pwn 0.4.602 → 0.4.603

Sign up to get free protection for your applications and to get access to all the features.
Files changed (945) hide show
  1. checksums.yaml +4 -4
  2. data/.github/FUNDING.yml +1 -0
  3. data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
  4. data/.gitignore +62 -0
  5. data/.rubocop.yml +14 -0
  6. data/.rubocop_todo.yml +115 -0
  7. data/.ruby-gemset +1 -0
  8. data/.ruby-version +1 -0
  9. data/.travis.yml +24 -0
  10. data/CHANGELOG_BETWEEN_TAGS.txt +108 -0
  11. data/CODE_OF_CONDUCT.md +46 -0
  12. data/CONTRIBUTING.md +10 -0
  13. data/Gemfile +88 -0
  14. data/LICENSE.txt +22 -0
  15. data/README.md +84 -0
  16. data/Rakefile +20 -0
  17. data/Vagrantfile +250 -0
  18. data/bin/pwn +101 -0
  19. data/bin/pwn_android_war_dialer +161 -0
  20. data/bin/pwn_arachni +157 -0
  21. data/bin/pwn_arachni_rest +174 -0
  22. data/bin/pwn_autoinc_version +58 -0
  23. data/bin/pwn_aws_describe_resources +728 -0
  24. data/bin/pwn_burp_suite_pro_active_scan +113 -0
  25. data/bin/pwn_char_base64_encoding +24 -0
  26. data/bin/pwn_char_dec_encoding +23 -0
  27. data/bin/pwn_char_hex_escaped_encoding +26 -0
  28. data/bin/pwn_char_html_entity_encoding +24 -0
  29. data/bin/pwn_char_unicode_escaped_encoding +23 -0
  30. data/bin/pwn_char_url_encoding +24 -0
  31. data/bin/pwn_defectdojo_engagement_create +158 -0
  32. data/bin/pwn_defectdojo_importscan +104 -0
  33. data/bin/pwn_defectdojo_reimportscan +104 -0
  34. data/bin/pwn_domain_reversewhois +89 -0
  35. data/bin/pwn_fuzz_net_app_proto +160 -0
  36. data/bin/pwn_ibm_appscan_enterprise +112 -0
  37. data/bin/pwn_jenkins_create_job +68 -0
  38. data/bin/pwn_jenkins_create_view +68 -0
  39. data/bin/pwn_jenkins_install_plugin +91 -0
  40. data/bin/pwn_jenkins_thinBackup_aws_s3 +123 -0
  41. data/bin/pwn_jenkins_update_plugins +87 -0
  42. data/bin/pwn_jenkins_useradd +86 -0
  43. data/bin/pwn_mail_agent +127 -0
  44. data/bin/pwn_msf_postgres_login +28 -0
  45. data/bin/pwn_nessus_cloud_scan_crud +345 -0
  46. data/bin/pwn_nessus_cloud_vulnscan +99 -0
  47. data/bin/pwn_nexpose +52 -0
  48. data/bin/pwn_openvas_vulnscan +102 -0
  49. data/bin/pwn_owasp_zap_active_scan +134 -0
  50. data/bin/pwn_pastebin_sample_filter +61 -0
  51. data/bin/pwn_perimeter_recon +326 -0
  52. data/bin/pwn_phone +131 -0
  53. data/bin/pwn_sast +183 -0
  54. data/bin/pwn_serial_check_voicemail +66 -0
  55. data/bin/pwn_serial_msr206 +175 -0
  56. data/bin/pwn_serial_qualcomm_commands +16 -0
  57. data/bin/pwn_serial_son_micro_sm132_rfid +132 -0
  58. data/bin/pwn_shodan_search +79 -0
  59. data/bin/pwn_simple_http_server +57 -0
  60. data/bin/pwn_web_cache_deception +233 -0
  61. data/bin/pwn_www_checkip +62 -0
  62. data/bin/pwn_www_uri_buster +237 -0
  63. data/bin/pwn_xss_dom_vectors +169 -0
  64. data/build_pwn_gem.sh +30 -0
  65. data/documentation/PWN.png +0 -0
  66. data/documentation/PWN_Contributors_and_Users.png +0 -0
  67. data/documentation/fax-spectrogram.png +0 -0
  68. data/documentation/fax-waveform.png +0 -0
  69. data/documentation/pwn_android_war_dialer_session.png +0 -0
  70. data/documentation/pwn_install.png +0 -0
  71. data/documentation/pwn_wallpaper.jpg +0 -0
  72. data/documentation/ringing-spectrogram.png +0 -0
  73. data/documentation/ringing-waveform.png +0 -0
  74. data/etc/systemd/msfrpcd.service +12 -0
  75. data/etc/systemd/openvas.service +14 -0
  76. data/etc/userland/aws/apache2/jenkins_443.conf +90 -0
  77. data/etc/userland/aws/apache2/jenkins_80.conf +7 -0
  78. data/etc/userland/aws/apache2/openvas_443.conf +87 -0
  79. data/etc/userland/aws/apache2/openvas_80.conf +7 -0
  80. data/etc/userland/aws/apache2/sast_443.conf +87 -0
  81. data/etc/userland/aws/apache2/sast_80.conf +9 -0
  82. data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +9 -0
  83. data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  84. data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +3 -0
  85. data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +3 -0
  86. data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  87. data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  88. data/etc/userland/aws/jenkins/inject_build_envs.sh +15 -0
  89. data/etc/userland/aws/jenkins/jenkins +81 -0
  90. data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  91. data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  92. data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  93. data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  94. data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  95. data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  96. data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  97. data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  98. data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  99. data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  100. data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  101. data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +42 -0
  102. data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  103. data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  104. data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  105. data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  106. data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  107. data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +42 -0
  108. data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +42 -0
  109. data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +42 -0
  110. data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  111. data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  112. data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
  113. data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +5 -0
  114. data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +2 -0
  115. data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +14 -0
  116. data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  117. data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  118. data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +2 -0
  119. data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +8 -0
