_plugins.rb +0 -30
- data/vagrant/provisioners/update_os.sh +0 -108
- data/vagrant/provisioners/upload_globals.sh +0 -63
- data/vagrant/provisioners/userland_fdisk.sh +0 -22
- data/vagrant/provisioners/userland_lvm.sh +0 -5
- data/vagrant/provisioners/wpscan.rb +0 -25
- data/vagrant_rsync_third_party.lst +0 -1
- data/vagrant_rsync_userland_template.lst +0 -8
@@ -1,927 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require 'nokogiri'
|
4
|
-
require 'wicked_pdf'
|
5
|
-
require 'fileutils'
|
6
|
-
require 'uri'
|
7
|
-
|
8
|
-
module PWN
|
9
|
-
module Plugins
|
10
|
-
# This plugin is used for interacting w/ IBM Appscan Enterprise using
|
11
|
-
# the 'rest' browser type of PWN::Plugins::TransparentBrowser.
|
12
|
-
# The IBM Appscan Spec in which this PWN module is based is located here:
|
13
|
-
# http://www-01.ibm.com/support/knowledgecenter/SSW2NF_9.0.0/com.ibm.ase.help.doc/topics/c_web_services.html?lang=en
|
14
|
-
module IBMAppscan
|
15
|
-
@@logger = PWN::Plugins::PWNLogger.create
|
16
|
-
|
17
|
-
# Supported Method Parameters::
|
18
|
-
# PWN::Plugins::IBMAppscan.login(
|
19
|
-
# appscan_ip: 'required host/ip of IBM Appscan Server',
|
20
|
-
# username: 'required username',
|
21
|
-
# password: 'optional password (will prompt if nil)'
|
22
|
-
# )
|
23
|
-
|
24
|
-
public_class_method def self.login(opts = {})
|
25
|
-
appscan_ip = opts[:appscan_ip]
|
26
|
-
username = opts[:username].to_s.scrub
|
27
|
-
base_appscan_api_uri = "https://#{appscan_ip}/ase/services".to_s.scrub
|
28
|
-
|
29
|
-
password = if opts[:password].nil?
|
30
|
-
PWN::Plugins::AuthenticationHelper.mask_password
|
31
|
-
else
|
32
|
-
opts[:password].to_s.scrub
|
33
|
-
end
|
34
|
-
|
35
|
-
@@logger.info("Logging into IBM Appscan Enterprise Server: #{appscan_ip}")
|
36
|
-
rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
|
37
|
-
response = rest_client.execute(
|
38
|
-
method: :post,
|
39
|
-
url: "#{base_appscan_api_uri}/login",
|
40
|
-
payload: "userid=#{username}&password=#{password}",
|
41
|
-
verify_ssl: false
|
42
|
-
)
|
43
|
-
|
44
|
-
# Return array containing the Appscan Server host/ip & post-authenticated Appscan REST cookie
|
45
|
-
appscan_ip = URI.parse(response.args[:url]).host
|
46
|
-
appscan_cookie = "asc_session_id=#{response.cookies['asc_session_id']}; ASP.NET_SessionId=#{response.cookies['ASP.NET_SessionId']}"
|
47
|
-
appscan_obj = {}
|
48
|
-
appscan_obj[:appscan_ip] = appscan_ip
|
49
|
-
appscan_obj[:cookie] = appscan_cookie
|
50
|
-
appscan_obj[:raw_response] = response
|
51
|
-
appscan_obj[:xml_response] = Nokogiri::XML(response)
|
52
|
-
appscan_obj[:build] = appscan_obj[:xml_response].xpath(
|
53
|
-
'/xmlns:version/xmlns:build'
|
54
|
-
).text
|
55
|
-
appscan_obj[:dbversion] = appscan_obj[:xml_response].xpath(
|
56
|
-
'/xmlns:version/xmlns:dbversion'
|
57
|
-
).text
|
58
|
-
appscan_obj[:rules_version] = appscan_obj[:xml_response].xpath(
|
59
|
-
'/xmlns:version/xmlns:rules-version'
|
60
|
-
).text
|
61
|
-
appscan_obj[:username] = appscan_obj[:xml_response].xpath(
|
62
|
-
'/xmlns:version/xmlns:user-name'
|
63
|
-
).text
|
64
|
-
appscan_obj[:password] = Base64.strict_encode64(password)
|
65
|
-
appscan_obj[:logged_in] = true
|
66
|
-
|
67
|
-
appscan_obj
|
68
|
-
rescue StandardError => e
|
69
|
-
raise e
|
70
|
-
end
|
71
|
-
|
72
|
-
# Supported Method Parameters::
|
73
|
-
# appscan_rest_call(
|
74
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
75
|
-
# http_method: 'optional HTTP method (defaults to GET)
|
76
|
-
# rest_call: 'required rest call to make per the schema',
|
77
|
-
# http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'
|
78
|
-
# )
|
79
|
-
|
80
|
-
private_class_method def self.appscan_rest_call(opts = {})
|
81
|
-
appscan_obj = opts[:appscan_obj]
|
82
|
-
http_method = if opts[:http_method].nil?