  120. data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  121. data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +4 -0
  122. data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +15 -0
  123. data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +2 -0
  124. data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  125. data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +2 -0
  126. data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  127. data/etc/userland/aws/vagrant.yaml.EXAMPLE +35 -0
  128. data/etc/userland/docker/apache2/jenkins_443.conf +90 -0
  129. data/etc/userland/docker/apache2/jenkins_80.conf +7 -0
  130. data/etc/userland/docker/apache2/openvas_443.conf +87 -0
  131. data/etc/userland/docker/apache2/openvas_80.conf +7 -0
  132. data/etc/userland/docker/apache2/sast_443.conf +87 -0
  133. data/etc/userland/docker/apache2/sast_80.conf +9 -0
  134. data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +9 -0
  135. data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  136. data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +3 -0
  137. data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +3 -0
  138. data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  139. data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  140. data/etc/userland/docker/jenkins/inject_build_envs.sh +15 -0
  141. data/etc/userland/docker/jenkins/jenkins +81 -0
  142. data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  143. data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  144. data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  145. data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  146. data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  147. data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  148. data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  149. data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  150. data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  151. data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  152. data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  153. data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +42 -0
  154. data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  155. data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  156. data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  157. data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  158. data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  159. data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +42 -0
  160. data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +42 -0
  161. data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +42 -0
  162. data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  163. data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  164. data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
  165. data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +5 -0
  166. data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +2 -0
  167. data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +14 -0
  168. data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  169. data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  170. data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +2 -0
  171. data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +8 -0
  172. data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  173. data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +4 -0
  174. data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +15 -0
  175. data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +2 -0
  176. data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  177. data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +2 -0
  178. data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  179. data/etc/userland/qemu/apache2/jenkins_443.conf +90 -0
  180. data/etc/userland/qemu/apache2/jenkins_80.conf +7 -0
  181. data/etc/userland/qemu/apache2/openvas_443.conf +87 -0
  182. data/etc/userland/qemu/apache2/openvas_80.conf +7 -0
  183. data/etc/userland/qemu/apache2/sast_443.conf +87 -0
  184. data/etc/userland/qemu/apache2/sast_80.conf +9 -0
  185. data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +9 -0
  186. data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  187. data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +3 -0
  188. data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +3 -0
  189. data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  190. data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  191. data/etc/userland/qemu/jenkins/inject_build_envs.sh +15 -0
  192. data/etc/userland/qemu/jenkins/jenkins +81 -0
  193. data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  194. data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  195. data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  196. data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  197. data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  198. data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  199. data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  200. data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  201. data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  202. data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  203. data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  204. data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +42 -0
  205. data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  206. data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  207. data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  208. data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  209. data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  210. data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +42 -0
  211. data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +42 -0
  212. data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +42 -0
  213. data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  214. data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  215. data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
  216. data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +5 -0