|
83
|
-
:get
|
84
|
-
else
|
85
|
-
opts[:http_method].to_s.scrub.to_sym
|
86
|
-
end
|
87
|
-
rest_call = opts[:rest_call].to_s.scrub
|
88
|
-
http_body = opts[:http_body].to_s.scrub
|
89
|
-
appscan_ip = appscan_obj[:appscan_ip].to_s.scrub
|
90
|
-
appscan_cookie = appscan_obj[:cookie]
|
91
|
-
base_appscan_api_uri = "https://#{appscan_ip}/ase/services".to_s.scrub
|
92
|
-
retry_count = 3
|
93
|
-
|
94
|
-
rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
|
95
|
-
|
96
|
-
case http_method
|
97
|
-
when :get
|
98
|
-
response = rest_client.execute(
|
99
|
-
method: :get,
|
100
|
-
url: "#{base_appscan_api_uri}/#{rest_call}",
|
101
|
-
headers: { cookie: appscan_cookie },
|
102
|
-
verify_ssl: false
|
103
|
-
)
|
104
|
-
|
105
|
-
when :post
|
106
|
-
response = rest_client.execute(
|
107
|
-
method: :post,
|
108
|
-
url: "#{base_appscan_api_uri}/#{rest_call}",
|
109
|
-
headers: { cookie: appscan_cookie },
|
110
|
-
payload: http_body,
|
111
|
-
verify_ssl: false
|
112
|
-
)
|
113
|
-
|
114
|
-
else
|
115
|
-
return @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
|
116
|
-
end
|
117
|
-
response
|
118
|
-
rescue StandardError => e
|
119
|
-
if (e.message == '401 Unauthorized') && retry_count.positive? && appscan_obj[:logged_in]
|
120
|
-
# Try logging back in to refresh the connection
|
121
|
-
@@logger.warn("Got Response: #{e}...Attempting to Re-Authenticate; Retries left #{retry_count}")
|
122
|
-
n_appscan_obj = login(
|
123
|
-
appscan_ip: appscan_obj[:appscan_ip],
|
124
|
-
username: appscan_obj[:username],
|
125
|
-
password: Base64.decode64(appscan_obj[:password])
|
126
|
-
)
|
127
|
-
appscan_cookie = n_appscan_obj[:cookie]
|
128
|
-
# "copy" the new app obj over the old app obj
|
129
|
-
appscan_obj.each_key do |k|
|
130
|
-
appscan_obj[k] = n_appscan_obj[k]
|
131
|
-
end
|
132
|
-
retry_count -= 1
|
133
|
-
retry
|
134
|
-
end
|
135
|
-
raise e
|
136
|
-
end
|
137
|
-
|
138
|
-
# Supported Method Parameters::
|
139
|
-
# PWN::Plugins::IBMAppscan.schema(
|
140
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
141
|
-
# )
|
142
|
-
|
143
|
-
public_class_method def self.schema(opts = {})
|
144
|
-
appscan_obj = opts[:appscan_obj]
|
145
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'schema')
|
146
|
-
schema = {}
|
147
|
-
schema[:raw_response] = response
|
148
|
-
schema[:xml_response] = Nokogiri::XML(response)
|
149
|
-
schema
|
150
|
-
rescue StandardError => e
|
151
|
-
raise e
|
152
|
-
end
|
153
|
-
|
154
|
-
# Supported Method Parameters::
|
155
|
-
# PWN::Plugins::IBMAppscan.version(
|
156
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
157
|
-
# )
|
158
|
-
|
159
|
-
public_class_method def self.version(opts = {})
|
160
|
-
appscan_obj = opts[:appscan_obj]
|
161
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'version')
|
162
|
-
version = {}
|
163
|
-
version[:raw_response] = response
|
164
|
-
version[:xml_response] = Nokogiri::XML(response)
|
165
|
-
version[:build] = version[:xml_response].xpath(
|
166
|
-
'/xmlns:version/xmlns:build'
|
167
|
-
).text
|
168
|
-
version[:dbversion] = version[:xml_response].xpath(
|
169
|
-
'/xmlns:version/xmlns:dbversion'
|
170
|
-
).text
|
171
|
-
version[:rules_version] = version[:xml_response].xpath(
|
172
|
-
'/xmlns:version/xmlns:rules-version'
|
173
|
-
).text
|
174
|
-
version[:username] = version[:xml_response].xpath(
|
175
|
-
'/xmlns:version/xmlns:user-name'
|
176
|
-
).text
|
177
|
-
version
|
178
|
-
rescue StandardError => e
|
179
|
-
raise e
|
180
|
-
end
|
181
|
-
|
182
|
-
# Supported Method Parameters::
|
183
|
-
# PWN::Plugins::IBMAppscan.get_folders(
|
184
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
185
|
-
# )
|
186
|
-
|
187
|
-
public_class_method def self.get_folders(opts = {})
|
188
|
-
appscan_obj = opts[:appscan_obj]
|
189
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'folders')
|
190
|
-
folders = {}
|
191
|
-
folders[:raw_response] = response
|
192
|
-
folders[:xml_response] = Nokogiri::XML(response)
|
193
|
-
folders
|
194
|
-
rescue StandardError => e
|
195
|
-
raise e
|
196
|
-
end
|
197
|
-
|
198
|
-
# Supported Method Parameters::
|
199
|
-
# PWN::Plugins::IBMAppscan.get_subfolders_of_folder(
|
200
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
201
|
-
# folder_id: 'required folder to retrieve'
|
202
|
-
# )
|
203
|
-
|
204
|
-
public_class_method def self.get_subfolders_of_folder(opts = {})
|
205
|
-
appscan_obj = opts[:appscan_obj]
|
206
|
-
folder_id = opts[:folder_id].to_i
|
207
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folders/#{folder_id}/folders")
|
208
|
-
subfolders = {}
|
209
|
-
subfolders[:raw_response] = response
|
210
|
-
subfolders[:xml_response] = Nokogiri::XML(response)
|
211
|
-
subfolders
|
212
|
-
rescue StandardError => e
|
213
|
-
raise e
|
214
|
-
end
|
215
|
-
|
216
|
-
# Supported Method Parameters::
|
217
|
-
# PWN::Plugins::IBMAppscan.get_folder_by_id(
|
218
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
219
|
-
# folder_id: 'required folder to retrieve'
|
220
|
-
# )
|
221
|
-
|
222
|
-
public_class_method def self.get_folder_by_id(opts = {})
|
223
|
-
appscan_obj = opts[:appscan_obj]
|
224
|
-
folder_id = opts[:folder_id].to_i
|
225
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folders/#{folder_id}")
|
226
|
-
folder = {}
|
227
|
-
folder[:raw_response] = response
|
228
|
-
folder[:xml_response] = Nokogiri::XML(response)
|
229
|
-
folder
|
230
|
-
rescue StandardError => e
|
231
|
-
raise e
|
232
|
-
end
|
233
|
-
|
234
|
-
# Supported Method Parameters::
|
235
|
-
# PWN::Plugins::IBMAppscan.get_folder_items(
|
236
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
237
|
-
# )
|
238
|
-
|
239
|
-
public_class_method def self.get_folder_items(opts = {})
|
240
|
-
appscan_obj = opts[:appscan_obj]
|
241
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'folderitems')
|
242
|
-
folder_items = {}
|
243
|
-
folder_items[:raw_response] = response
|
244
|
-
folder_items[:xml_response] = Nokogiri::XML(response)
|
245
|
-
folder_items
|
246
|
-
rescue StandardError => e
|
247
|
-
raise e
|
248
|
-
end
|
249
|
-
|
250
|
-
# Supported Method Parameters::
|
251
|
-
# PWN::Plugins::IBMAppscan.get_folder_item_by_id(
|
252
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
253
|
-
# folder_item_id: 'required folder item to retrieve'
|
254
|
-
# )
|
255
|
-
|
256
|
-
public_class_method def self.get_folder_item_by_id(opts = {})
|
257
|
-
appscan_obj = opts[:appscan_obj]
|
258
|
-
folder_item_id = opts[:folder_item_id].to_i
|
259
|
-
retry_count = 3
|
260
|
-
|
261
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folderitems/#{folder_item_id}")
|
262
|
-
folder_item = {}
|
263
|
-
folder_item[:raw_response] = response
|
264
|
-
folder_item[:xml_response] = Nokogiri::XML(response)
|
265
|
-
# Get Current Status of a Scan
|
266
|
-
# Available states:
|
267
|
-
# READY = 1;
|
268
|
-
# STARTING = 2;
|
269
|
-
# RUNNING = 3;
|
270
|
-
# RESUMING = 6;
|
271
|
-
# CANCELING = 7;
|
272
|
-
# SUSPENDING = 8;
|
273
|
-
# SUSPENDED = 9;
|
274
|
-
# POSTPROCESSING = 10;
|
275
|
-
# ENDING = 12;
|
276
|
-
folder_item[:state] = folder_item[:xml_response].xpath('//xmlns:state/xmlns:name').text
|
277
|
-
folder_item
|
278
|
-
rescue StandardError => e
|
279
|
-
@@logger.error("Error: #{e} | #{e.class}\nResponse Returned: #{folder_item[:raw_response]}")
|
280
|
-
end
|
281
|
-
|
282
|
-
# Supported Method Parameters::
|
283
|
-
# PWN::Plugins::IBMAppscan.get_a_folders_folder_items(
|
284
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
285
|
-
# folder_id: 'required folder to retrieve'
|
286
|
-
# )
|
287
|
-
|
288
|
-
public_class_method def self.get_a_folders_folder_items(opts = {})
|
289
|
-
appscan_obj = opts[:appscan_obj]
|
290
|
-
folder_id = opts[:folder_item_id].to_i
|
291
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folders/#{folder_id}/folderitems")
|
292
|
-
a_folders_folder_items = {}
|
293
|
-
a_folders_folder_items[:raw_response] = response
|
294
|
-
a_folders_folder_items[:xml_response] = Nokogiri::XML(response)
|
295
|
-
a_folders_folder_items
|
296
|
-
rescue StandardError => e
|
297
|
-
raise e
|
298
|
-
end
|
299
|
-
|
300
|
-
# Supported Method Parameters::
|
301
|
-
# PWN::Plugins::IBMAppscan.get_folder_item_options(
|
302
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
303
|
-
# folder_item_id: 'required folder item to retrieve'
|
304
|
-
# )
|
305
|
-
|
306
|
-
public_class_method def self.get_folder_item_options(opts = {})
|
307
|
-
appscan_obj = opts[:appscan_obj]
|
308
|
-
folder_item_id = opts[:folder_item_id].to_i
|
309
|
-
# TODO: Discover why not all options are returned
|
310
|
-
# (e.g. esCOTAutoFormFillUserNameValue & esCOTAutoFormFillPasswordValue)
|
311
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folderitems/#{folder_item_id}/options")
|
312
|
-
folder_item_options = {}
|
313
|
-
folder_item_options[:raw_response] = response
|
314
|
-
folder_item_options[:xml_response] = Nokogiri::XML(response)
|
315
|
-
folder_item_options[:options] = folder_item_options[:xml_response].xpath(
|
316
|
-
'//xmlns:available-option/@href'
|
317
|
-
)
|
318
|
-
folder_item_options
|
319
|
-
rescue StandardError => e
|
320
|
-
raise e
|
321
|
-
end
|
322
|
-
|
323
|
-
# Supported Method Parameters::
|
324
|
-
# PWN::Plugins::IBMAppscan.get_scan_templates(
|
325
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
326
|
-
# )
|
327
|
-
|
328
|
-
public_class_method def self.get_scan_templates(opts = {})
|
329
|
-
appscan_obj = opts[:appscan_obj]
|
330
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'templates')
|
331
|
-
templates = {}
|
332
|
-
templates[:raw_response] = response
|
333
|
-
templates[:xml_response] = Nokogiri::XML(response)
|
334
|
-
templates
|
335
|
-
rescue StandardError => e
|
336
|
-
raise e
|
337
|
-
end
|
338
|
-
|
339
|
-
# Supported Method Parameters::
|
340
|
-
# PWN::Plugins::IBMAppscan.create_scan_based_on_template(
|
341
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
342
|
-
# template_id: 'required template id returned from get_scan_templates method'
|
343
|
-
# scan_name: 'required name of scan'
|
344
|
-
# scan_desc: 'required description of scan'
|
345
|
-
# )
|
346
|
-
|
347
|
-
public_class_method def self.create_scan_based_on_template(opts = {})
|
348
|
-
appscan_obj = opts[:appscan_obj]
|
349
|
-
template_id = opts[:template_id].to_i
|
350
|
-
scan_name = opts[:scan_name].to_s.scrub
|
351
|
-
scan_desc = opts[:scan_desc].to_s.scrub
|
352
|
-
response = appscan_rest_call(
|
353
|
-
appscan_obj: appscan_obj,
|
354
|
-
http_method: :post,
|
355
|
-
rest_call: "folderitems?templateId=#{template_id}",
|
356
|
-
http_body: "name=#{scan_name}&description=#{scan_desc}"
|
357
|
-
)