  217. data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +2 -0
  218. data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +14 -0
  219. data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  220. data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  221. data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +2 -0
  222. data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +8 -0
  223. data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  224. data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +4 -0
  225. data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +15 -0
  226. data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +2 -0
  227. data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  228. data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +2 -0
  229. data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  230. data/etc/userland/ruby-gem/apache2/jenkins_443.conf +90 -0
  231. data/etc/userland/ruby-gem/apache2/jenkins_80.conf +7 -0
  232. data/etc/userland/ruby-gem/apache2/openvas_443.conf +87 -0
  233. data/etc/userland/ruby-gem/apache2/openvas_80.conf +7 -0
  234. data/etc/userland/ruby-gem/apache2/sast_443.conf +87 -0
  235. data/etc/userland/ruby-gem/apache2/sast_80.conf +9 -0
  236. data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +9 -0
  237. data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  238. data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +3 -0
  239. data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +3 -0
  240. data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  241. data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  242. data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +15 -0
  243. data/etc/userland/ruby-gem/jenkins/jenkins +81 -0
  244. data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  245. data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  246. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  247. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  248. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  249. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  250. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  251. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  252. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  253. data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  254. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  255. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +42 -0
  256. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  257. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  258. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  259. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  260. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  261. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +42 -0
  262. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +42 -0
  263. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +42 -0
  264. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  265. data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  266. data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
  267. data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +5 -0
  268. data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +2 -0
  269. data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +14 -0
  270. data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  271. data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  272. data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +2 -0
  273. data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +8 -0
  274. data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  275. data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +4 -0
  276. data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +15 -0
  277. data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +2 -0
  278. data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  279. data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +2 -0
  280. data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  281. data/etc/userland/virtualbox/apache2/jenkins_443.conf +90 -0
  282. data/etc/userland/virtualbox/apache2/jenkins_80.conf +7 -0
  283. data/etc/userland/virtualbox/apache2/openvas_443.conf +87 -0
  284. data/etc/userland/virtualbox/apache2/openvas_80.conf +7 -0
  285. data/etc/userland/virtualbox/apache2/sast_443.conf +87 -0
  286. data/etc/userland/virtualbox/apache2/sast_80.conf +9 -0
  287. data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +9 -0
  288. data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  289. data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +3 -0
  290. data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +3 -0
  291. data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  292. data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  293. data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +15 -0
  294. data/etc/userland/virtualbox/jenkins/jenkins +81 -0
  295. data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  296. data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  297. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  298. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  299. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  300. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  301. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  302. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  303. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  304. data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  305. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  306. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +42 -0
  307. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  308. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  309. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  310. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  311. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  312. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +42 -0
  313. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +42 -0