|
358
|
-
|
359
|
-
# Return an Easy to Use Data Structure
|
360
|
-
# Instead of Leaving it to the End User
|
361
|
-
# To Parse Out the XML on their own.
|
362
|
-
scan = {}
|
363
|
-
scan[:raw_response] = response
|
364
|
-
scan[:xml_response] = Nokogiri::XML(response)
|
365
|
-
scan[:folder_url] = scan[:xml_response].xpath(
|
366
|
-
'/xmlns:folder-items/xmlns:content-scan-job/@href'
|
367
|
-
).text
|
368
|
-
scan[:folder_item_id] = scan[:xml_response].xpath(
|
369
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:id'
|
370
|
-
).text
|
371
|
-
scan[:scan_name] = scan[:xml_response].xpath(
|
372
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:name'
|
373
|
-
).text
|
374
|
-
scan[:scan_desc] = scan[:xml_response].xpath(
|
375
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:description'
|
376
|
-
).text
|
377
|
-
scan[:parent_folder_url] = scan[:xml_response].xpath(
|
378
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:parent/@href'
|
379
|
-
).text
|
380
|
-
scan[:parent_folder_id] = scan[:xml_response].xpath(
|
381
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:parent/xmlns:id'
|
382
|
-
).text
|
383
|
-
scan[:contact] = scan[:xml_response].xpath(
|
384
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:contact'
|
385
|
-
).text
|
386
|
-
scan[:state_id] = scan[:xml_response].xpath(
|
387
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:state/xmlns:id'
|
388
|
-
).text
|
389
|
-
scan[:state_name] = scan[:xml_response].xpath(
|
390
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:state/xmlns:name'
|
391
|
-
).text
|
392
|
-
scan[:action_id] = scan[:xml_response].xpath(
|
393
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:action/xmlns:id'
|
394
|
-
).text
|
395
|
-
scan[:action_name] = scan[:xml_response].xpath(
|
396
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:action/xmlns:name'
|
397
|
-
).text
|
398
|
-
scan[:options_url] = scan[:xml_response].xpath(
|
399
|
-
'/xmlns:folder-items/xmlns:content-scan-job/xmlns:options/@href'
|
400
|
-
).text
|
401
|
-
scan[:report_pack_url] = scan[:xml_response].xpath(
|
402
|
-
'/xmlns:folder-items/xmlns:report-pack/@href'
|
403
|
-
).text
|
404
|
-
scan[:report_pack_id] = scan[:xml_response].xpath(
|
405
|
-
'/xmlns:folder-items/xmlns:report-pack/xmlns:id'
|
406
|
-
).text
|
407
|
-
scan[:reports_url] = scan[:xml_response].xpath(
|
408
|
-
'/xmlns:folder-items/xmlns:report-pack/xmlns:reports/@href'
|
409
|
-
).text
|
410
|
-
scan[:reports_count] = scan[:xml_response].xpath(
|
411
|
-
'/xmlns:folder-items/xmlns:report-pack/xmlns:reports/xmlns:count'
|
412
|
-
).text.to_i
|
413
|
-
|
414
|
-
scan
|
415
|
-
rescue StandardError => e
|
416
|
-
@@logger.error("Error #{e}:\nREST response returned:\n#{response}")
|
417
|
-
end
|
418
|
-
|
419
|
-
# Supported Method Parameters::
|
420
|
-
# PWN::Plugins::IBMAppscan.configure_scan_options(
|
421
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
422
|
-
# folder_item_id: 'required folder item id',
|
423
|
-
# option: 'required option to change within the scan (folder item)',
|
424
|
-
# value: 'required option value(s)'
|
425
|
-
# )
|
426
|
-
|
427
|
-
public_class_method def self.configure_scan_options(opts = {})
|
428
|
-
appscan_obj = opts[:appscan_obj]
|
429
|
-
folder_item_id = opts[:folder_item_id].to_i
|
430
|
-
option = opts[:option].to_s.scrub
|
431
|
-
value = opts[:value]
|
432
|
-
|
433
|
-
case option.to_sym
|
434
|
-
when :epcsCOTListOfStartingUrls
|
435
|
-
post_body = ''
|
436
|
-
value.to_s.scrub.split(',').each_with_index do |url, index|
|
437
|
-
post_body << '&' unless index.zero?