  314. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +42 -0
  315. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  316. data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  317. data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
  318. data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +5 -0
  319. data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +2 -0
  320. data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +14 -0
  321. data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  322. data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  323. data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +2 -0
  324. data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +8 -0
  325. data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  326. data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +4 -0
  327. data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +15 -0
  328. data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +2 -0
  329. data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  330. data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +2 -0
  331. data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  332. data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +4 -0
  333. data/etc/userland/vmware/apache2/jenkins_443.conf +90 -0
  334. data/etc/userland/vmware/apache2/jenkins_80.conf +7 -0
  335. data/etc/userland/vmware/apache2/openvas_443.conf +87 -0
  336. data/etc/userland/vmware/apache2/openvas_80.conf +7 -0
  337. data/etc/userland/vmware/apache2/sast_443.conf +87 -0
  338. data/etc/userland/vmware/apache2/sast_80.conf +9 -0
  339. data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +9 -0
  340. data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +29 -0
  341. data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +3 -0
  342. data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +3 -0
  343. data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +2 -0
  344. data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +3 -0
  345. data/etc/userland/vmware/jenkins/inject_build_envs.sh +15 -0
  346. data/etc/userland/vmware/jenkins/jenkins +81 -0
  347. data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
  348. data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +462 -0
  349. data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
  350. data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
  351. data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
  352. data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
  353. data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
  354. data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
  355. data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
  356. data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
  357. data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
  358. data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +42 -0
  359. data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
  360. data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +42 -0
  361. data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
  362. data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
  363. data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
  364. data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +42 -0
  365. data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +42 -0
  366. data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +42 -0
  367. data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
  368. data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +42 -0
  369. data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
  370. data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +5 -0
  371. data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +2 -0
  372. data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +14 -0
  373. data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
  374. data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +9 -0
  375. data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +2 -0
  376. data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +8 -0
  377. data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
  378. data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +4 -0
  379. data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +15 -0
  380. data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +2 -0
  381. data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +3 -0
  382. data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +2 -0
  383. data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +52 -0
  384. data/etc/userland/vmware/vagrant.yaml.EXAMPLE +5 -0
  385. data/find_latest_gem_versions_per_Gemfile.sh +11 -0
  386. data/git_commit_test_reinit_gem.sh +37 -0
  387. data/install.sh +176 -0
  388. data/lib/pwn/aws/acm.rb +92 -0
  389. data/lib/pwn/aws/api_gateway.rb +92 -0
  390. data/lib/pwn/aws/app_stream.rb +92 -0
  391. data/lib/pwn/aws/application_auto_scaling.rb +92 -0
  392. data/lib/pwn/aws/application_discovery_service.rb +92 -0
  393. data/lib/pwn/aws/auto_scaling.rb +92 -0
  394. data/lib/pwn/aws/batch.rb +92 -0
  395. data/lib/pwn/aws/budgets.rb +92 -0
  396. data/lib/pwn/aws/cloud_formation.rb +92 -0
  397. data/lib/pwn/aws/cloud_front.rb +92 -0
  398. data/lib/pwn/aws/cloud_hsm.rb +92 -0
  399. data/lib/pwn/aws/cloud_search.rb +92 -0
  400. data/lib/pwn/aws/cloud_search_domain.rb +92 -0
  401. data/lib/pwn/aws/cloud_trail.rb +92 -0
  402. data/lib/pwn/aws/cloud_watch.rb +92 -0
  403. data/lib/pwn/aws/cloud_watch_events.rb +92 -0
  404. data/lib/pwn/aws/cloud_watch_logs.rb +92 -0
  405. data/lib/pwn/aws/code_build.rb +92 -0
  406. data/lib/pwn/aws/code_commit.rb +92 -0
  407. data/lib/pwn/aws/code_deploy.rb +92 -0
  408. data/lib/pwn/aws/code_pipeline.rb +92 -0
  409. data/lib/pwn/aws/cognito_identity.rb +92 -0
  410. data/lib/pwn/aws/cognito_identity_provider.rb +92 -0
  411. data/lib/pwn/aws/cognito_sync.rb +92 -0
  412. data/lib/pwn/aws/config_service.rb +92 -0
  413. data/lib/pwn/aws/data_pipleline.rb +92 -0
  414. data/lib/pwn/aws/database_migration_service.rb +92 -0
  415. data/lib/pwn/aws/device_farm.rb +92 -0
  416. data/lib/pwn/aws/direct_connect.rb +92 -0