|
438
|
-
post_body << "value=#{URI.encode_www_form(url.strip.chomp)}"
|
439
|
-
end
|
440
|
-
when :ebCOTHttpAuthentication
|
441
|
-
post_body = if value == false
|
442
|
-
'value=0' # Don't require authentication
|
443
|
-
else
|
444
|
-
'value=1' # Require authentication
|
445
|
-
end
|
446
|
-
when :esCOTHttpUser, :esCOTHttpPassword, :elCOTScanLimit
|
447
|
-
post_body = "value=#{value.to_s.scrub}"
|
448
|
-
when :help
|
449
|
-
available_options = ''
|
450
|
-
get_folder_item_options(
|
451
|
-
appscan_obj: appscan_obj,
|
452
|
-
folder_item_id: folder_item_id
|
453
|
-
)[:options].each { |url| available_options << "#{File.basename(url)}\n" }
|
454
|
-
|
455
|
-
return @@logger.info("Valid Options are:\n\n#{available_options}")
|
456
|
-
else
|
457
|
-
available_options = ''
|
458
|
-
get_folder_item_options(
|
459
|
-
appscan_obj: appscan_obj,
|
460
|
-
folder_item_id: folder_item_id
|
461
|
-
)[:options].each { |url| available_options << "#{File.basename(url)}\n" }
|
462
|
-
|
463
|
-
return @@logger.error("Invalid option '#{option}' parameter passed.\nValid Options are:\n\n#{available_options}")
|
464
|
-
end
|
465
|
-
|
466
|
-
# Always Overwrite Existing Option Values
|
467
|
-
response = appscan_rest_call(
|
468
|
-
appscan_obj: appscan_obj,
|
469
|
-
http_method: :post,
|
470
|
-
rest_call: "folderitems/#{folder_item_id}/options/#{option}?put=1",
|
471
|
-
http_body: post_body.to_s
|
472
|
-
)
|
473
|
-
|
474
|
-
scan_config = {}
|
475
|
-
scan_config[:raw_response] = response
|
476
|
-
scan_config[:xml_response] = Nokogiri::XML(response)
|
477
|
-
scan_config[:options] = scan_config[:xml_response].xpath('//xmlns:option/@value')
|
478
|
-
|
479
|
-
scan_config
|
480
|
-
rescue StandardError => e
|
481
|
-
raise e
|
482
|
-
end
|
483
|
-
|
484
|
-
# Supported Method Parameters::
|
485
|
-
# PWN::Plugins::IBMAppscan.folder_item_scan_action(
|
486
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
487
|
-
# folder_item_id: 'required folder item id',
|
488
|
-
# action: 'required action for scan to follow. Available actions are: :run, :suspend, :cancel, & :end',
|
489
|
-
# poll_interval: 'optional setting to determine length in seconds to poll for scan state (defaults to 60)'
|
490
|
-
# )
|
491
|
-
|
492
|
-
public_class_method def self.folder_item_scan_action(opts = {})
|
493
|
-
appscan_obj = opts[:appscan_obj]
|
494
|
-
folder_item_id = opts[:folder_item_id].to_i
|
495
|
-
action = opts[:action].to_s.scrub.to_sym
|
496
|
-
poll_interval = if opts[:poll_interval].nil?
|
497
|
-
60
|
498
|
-
else
|
499
|
-
opts[:poll_interval].to_i
|
500
|
-
end
|
501
|
-
|
502
|
-
case action
|
503
|
-
when :run
|
504
|
-
# Make sure scan is in a Ready state
|
505
|
-
this_folder_item = PWN::Plugins::IBMAppscan.get_folder_item_by_id(
|
506
|
-
appscan_obj: appscan_obj,
|
507
|
-
folder_item_id: folder_item_id
|
508
|
-
)
|
509
|
-
state = this_folder_item[:state]
|
510
|
-
return @@logger.error("Scan isn't in a Ready state. Current state: #{state}, abort.") if state != 'Ready'
|
511
|
-
|
512
|
-
@@logger.info("Kicking Off Scan for Folder Item: #{folder_item_id}")
|
513
|
-
response = appscan_rest_call(
|
514
|
-
appscan_obj: appscan_obj,
|
515
|
-
http_method: :post,
|
516
|
-
rest_call: "folderitems/#{folder_item_id}",
|
517
|
-
http_body: 'action=2'
|
518
|
-
)
|
519
|
-
# Obtain Status to Monitor Scan Completion
|
520
|
-
state = nil
|
521
|
-
until state == 'Ready'
|
522
|
-
sleep poll_interval
|
523
|
-
this_folder_item = PWN::Plugins::IBMAppscan.get_folder_item_by_id(
|
524
|
-
appscan_obj: appscan_obj,
|
525
|
-
folder_item_id: folder_item_id
|
526
|
-
)
|
527
|
-
state = this_folder_item[:state]
|
528
|
-
@@logger.info("Current Scan State: #{state}...")