  417. data/lib/pwn/aws/directory_service.rb +92 -0
  418. data/lib/pwn/aws/dynamo_db.rb +92 -0
  419. data/lib/pwn/aws/dynamo_db_streams.rb +92 -0
  420. data/lib/pwn/aws/ec2.rb +92 -0
  421. data/lib/pwn/aws/ecr.rb +92 -0
  422. data/lib/pwn/aws/ecs.rb +92 -0
  423. data/lib/pwn/aws/efs.rb +92 -0
  424. data/lib/pwn/aws/elasti_cache.rb +92 -0
  425. data/lib/pwn/aws/elastic_beanstalk.rb +89 -0
  426. data/lib/pwn/aws/elastic_load_balancing.rb +92 -0
  427. data/lib/pwn/aws/elastic_load_balancing_v2.rb +92 -0
  428. data/lib/pwn/aws/elastic_transcoder.rb +92 -0
  429. data/lib/pwn/aws/elasticsearch_service.rb +92 -0
  430. data/lib/pwn/aws/emr.rb +92 -0
  431. data/lib/pwn/aws/firehose.rb +92 -0
  432. data/lib/pwn/aws/game_lift.rb +92 -0
  433. data/lib/pwn/aws/glacier.rb +92 -0
  434. data/lib/pwn/aws/health.rb +92 -0
  435. data/lib/pwn/aws/iam.rb +92 -0
  436. data/lib/pwn/aws/import_export.rb +92 -0
  437. data/lib/pwn/aws/inspector.rb +92 -0
  438. data/lib/pwn/aws/iot.rb +92 -0
  439. data/lib/pwn/aws/iot_data_plane.rb +92 -0
  440. data/lib/pwn/aws/kinesis.rb +92 -0
  441. data/lib/pwn/aws/kinesis_analytics.rb +92 -0
  442. data/lib/pwn/aws/kms.rb +92 -0
  443. data/lib/pwn/aws/lambda.rb +92 -0
  444. data/lib/pwn/aws/lambda_preview.rb +92 -0
  445. data/lib/pwn/aws/lex.rb +92 -0
  446. data/lib/pwn/aws/lightsail.rb +92 -0
  447. data/lib/pwn/aws/machine_learning.rb +92 -0
  448. data/lib/pwn/aws/marketplace_commerce_analytics.rb +92 -0
  449. data/lib/pwn/aws/marketplace_metering.rb +92 -0
  450. data/lib/pwn/aws/ops_works.rb +92 -0
  451. data/lib/pwn/aws/ops_works_cm.rb +92 -0
  452. data/lib/pwn/aws/pinpoint.rb +92 -0
  453. data/lib/pwn/aws/polly.rb +92 -0
  454. data/lib/pwn/aws/rds.rb +92 -0
  455. data/lib/pwn/aws/redshift.rb +92 -0
  456. data/lib/pwn/aws/rekognition.rb +92 -0
  457. data/lib/pwn/aws/route53.rb +92 -0
  458. data/lib/pwn/aws/route53_domains.rb +92 -0
  459. data/lib/pwn/aws/s3.rb +92 -0
  460. data/lib/pwn/aws/service_catalog.rb +92 -0
  461. data/lib/pwn/aws/ses.rb +92 -0
  462. data/lib/pwn/aws/shield.rb +92 -0
  463. data/lib/pwn/aws/simple_db.rb +92 -0
  464. data/lib/pwn/aws/sms.rb +92 -0
  465. data/lib/pwn/aws/snowball.rb +92 -0
  466. data/lib/pwn/aws/sns.rb +92 -0
  467. data/lib/pwn/aws/sqs.rb +92 -0
  468. data/lib/pwn/aws/ssm.rb +92 -0
  469. data/lib/pwn/aws/states.rb +92 -0
  470. data/lib/pwn/aws/storage_gateway.rb +92 -0
  471. data/lib/pwn/aws/sts.rb +63 -0
  472. data/lib/pwn/aws/support.rb +92 -0
  473. data/lib/pwn/aws/swf.rb +92 -0
  474. data/lib/pwn/aws/waf.rb +92 -0
  475. data/lib/pwn/aws/waf_regional.rb +92 -0
  476. data/lib/pwn/aws/workspaces.rb +92 -0
  477. data/lib/pwn/aws/x_ray.rb +92 -0
  478. data/lib/pwn/aws.rb +105 -0
  479. data/lib/pwn/banner/bubble.rb +42 -0
  480. data/lib/pwn/banner/matrix.rb +199 -0
  481. data/lib/pwn/banner/ninja.rb +54 -0
  482. data/lib/pwn/banner/off_the_air.rb +73 -0
  483. data/lib/pwn/banner/pirate.rb +62 -0
  484. data/lib/pwn/banner.rb +78 -0
  485. data/lib/pwn/ffi.rb +16 -0
  486. data/lib/pwn/plugins/android.rb +1616 -0
  487. data/lib/pwn/plugins/ansible_vault.rb +75 -0
  488. data/lib/pwn/plugins/authentication_helper.rb +79 -0
  489. data/lib/pwn/plugins/baresip.rb +704 -0
  490. data/lib/pwn/plugins/basic_auth.rb +63 -0
  491. data/lib/pwn/plugins/beef.rb +309 -0
  492. data/lib/pwn/plugins/burp_suite.rb +344 -0
  493. data/lib/pwn/plugins/bus_pirate.rb +148 -0
  494. data/lib/pwn/plugins/char.rb +459 -0
  495. data/lib/pwn/plugins/credit_card.rb +68 -0
  496. data/lib/pwn/plugins/dao_ldap.rb +131 -0
  497. data/lib/pwn/plugins/dao_mongo.rb +96 -0
  498. data/lib/pwn/plugins/dao_postgres.rb +224 -0
  499. data/lib/pwn/plugins/dao_sqlite3.rb +125 -0
  500. data/lib/pwn/plugins/defect_dojo.rb +759 -0
  501. data/lib/pwn/plugins/detect_os.rb +40 -0
  502. data/lib/pwn/plugins/ein.rb +141 -0
  503. data/lib/pwn/plugins/file_fu.rb +73 -0
  504. data/lib/pwn/plugins/fuzz.rb +206 -0
  505. data/lib/pwn/plugins/git.rb +166 -0
  506. data/lib/pwn/plugins/github.rb +136 -0
  507. data/lib/pwn/plugins/hacker_one.rb +152 -0
  508. data/lib/pwn/plugins/http_intercept_helper.rb +122 -0
  509. data/lib/pwn/plugins/ibm_appscan.rb +927 -0
  510. data/lib/pwn/plugins/ip_info.rb +100 -0
  511. data/lib/pwn/plugins/jenkins.rb +545 -0
  512. data/lib/pwn/plugins/json_pathify.rb +46 -0
  513. data/lib/pwn/plugins/mail_agent.rb +344 -0
  514. data/lib/pwn/plugins/metasploit.rb +151 -0
  515. data/lib/pwn/plugins/msr206.rb +1193 -0
  516. data/lib/pwn/plugins/nessus_cloud.rb +840 -0
  517. data/lib/pwn/plugins/nexpose_vuln_scan.rb +356 -0
  518. data/lib/pwn/plugins/nmap_it.rb +100 -0
  519. data/lib/pwn/plugins/oauth2.rb +67 -0
  520. data/lib/pwn/plugins/ocr.rb +43 -0
  521. data/lib/pwn/plugins/open_ai.rb +201 -0
  522. data/lib/pwn/plugins/openvas.rb +308 -0
  523. data/lib/pwn/plugins/owasp_zap.rb +550 -0
  524. data/lib/pwn/plugins/packet.rb +1313 -0
  525. data/lib/pwn/plugins/pdf_parse.rb +53 -0
  526. data/lib/pwn/plugins/pony.rb +282 -0
  527. data/lib/pwn/plugins/pwn_logger.rb +46 -0
  528. data/lib/pwn/plugins/rabbit_mq.rb +70 -0
  529. data/lib/pwn/plugins/rfidler.rb +56 -0
  530. data/lib/pwn/plugins/serial.rb +315 -0
  531. data/lib/pwn/plugins/shodan.rb +566 -0
  532. data/lib/pwn/plugins/slack_client.rb +104 -0
  533. data/lib/pwn/plugins/sock.rb +188 -0
  534. data/lib/pwn/plugins/son_micro_rfid.rb +504 -0
  535. data/lib/pwn/plugins/spider.rb +80 -0
  536. data/lib/pwn/plugins/ssn.rb +52 -0
  537. data/lib/pwn/plugins/thread_pool.rb +88 -0
  538. data/lib/pwn/plugins/transparent_browser.rb +423 -0
  539. data/lib/pwn/plugins/twitter_api.rb +148 -0
  540. data/lib/pwn/plugins/uri_scheme.rb +328 -0
  541. data/lib/pwn/plugins/voice.rb +145 -0
  542. data/lib/pwn/plugins/vsphere.rb +82 -0
  543. data/lib/pwn/plugins.rb +71 -0
  544. data/lib/pwn/reports/fuzz.rb +272 -0
  545. data/lib/pwn/reports/phone.rb +312 -0
  546. data/lib/pwn/reports/sast.rb +311 -0
  547. data/lib/pwn/reports/uri_buster.rb +248 -0
  548. data/lib/pwn/reports.rb +23 -0
  549. data/lib/pwn/sast/amqp_connect_as_guest.rb +143 -0
  550. data/lib/pwn/sast/apache_file_system_util_api.rb +144 -0
  551. data/lib/pwn/sast/aws.rb +145 -0