|
529
|
-
end
|
530
|
-
@@logger.info("Scan Completed @ #{Time.now.strftime('%Y-%m-%d %H:%M:%S')}")
|
531
|
-
when :suspend
|
532
|
-
response = appscan_rest_call(
|
533
|
-
appscan_obj: appscan_obj,
|
534
|
-
http_method: :post,
|
535
|
-
rest_call: "folderitems/#{folder_item_id}",
|
536
|
-
http_body: 'action=3'
|
537
|
-
)
|
538
|
-
when :cancel
|
539
|
-
response = appscan_rest_call(
|
540
|
-
appscan_obj: appscan_obj,
|
541
|
-
http_method: :post,
|
542
|
-
rest_call: "folderitems/#{folder_item_id}",
|
543
|
-
http_body: 'action=4'
|
544
|
-
)
|
545
|
-
when :end
|
546
|
-
response = appscan_rest_call(
|
547
|
-
appscan_obj: appscan_obj,
|
548
|
-
http_method: :post,
|
549
|
-
rest_call: "folderitems/#{folder_item_id}",
|
550
|
-
http_body: 'action=5'
|
551
|
-
)
|
552
|
-
else
|
553
|
-
return @@logger.error("Invalid action. Valid actions are:\n:run\n:suspend\n:cancel\n:end\n")
|
554
|
-
end
|
555
|
-
|
556
|
-
scan_action = {}
|
557
|
-
scan_action[:raw_response] = response
|
558
|
-
scan_action[:xml_response] = Nokogiri::XML(response)
|
559
|
-
|
560
|
-
scan_action
|
561
|
-
rescue StandardError => e
|
562
|
-
raise e
|
563
|
-
end
|
564
|
-
|
565
|
-
# Supported Method Parameters::
|
566
|
-
# PWN::Plugins::IBMAppscan.get_report_collection(
|
567
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
568
|
-
# report_folder_item_id: 'required report folder item id'
|
569
|
-
# )
|
570
|
-
|
571
|
-
public_class_method def self.get_report_collection(opts = {})
|
572
|
-
appscan_obj = opts[:appscan_obj]
|
573
|
-
report_folder_item_id = opts[:report_folder_item_id].to_i
|
574
|
-
|
575
|
-
@@logger.info("Retrieving Report Collection ID: #{report_folder_item_id} - Available Report Pack Collection:")
|
576
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "folderitems/#{report_folder_item_id}/reports")
|
577
|
-
|
578
|
-
report_collection = {}
|
579
|
-
report_collection[:raw_response] = response
|
580
|
-
report_collection[:xml_response] = Nokogiri::XML(response)
|
581
|
-
# Output full report pack collection
|
582
|
-
report_collection[:xml_response].xpath('//xmlns:report').each do |r|
|
583
|
-
@@logger.info(" - #{r.xpath('xmlns:name').text}")
|
584
|
-
end
|
585
|
-
|
586
|
-
report_collection
|
587
|
-
rescue StandardError => e
|
588
|
-
raise e
|
589
|
-
end
|
590
|
-
|
591
|
-
# Supported Method Parameters::
|
592
|
-
# PWN::Plugins::IBMAppscan.get_single_report(
|
593
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
594
|
-
# report_id: 'required report id'
|
595
|
-
# )
|
596
|
-
|
597
|
-
public_class_method def self.get_single_report(opts = {})
|
598
|
-
appscan_obj = opts[:appscan_obj]
|
599
|
-
report_id = opts[:report_id].to_i
|
600
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: "reports/#{report_id}")
|
601
|
-
|
602
|
-
report = {}
|
603
|
-
report[:raw_response] = response
|
604
|
-
report[:xml_response] = Nokogiri::XML(response)
|
605
|
-
@@logger.info("Retrieved Report ID/Name: #{report_id}/#{report[:xml_response].xpath('//xmlns:report/xmlns:name').text}")
|
606
|
-
|
607
|
-
report
|
608
|
-
rescue StandardError => e
|
609
|
-
raise e
|
610
|
-
end
|
611
|
-
|
612
|
-
# Supported Method Parameters::
|
613
|
-
# PWN::Plugins::IBMAppscan.get_single_report_data(
|
614
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
615
|
-
# report_id: 'required report id'
|
616
|
-
# )
|
617
|
-
|
618
|
-
public_class_method def self.get_single_report_data(opts = {})
|
619
|
-
appscan_obj = opts[:appscan_obj]
|
620
|
-
report_id = opts[:report_id].to_i
|
621
|
-
response = appscan_rest_call(
|
622
|
-
appscan_obj: appscan_obj,
|
623
|
-
rest_call: "reports/#{report_id}/data?mode=all"
|
624
|
-
)
|
625
|
-
|
626
|
-
report_data = {}
|
627
|
-
report_data[:raw_response] = response
|
628
|
-
report_data[:xml_response] = Nokogiri::XML(response)
|
629
|
-
@@logger.info("Retrieved Report Data for Report ID: #{report_id}")
|
630
|
-
|
631
|
-
report_data
|
632
|
-
rescue StandardError => e
|
633
|
-
raise e
|
634
|
-
end
|
635
|
-
|
636
|
-
# Supported Method Parameters::
|
637
|
-
# PWN::Plugins::IBMAppscan.get_single_report_schema(
|
638
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
639
|
-
# report_id: 'required report id'
|
640
|
-
# )
|
641
|
-
|
642
|
-
public_class_method def self.get_single_report_schema(opts = {})
|
643
|
-
appscan_obj = opts[:appscan_obj]
|
644
|
-
report_id = opts[:report_id].to_i
|
645
|
-
response = appscan_rest_call(
|
646
|
-
appscan_obj: appscan_obj,
|
647
|
-
rest_call: "reports/#{report_id}/data?metadata=schema"
|
648
|
-
)
|
649
|
-
|
650
|
-
report_schema = {}
|
651
|
-
report_schema[:raw_response] = response
|
652
|
-
report_schema[:xml_response] = Nokogiri::XML(response)
|
653
|
-
@@logger.info("Retrieved Report Schema for Report ID: #{report_id}")
|
654
|
-
|
655
|
-
report_schema
|
656
|
-
rescue StandardError => e
|
657
|
-
raise e
|
658
|
-
end
|
659
|
-
|
660
|
-
# Supported Method Parameters::
|
661
|
-
# PWN::Plugins::IBMAppscan.get_issue_collection(
|
662
|
-
# appscan_obj: 'required appscan_obj returned from login method',
|
663
|
-
# report_id: 'required report id'
|
664
|
-
# )
|
665
|
-
|
666
|
-
public_class_method def self.get_issue_collection(opts = {})
|
667
|
-
appscan_obj = opts[:appscan_obj]
|
668
|
-
report_id = opts[:report_id].to_i
|
669
|