  552. data/lib/pwn/sast/banned_function_calls_c.rb +272 -0
  553. data/lib/pwn/sast/base64.rb +143 -0
  554. data/lib/pwn/sast/beef_hook.rb +143 -0
  555. data/lib/pwn/sast/cmd_execution_java.rb +145 -0
  556. data/lib/pwn/sast/cmd_execution_python.rb +147 -0
  557. data/lib/pwn/sast/cmd_execution_ruby.rb +155 -0
  558. data/lib/pwn/sast/cmd_execution_scala.rb +145 -0
  559. data/lib/pwn/sast/csrf.rb +142 -0
  560. data/lib/pwn/sast/deserial_java.rb +150 -0
  561. data/lib/pwn/sast/emoticon.rb +151 -0
  562. data/lib/pwn/sast/eval.rb +144 -0
  563. data/lib/pwn/sast/factory.rb +145 -0
  564. data/lib/pwn/sast/http_authorization_header.rb +148 -0
  565. data/lib/pwn/sast/inner_html.rb +144 -0
  566. data/lib/pwn/sast/keystore.rb +143 -0
  567. data/lib/pwn/sast/location_hash.rb +144 -0
  568. data/lib/pwn/sast/log4j.rb +143 -0
  569. data/lib/pwn/sast/logger.rb +158 -0
  570. data/lib/pwn/sast/outer_html.rb +144 -0
  571. data/lib/pwn/sast/password.rb +143 -0
  572. data/lib/pwn/sast/php_input_mechanisms.rb +149 -0
  573. data/lib/pwn/sast/php_type_juggling.rb +144 -0
  574. data/lib/pwn/sast/pom_version.rb +152 -0
  575. data/lib/pwn/sast/port.rb +150 -0
  576. data/lib/pwn/sast/private_key.rb +143 -0
  577. data/lib/pwn/sast/redirect.rb +145 -0
  578. data/lib/pwn/sast/redos.rb +150 -0
  579. data/lib/pwn/sast/shell.rb +151 -0
  580. data/lib/pwn/sast/signature.rb +143 -0
  581. data/lib/pwn/sast/sql.rb +147 -0
  582. data/lib/pwn/sast/ssl.rb +147 -0
  583. data/lib/pwn/sast/sudo.rb +143 -0
  584. data/lib/pwn/sast/task_tag.rb +157 -0
  585. data/lib/pwn/sast/throw_errors.rb +143 -0
  586. data/lib/pwn/sast/token.rb +145 -0
  587. data/lib/pwn/sast/version.rb +144 -0
  588. data/lib/pwn/sast/window_location_hash.rb +143 -0
  589. data/lib/pwn/sast.rb +56 -0
  590. data/lib/pwn/version.rb +5 -0
  591. data/lib/pwn/www/app_cobalt_io.rb +137 -0
  592. data/lib/pwn/www/bing.rb +89 -0
  593. data/lib/pwn/www/bug_crowd.rb +134 -0
  594. data/lib/pwn/www/checkip.rb +71 -0
  595. data/lib/pwn/www/coinbase_pro.rb +134 -0
  596. data/lib/pwn/www/duckduckgo.rb +111 -0
  597. data/lib/pwn/www/facebook.rb +122 -0
  598. data/lib/pwn/www/google.rb +114 -0
  599. data/lib/pwn/www/hacker_one.rb +122 -0
  600. data/lib/pwn/www/linkedin.rb +122 -0
  601. data/lib/pwn/www/pandora.rb +122 -0
  602. data/lib/pwn/www/pastebin.rb +84 -0
  603. data/lib/pwn/www/paypal.rb +204 -0
  604. data/lib/pwn/www/synack.rb +134 -0
  605. data/lib/pwn/www/torch.rb +106 -0
  606. data/lib/pwn/www/trading_view.rb +125 -0
  607. data/lib/pwn/www/twitter.rb +134 -0
  608. data/lib/pwn/www/uber.rb +122 -0
  609. data/lib/pwn/www/upwork.rb +122 -0
  610. data/lib/pwn/www/youtube.rb +89 -0
  611. data/lib/pwn/www.rb +35 -0
  612. data/lib/pwn.rb +25 -0
  613. data/packer/daemons/msfrpcd.rb +64 -0
  614. data/packer/daemons/openvas.rb +51 -0
  615. data/packer/deploy_docker_containers.sh +9 -0
  616. data/packer/deploy_packer_box.sh +87 -0
  617. data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +44 -0
  618. data/packer/docker/kali_rolling_docker_pwn_prototyper.json +48 -0
  619. data/packer/docker/kali_rolling_docker_pwn_sast.json +44 -0
  620. data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +46 -0
  621. data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +34 -0
  622. data/packer/http/kali_rolling_preseed.cfg +81 -0
  623. data/packer/kali_rolling_aws_ami.json +137 -0
  624. data/packer/kali_rolling_qemu_kvm.json +157 -0
  625. data/packer/kali_rolling_virtualbox.json +184 -0
  626. data/packer/kali_rolling_vmware.json +165 -0
  627. data/packer/packer_secrets.json.EXAMPLE +9 -0
  628. data/packer/provisioners/PayloadsAllTheThings.sh +5 -0
  629. data/packer/provisioners/SecLists.sh +5 -0
  630. data/packer/provisioners/afl.sh +28 -0
  631. data/packer/provisioners/aliases.rb +18 -0
  632. data/packer/provisioners/amass.sh +5 -0
  633. data/packer/provisioners/android.sh +18 -0
  634. data/packer/provisioners/ansible.sh +5 -0
  635. data/packer/provisioners/apache2.sh +24 -0
  636. data/packer/provisioners/arachni.sh +28 -0
  637. data/packer/provisioners/awscli.sh +5 -0
  638. data/packer/provisioners/bashrc.sh +13 -0
  639. data/packer/provisioners/beef.rb +23 -0
  640. data/packer/provisioners/burpsuite.sh +23 -0
  641. data/packer/provisioners/chrome.sh +11 -0
  642. data/packer/provisioners/coreutils.sh +6 -0
  643. data/packer/provisioners/curl.sh +6 -0
  644. data/packer/provisioners/docker.sh +43 -0
  645. data/packer/provisioners/docker_bashrc.sh +2 -0
  646. data/packer/provisioners/docker_rvm.sh +22 -0
  647. data/packer/provisioners/eyewitness.sh +5 -0
  648. data/packer/provisioners/ffmpeg.sh +6 -0
  649. data/packer/provisioners/firefox.sh +7 -0
  650. data/packer/provisioners/fuzzdb.sh +5 -0
  651. data/packer/provisioners/gdb.sh +5 -0
  652. data/packer/provisioners/geckodriver.sh +9 -0
  653. data/packer/provisioners/ghidra.sh +5 -0
  654. data/packer/provisioners/git.sh +6 -0
  655. data/packer/provisioners/init_image.sh +103 -0
  656. data/packer/provisioners/install_vagrant_ssh_key.sh +15 -0
  657. data/packer/provisioners/jenkins.sh +62 -0
  658. data/packer/provisioners/metasploit.rb +59 -0
  659. data/packer/provisioners/nmap_all_live_hosts.sh +8 -0
  660. data/packer/provisioners/openvas.sh +23 -0
  661. data/packer/provisioners/openvas_wrappers.sh +4 -0
  662. data/packer/provisioners/openvpn.sh +7 -0
  663. data/packer/provisioners/peda.sh +4 -0
  664. data/packer/provisioners/phantomjs.rb +28 -0
  665. data/packer/provisioners/phantomjs_wrapper.sh +22 -0
  666. data/packer/provisioners/post_install.sh +41 -0
  667. data/packer/provisioners/postgresql.sh +49 -0
  668. data/packer/provisioners/preeny.sh +8 -0
  669. data/packer/provisioners/pwn.sh +100 -0
  670. data/packer/provisioners/pwntools.sh +13 -0
  671. data/packer/provisioners/radamsa.sh +7 -0
  672. data/packer/provisioners/rc.local.sh +16 -0
  673. data/packer/provisioners/reboot_os.sh +7 -0
  674. data/packer/provisioners/ruby.sh +35 -0
  675. data/packer/provisioners/rvm.sh +31 -0
  676. data/packer/provisioners/scapy.sh +5 -0
  677. data/packer/provisioners/scout2.sh +5 -0
  678. data/packer/provisioners/sox.sh +5 -0
  679. data/packer/provisioners/ssllabs-scan.sh +9 -0
  680. data/packer/provisioners/strace.sh +5 -0