-
response = appscan_rest_call(
|
670
|
-
appscan_obj: appscan_obj,
|
671
|
-
rest_call: "reports/#{report_id}/issues?mode=all"
|
672
|
-
)
|
673
|
-
|
674
|
-
issue_collection = {}
|
675
|
-
issue_collection[:raw_response] = response
|
676
|
-
issue_collection[:xml_response] = Nokogiri::XML(response)
|
677
|
-
@@logger.info("Retrieved Issue Collection for Report ID: #{report_id}")
|
678
|
-
|
679
|
-
issue_collection
|
680
|
-
rescue StandardError => e
|
681
|
-
raise e
|
682
|
-
end
|
683
|
-
|
684
|
-
# Supported Method Parameters::
|
685
|
-
# PWN::Plugins::IBMAppscan.get_report_data
|
686
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
687
|
-
# report_link: 'required report link to start report generation
|
688
|
-
# output_name: 'required name to save generated report'
|
689
|
-
|
690
|
-
private_class_method def self.get_report_data(opts = {})
|
691
|
-
appscan_obj = opts[:appscan_obj]
|
692
|
-
report_link = opts[:report_link]
|
693
|
-
output_name = opts[:output_name]
|
694
|
-
|
695
|
-
# First Get request
|
696
|
-
uri = URI.parse(report_link)
|
697
|
-
rb = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)
|
698
|
-
res = rb.get(report_link, 'Cookie' => appscan_obj[:cookie], :verify_ssl => OpenSSL::SSL::VERIFY_NONE)
|
699
|
-
location = "https://#{uri.host}#{res.headers['location']}"
|
700
|
-
|
701
|
-
puts "Location: #{location}"
|
702
|
-
# Generate the report on the server side
|
703
|
-
res = rb.get(location, 'Cookie' => appscan_obj[:cookie], :verify_ssl => OpenSSL::SSL::VERIFY_NONE)
|
704
|
-
|
705
|
-
# Now get the file
|
706
|
-
f = File.open(output_name, 'wb')
|
707
|
-
location['Export'] = 'Stream'
|
708
|
-
begin
|
709
|
-
rb.get(location, 'Cookie' => appscan_obj[:cookie], :verify_ssl => OpenSSL::SSL::VERIFY_NONE) do |resp|
|
710
|
-
resp.read_body do |seg|
|
711
|
-
f.write(seg)
|
712
|
-
end
|
713
|
-
end
|
714
|
-
ensure
|
715
|
-
f.close
|
716
|
-
end
|
717
|
-
rescue StandardError => e
|
718
|
-
@@logger.error("Could not get report data: #{e}")
|
719
|
-
end
|
720
|
-
|
721
|
-
# Supported Method Parameters::
|
722
|
-
# PWN::Plugins::IBMAppscan.generate_scan_report
|
723
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
724
|
-
# scan_name: 'required name of scan for which to generate a report'
|
725
|
-
# output_path: 'required path to save generated report'
|
726
|
-
|
727
|
-
public_class_method def self.generate_scan_report(opts = {})
|
728
|
-
appscan_obj = opts[:appscan_obj]
|
729
|
-
scan_name = opts[:scan_name]
|
730
|
-
output_path = opts[:output_path]
|
731
|
-
appscan_ip = appscan_obj[:appscan_ip].to_s.scrub
|
732
|
-
login_uri = "https://#{appscan_ip}:9443/ase/pages/Login.jsp"
|
733
|
-
base_appscan_uri = "https://#{appscan_ip}/ase/FolderExplorer.aspx"
|
734
|
-
logout_uri = "https://#{appscan_ip}/ase/LogOut.aspx"
|
735
|
-
|
736
|
-
# verify the output path actually exists
|
737
|
-
return @@logger.error("Output directory does not exist: #{output_path}") unless File.directory?(output_path)
|
738
|
-
|
739
|
-
# REMEMBER TO CHANGE BROWSER TYPE BACK TO HEADLESS!!!!
|
740
|
-
h_browser = PWN::Plugins::TransparentBrowser.open(browser_type: :firefox,
|
741
|
-
proxy: 'http://127.0.0.1:8080')
|
742
|
-
|
743
|
-
# log into the system
|
744
|
-
h_browser.goto login_uri.to_s.to_s.scrub
|
745
|
-
h_browser.text_field(name: 'j_username').when_present.set(appscan_obj[:username])
|
746
|
-
h_browser.text_field(name: 'j_password').when_present.set(Base64.decode64(appscan_obj[:password]))
|
747
|
-
h_browser.button(name: 'login').when_present.click
|
748
|
-
|
749
|
-
# head over to the reports page and click on the report link
|
750
|
-
h_browser.goto base_appscan_uri.to_s.to_s.scrub
|
751
|
-
h_browser.link(:text, 'ASE').when_present.click
|
752
|
-
|
753
|
-
# Search for the report link with a matching name and click it
|
754
|
-
clicked = false
|
755
|
-
h_browser.links.each do |link|
|
756
|
-
next unless (link.text == scan_name.to_s) && link.href =~ /^https:.+XReports.+/
|
757
|
-
|
758
|
-
link.when_present.click
|
759
|
-
clicked = true
|
760
|
-
break
|
761
|
-
end
|
762
|
-
return @@logger.error("Could not find matching scan name for name #{scan_name}") unless clicked
|
763
|
-
|
764
|
-
output_path = "#{output_path}/#{scan_name.gsub(/[^\w.-]/, '_')}/"
|
765
|
-
FileUtils.rm_rf output_path if File.directory?(output_path)
|
766
|
-
FileUtils.mkpath output_path
|
767
|
-
|
768
|
-
# Download the top level report
|
769
|
-
report_link = "#{h_browser.url}&exportformat=pdf&exportdelivery=download"
|
770
|
-
output_name = "#{output_path}Top_Level.pdf"
|
771
|
-
get_report_data(
|
772
|
-
appscan_obj: appscan_obj,
|
773
|
-
report_link: report_link,
|
774
|
-
output_name: output_name
|
775
|
-
)
|
776
|
-
rescue StandardError => e
|
777
|
-
@@logger.error("Error retrieving report for '#{scan_name}': #{e}")
|
778
|
-
ensure
|
779
|
-
# make sure we always logout
|
780
|
-
h_browser.goto logout_uri.to_s.to_s.scrub
|
781
|
-
h_browser.close
|
782
|
-
end
|
783
|
-
|
784
|
-
# Supported Method Parameters::
|
785
|
-
# PWN::Plugins::IBMAppscan.logout(
|
786
|
-
# appscan_obj: 'required appscan_obj returned from login method'
|
787
|
-
# )
|
788
|
-
|
789
|
-
public_class_method def self.logout(opts = {})
|
790
|
-
appscan_obj = opts[:appscan_obj]
|
791
|
-
@@logger.info('Logging out...')