  681. data/packer/provisioners/sublist3r.sh +5 -0
  682. data/packer/provisioners/terminator.sh +5 -0
  683. data/packer/provisioners/toggle_tor.sh +2 -0
  684. data/packer/provisioners/tor.sh +5 -0
  685. data/packer/provisioners/twinkle.sh +6 -0
  686. data/packer/provisioners/update_os.sh +108 -0
  687. data/packer/provisioners/upload_globals.sh +63 -0
  688. data/packer/provisioners/vim.sh +19 -0
  689. data/packer/provisioners/virtualbox_guest_additions.sh +20 -0
  690. data/packer/provisioners/vmware_tools.sh +8 -0
  691. data/packer/provisioners/wpscan.rb +23 -0
  692. data/packer/provisioners/xrdp.sh +22 -0
  693. data/packer/provisioners/zzuf.sh +5 -0
  694. data/pwn.gemspec +55 -0
  695. data/reinstall_pwn_gemset.sh +27 -0
  696. data/spec/lib/pwn/aws/acm_spec.rb +15 -0
  697. data/spec/lib/pwn/aws/api_gateway_spec.rb +15 -0
  698. data/spec/lib/pwn/aws/app_stream_spec.rb +15 -0
  699. data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +15 -0
  700. data/spec/lib/pwn/aws/application_discovery_service_spec.rb +15 -0
  701. data/spec/lib/pwn/aws/auto_scaling_spec.rb +15 -0
  702. data/spec/lib/pwn/aws/batch_spec.rb +15 -0
  703. data/spec/lib/pwn/aws/budgets_spec.rb +15 -0
  704. data/spec/lib/pwn/aws/cloud_formation_spec.rb +15 -0
  705. data/spec/lib/pwn/aws/cloud_front_spec.rb +15 -0
  706. data/spec/lib/pwn/aws/cloud_hsm_spec.rb +15 -0
  707. data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +15 -0
  708. data/spec/lib/pwn/aws/cloud_search_spec.rb +15 -0
  709. data/spec/lib/pwn/aws/cloud_trail_spec.rb +15 -0
  710. data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +15 -0
  711. data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +15 -0
  712. data/spec/lib/pwn/aws/cloud_watch_spec.rb +15 -0
  713. data/spec/lib/pwn/aws/code_build_spec.rb +15 -0
  714. data/spec/lib/pwn/aws/code_commit_spec.rb +15 -0
  715. data/spec/lib/pwn/aws/code_deploy_spec.rb +15 -0
  716. data/spec/lib/pwn/aws/code_pipeline_spec.rb +15 -0
  717. data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +15 -0
  718. data/spec/lib/pwn/aws/cognito_identity_spec.rb +15 -0
  719. data/spec/lib/pwn/aws/cognito_sync_spec.rb +15 -0
  720. data/spec/lib/pwn/aws/config_service_spec.rb +15 -0
  721. data/spec/lib/pwn/aws/data_pipleline_spec.rb +15 -0
  722. data/spec/lib/pwn/aws/database_migration_service_spec.rb +15 -0
  723. data/spec/lib/pwn/aws/device_farm_spec.rb +15 -0
  724. data/spec/lib/pwn/aws/direct_connect_spec.rb +15 -0
  725. data/spec/lib/pwn/aws/directory_service_spec.rb +15 -0
  726. data/spec/lib/pwn/aws/dynamo_db_spec.rb +15 -0
  727. data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +15 -0
  728. data/spec/lib/pwn/aws/ec2_spec.rb +15 -0
  729. data/spec/lib/pwn/aws/ecr_spec.rb +15 -0
  730. data/spec/lib/pwn/aws/ecs_spec.rb +15 -0
  731. data/spec/lib/pwn/aws/efs_spec.rb +15 -0
  732. data/spec/lib/pwn/aws/elasti_cache_spec.rb +15 -0
  733. data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +15 -0
  734. data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +15 -0
  735. data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +15 -0
  736. data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +15 -0
  737. data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +15 -0
  738. data/spec/lib/pwn/aws/emr_spec.rb +15 -0
  739. data/spec/lib/pwn/aws/firehose_spec.rb +15 -0
  740. data/spec/lib/pwn/aws/game_lift_spec.rb +15 -0
  741. data/spec/lib/pwn/aws/glacier_spec.rb +15 -0
  742. data/spec/lib/pwn/aws/health_spec.rb +15 -0
  743. data/spec/lib/pwn/aws/iam_spec.rb +15 -0
  744. data/spec/lib/pwn/aws/import_export_spec.rb +15 -0
  745. data/spec/lib/pwn/aws/inspector_spec.rb +15 -0
  746. data/spec/lib/pwn/aws/iot_data_plane_spec.rb +15 -0
  747. data/spec/lib/pwn/aws/iot_spec.rb +15 -0
  748. data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +15 -0
  749. data/spec/lib/pwn/aws/kinesis_spec.rb +15 -0
  750. data/spec/lib/pwn/aws/kms_spec.rb +15 -0
  751. data/spec/lib/pwn/aws/lambda_preview_spec.rb +15 -0
  752. data/spec/lib/pwn/aws/lambda_spec.rb +15 -0
  753. data/spec/lib/pwn/aws/lex_spec.rb +15 -0
  754. data/spec/lib/pwn/aws/lightsail_spec.rb +15 -0
  755. data/spec/lib/pwn/aws/machine_learning_spec.rb +15 -0
  756. data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +15 -0
  757. data/spec/lib/pwn/aws/marketplace_metering_spec.rb +15 -0
  758. data/spec/lib/pwn/aws/ops_works_cm_spec.rb +15 -0
  759. data/spec/lib/pwn/aws/ops_works_spec.rb +15 -0
  760. data/spec/lib/pwn/aws/pinpoint_spec.rb +15 -0
  761. data/spec/lib/pwn/aws/polly_spec.rb +15 -0
  762. data/spec/lib/pwn/aws/rds_spec.rb +15 -0
  763. data/spec/lib/pwn/aws/redshift_spec.rb +15 -0
  764. data/spec/lib/pwn/aws/rekognition_spec.rb +15 -0
  765. data/spec/lib/pwn/aws/route53_domains_spec.rb +15 -0
  766. data/spec/lib/pwn/aws/route53_spec.rb +15 -0
  767. data/spec/lib/pwn/aws/s3_spec.rb +15 -0
  768. data/spec/lib/pwn/aws/service_catalog_spec.rb +15 -0
  769. data/spec/lib/pwn/aws/ses_spec.rb +15 -0
  770. data/spec/lib/pwn/aws/shield_spec.rb +15 -0
  771. data/spec/lib/pwn/aws/simple_db_spec.rb +15 -0
  772. data/spec/lib/pwn/aws/sms_spec.rb +15 -0
  773. data/spec/lib/pwn/aws/snowball_spec.rb +15 -0
  774. data/spec/lib/pwn/aws/sns_spec.rb +15 -0
  775. data/spec/lib/pwn/aws/sqs_spec.rb +15 -0
  776. data/spec/lib/pwn/aws/ssm_spec.rb +15 -0
  777. data/spec/lib/pwn/aws/states_spec.rb +15 -0
  778. data/spec/lib/pwn/aws/storage_gateway_spec.rb +15 -0
  779. data/spec/lib/pwn/aws/sts_spec.rb +15 -0
  780. data/spec/lib/pwn/aws/support_spec.rb +15 -0
  781. data/spec/lib/pwn/aws/swf_spec.rb +15 -0
  782. data/spec/lib/pwn/aws/waf_regional_spec.rb +15 -0
  783. data/spec/lib/pwn/aws/waf_spec.rb +15 -0
  784. data/spec/lib/pwn/aws/workspaces_spec.rb +15 -0
  785. data/spec/lib/pwn/aws/x_ray_spec.rb +15 -0
  786. data/spec/lib/pwn/aws_spec.rb +10 -0
  787. data/spec/lib/pwn/banner/bubble_spec.rb +20 -0
  788. data/spec/lib/pwn/banner/matrix_spec.rb +20 -0
  789. data/spec/lib/pwn/banner/ninja_spec.rb +20 -0
  790. data/spec/lib/pwn/banner/off_the_air_spec.rb +20 -0
  791. data/spec/lib/pwn/banner/pirate_spec.rb +20 -0
  792. data/spec/lib/pwn/banner_spec.rb +15 -0
  793. data/spec/lib/pwn/ffi_spec.rb +10 -0