|
792
|
-
response = appscan_rest_call(appscan_obj: appscan_obj, rest_call: 'logout')
|
793
|
-
if response == ''
|
794
|
-
appscan_obj[:logged_in] = false
|
795
|
-
'logout successful'
|
796
|
-
else
|
797
|
-
response
|
798
|
-
end
|
799
|
-
rescue StandardError => e
|
800
|
-
raise e
|
801
|
-
end
|
802
|
-
|
803
|
-
# Author(s):: 0day Inc. <request.pentest@0dayinc.com>
|
804
|
-
|
805
|
-
public_class_method def self.authors
|
806
|
-
"AUTHOR(S):
|
807
|
-
0day Inc. <request.pentest@0dayinc.com>
|
808
|
-
"
|
809
|
-
end
|
810
|
-
|
811
|
-
# Display Usage for this Module
|
812
|
-
|
813
|
-
public_class_method def self.help
|
814
|
-
puts "USAGE:
|
815
|
-
appscan_obj = #{self}.login(
|
816
|
-
appscan_ip: 'required host/ip of Nexpose Console (server)',
|
817
|
-
username: 'required username',
|
818
|
-
password: 'optional password (will prompt if nil)'
|
819
|
-
)
|
820
|
-
|
821
|
-
schema = #{self}.schema(
|
822
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
823
|
-
)
|
824
|
-
|
825
|
-
version = #{self}.version(
|
826
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
827
|
-
)
|
828
|
-
|
829
|
-
folders = #{self}.get_folders(
|
830
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
831
|
-
)
|
832
|
-
|
833
|
-
subfolders = #{self}.get_subfolders_of_folder(
|
834
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
835
|
-
folder_id: 'required folder to retrieve'
|
836
|
-
)
|
837
|
-
|
838
|
-
folder = #{self}.get_folder_by_id(
|
839
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
840
|
-
folder_id: 'required folder to retrieve'
|
841
|
-
)
|
842
|
-
|
843
|
-
folder_items = #{self}.get_folder_items(
|
844
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
845
|
-
)
|
846
|
-
|
847
|
-
folder_item = #{self}.get_folder_item_by_id(
|
848
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
849
|
-
folder_item_id: 'required folder item to retrieve'
|
850
|
-
)
|
851
|
-
|
852
|
-
a_folders_folder_items = #{self}.get_a_folders_folder_items(
|
853
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
854
|
-
folder_id: 'required folder to retrieve'
|
855
|
-
)
|
856
|
-
|
857
|
-
folder_item_options = #{self}.get_folder_item_options(
|
858
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
859
|
-
folder_item_id: 'required folder item to retrieve'
|
860
|
-
)
|
861
|
-
|
862
|
-
scan = #{self}.create_scan_based_on_template(
|
863
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
864
|
-
template_id: 'required template id returned from get_scan_templates method'
|
865
|
-
scan_name: 'required name of scan'
|
866
|
-
scan_desc: 'required description of scan'
|
867
|
-
)
|
868
|
-
|
869
|
-
templates = #{self}.get_scan_templates(
|
870
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
871
|
-
)
|
872
|
-
|
873
|
-
scan_config = #{self}.configure_scan_options(
|
874
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
875
|
-
folder_item_id: 'required folder item id',
|
876
|
-
option: 'required option to change within the scan (folder item). Pass :help for a list of options.',
|
877
|
-
value: 'required option value(s)'
|
878
|
-
)
|
879
|
-
|
880
|
-
scan_action = #{self}.folder_item_scan_action(
|
881
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
882
|
-
folder_item_id: 'required folder item id',
|
883
|
-
action: 'required action for scan to follow. Available actions are: :run, :suspend, :cancel, & :end',
|
884
|
-
poll_interval: 'optional setting to determine length in seconds to poll for scan state (defaults to 60)'
|
885
|
-
)
|
886
|
-
|
887
|
-
report_collection = #{self}.get_report_collection(
|
888
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
889
|
-
report_folder_item_id: 'required report folder item id'
|
890
|
-
)
|
891
|
-
|
892
|
-
report = #{self}.get_single_report(
|
893
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
894
|
-
report_id: 'required report id'
|
895
|
-
)
|
896
|
-
|
897
|
-
report_data = #{self}.get_single_report_data(
|
898
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
899
|
-
report_id: 'required report id'
|
900
|
-
)
|
901
|
-
|
902
|
-
report_schema = #{self}.get_single_report_schema(
|
903
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
904
|
-
report_id: 'required report id'
|
905
|
-
)
|
906
|
-
|
907
|
-
issue_collection = #{self}.get_issue_collection(
|
908
|
-
appscan_obj: 'required appscan_obj returned from login method',
|
909
|
-
report_id: 'required report id'
|
910
|
-
)
|
911
|
-
|
912
|
-
#{self}.generate_scan_report(
|
913
|
-
appscan_obj: 'required appscan_obj returned from login',
|
914
|
-
scan_name: 'required name of scan for which to generate a report',
|
915
|
-
output_path: 'required path to save generated report'
|
916
|
-
)
|
917
|
-
|
918
|
-
#{self}.logout(
|
919
|
-
appscan_obj: 'required appscan_obj returned from login method'
|
920
|
-
)
|
921
|
-
|
922
|
-
#{self}.authors
|
923
|
-
"
|
924
|
-
end
|
925
|
-
end
|
926
|
-
end
|
927
|
-
end
|