  794. data/spec/lib/pwn/plugins/android_spec.rb +15 -0
  795. data/spec/lib/pwn/plugins/authentication_helper_spec.rb +15 -0
  796. data/spec/lib/pwn/plugins/basic_auth_spec.rb +15 -0
  797. data/spec/lib/pwn/plugins/beef_spec.rb +15 -0
  798. data/spec/lib/pwn/plugins/burp_suite_spec.rb +15 -0
  799. data/spec/lib/pwn/plugins/bus_pirate_spec.rb +15 -0
  800. data/spec/lib/pwn/plugins/char_spec.rb +15 -0
  801. data/spec/lib/pwn/plugins/credit_card_spec.rb +15 -0
  802. data/spec/lib/pwn/plugins/dao_ldap_spec.rb +15 -0
  803. data/spec/lib/pwn/plugins/dao_mongo_spec.rb +15 -0
  804. data/spec/lib/pwn/plugins/dao_postgres_spec.rb +15 -0
  805. data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +15 -0
  806. data/spec/lib/pwn/plugins/defect_dojo_spec.rb +15 -0
  807. data/spec/lib/pwn/plugins/detect_os_spec.rb +15 -0
  808. data/spec/lib/pwn/plugins/ein_spec.rb +15 -0
  809. data/spec/lib/pwn/plugins/file_fu_spec.rb +15 -0
  810. data/spec/lib/pwn/plugins/fuzz_spec.rb +15 -0
  811. data/spec/lib/pwn/plugins/git_spec.rb +15 -0
  812. data/spec/lib/pwn/plugins/github_spec.rb +15 -0
  813. data/spec/lib/pwn/plugins/hacker_one_spec.rb +15 -0
  814. data/spec/lib/pwn/plugins/ibm_appscan_spec.rb +15 -0
  815. data/spec/lib/pwn/plugins/ip_info_spec.rb +15 -0
  816. data/spec/lib/pwn/plugins/jenkins_spec.rb +15 -0
  817. data/spec/lib/pwn/plugins/json_pathify_spec.rb +15 -0
  818. data/spec/lib/pwn/plugins/mail_agent_spec.rb +15 -0
  819. data/spec/lib/pwn/plugins/metasploit_spec.rb +15 -0
  820. data/spec/lib/pwn/plugins/msr206_spec.rb +15 -0
  821. data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +15 -0
  822. data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +15 -0
  823. data/spec/lib/pwn/plugins/nmap_it_spec.rb +15 -0
  824. data/spec/lib/pwn/plugins/oauth2_spec.rb +15 -0
  825. data/spec/lib/pwn/plugins/ocr_spec.rb +15 -0
  826. data/spec/lib/pwn/plugins/openvas_spec.rb +15 -0
  827. data/spec/lib/pwn/plugins/owasp_zap_spec.rb +15 -0
  828. data/spec/lib/pwn/plugins/packet_spec.rb +15 -0
  829. data/spec/lib/pwn/plugins/pdf_parse_spec.rb +15 -0
  830. data/spec/lib/pwn/plugins/pony_spec.rb +15 -0
  831. data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +15 -0
  832. data/spec/lib/pwn/plugins/rfidler_spec.rb +15 -0
  833. data/spec/lib/pwn/plugins/serial_spec.rb +15 -0
  834. data/spec/lib/pwn/plugins/shodan_spec.rb +15 -0
  835. data/spec/lib/pwn/plugins/slack_client_spec.rb +15 -0
  836. data/spec/lib/pwn/plugins/sock_spec.rb +15 -0
  837. data/spec/lib/pwn/plugins/son_micro_rfid_spec.rb +15 -0
  838. data/spec/lib/pwn/plugins/spider_spec.rb +15 -0
  839. data/spec/lib/pwn/plugins/ssn_spec.rb +15 -0
  840. data/spec/lib/pwn/plugins/thread_pool_spec.rb +15 -0
  841. data/spec/lib/pwn/plugins/transparent_browser_spec.rb +15 -0
  842. data/spec/lib/pwn/plugins/twitter_api_spec.rb +15 -0
  843. data/spec/lib/pwn/plugins/uri_scheme_spec.rb +15 -0
  844. data/spec/lib/pwn/plugins/vsphere_spec.rb +15 -0
  845. data/spec/lib/pwn/plugins_spec.rb +10 -0
  846. data/spec/lib/pwn/reports/fuzz_spec.rb +15 -0
  847. data/spec/lib/pwn/reports/phone_spec.rb +15 -0
  848. data/spec/lib/pwn/reports/sast_spec.rb +15 -0
  849. data/spec/lib/pwn/reports/uri_buster_spec.rb +15 -0
  850. data/spec/lib/pwn/reports_spec.rb +10 -0
  851. data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +25 -0
  852. data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +25 -0
  853. data/spec/lib/pwn/sast/aws_spec.rb +25 -0
  854. data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +25 -0
  855. data/spec/lib/pwn/sast/base64_spec.rb +25 -0
  856. data/spec/lib/pwn/sast/beef_hook_spec.rb +25 -0
  857. data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +25 -0
  858. data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +25 -0
  859. data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +25 -0
  860. data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +25 -0
  861. data/spec/lib/pwn/sast/csrf_spec.rb +25 -0
  862. data/spec/lib/pwn/sast/deserial_java_spec.rb +25 -0
  863. data/spec/lib/pwn/sast/emoticon_spec.rb +25 -0
  864. data/spec/lib/pwn/sast/eval_spec.rb +25 -0
  865. data/spec/lib/pwn/sast/factory_spec.rb +25 -0
  866. data/spec/lib/pwn/sast/http_authorization_header_spec.rb +25 -0
  867. data/spec/lib/pwn/sast/inner_html_spec.rb +25 -0
  868. data/spec/lib/pwn/sast/keystore_spec.rb +25 -0
  869. data/spec/lib/pwn/sast/location_hash_spec.rb +25 -0
  870. data/spec/lib/pwn/sast/log4j_spec.rb +25 -0
  871. data/spec/lib/pwn/sast/logger_spec.rb +25 -0
  872. data/spec/lib/pwn/sast/password_spec.rb +25 -0
  873. data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +25 -0
  874. data/spec/lib/pwn/sast/php_type_juggling_spec.rb +25 -0
  875. data/spec/lib/pwn/sast/pom_version_spec.rb +25 -0
  876. data/spec/lib/pwn/sast/port_spec.rb +25 -0
  877. data/spec/lib/pwn/sast/private_key_spec.rb +25 -0
  878. data/spec/lib/pwn/sast/redirect_spec.rb +25 -0
  879. data/spec/lib/pwn/sast/redos_spec.rb +25 -0
  880. data/spec/lib/pwn/sast/shell_spec.rb +25 -0
  881. data/spec/lib/pwn/sast/signature_spec.rb +25 -0
  882. data/spec/lib/pwn/sast/sql_spec.rb +25 -0
  883. data/spec/lib/pwn/sast/ssl_spec.rb +25 -0
  884. data/spec/lib/pwn/sast/sudo_spec.rb +25 -0
  885. data/spec/lib/pwn/sast/task_tag_spec.rb +25 -0
  886. data/spec/lib/pwn/sast/throw_errors_spec.rb +25 -0
  887. data/spec/lib/pwn/sast/token_spec.rb +25 -0
  888. data/spec/lib/pwn/sast/version_spec.rb +25 -0
  889. data/spec/lib/pwn/sast/window_location_hash_spec.rb +25 -0
  890. data/spec/lib/pwn/sast_spec.rb +10 -0
  891. data/spec/lib/pwn/www/app_cobalt_io_spec.rb +15 -0
  892. data/spec/lib/pwn/www/bing_spec.rb +15 -0
  893. data/spec/lib/pwn/www/bug_crowd.rb +15 -0
  894. data/spec/lib/pwn/www/checkip_spec.rb +15 -0
  895. data/spec/lib/pwn/www/coinbase_pro_spec.rb +15 -0
  896. data/spec/lib/pwn/www/duckduckgo_spec.rb +15 -0
  897. data/spec/lib/pwn/www/facebook_spec.rb +15 -0
  898. data/spec/lib/pwn/www/google_spec.rb +15 -0
  899. data/spec/lib/pwn/www/hacker_one_spec.rb +15 -0
  900. data/spec/lib/pwn/www/linkedin_spec.rb +15 -0
  901. data/spec/lib/pwn/www/pandora_spec.rb +15 -0
  902. data/spec/lib/pwn/www/pastebin_spec.rb +15 -0
  903. data/spec/lib/pwn/www/paypal_spec.rb +15 -0
  904. data/spec/lib/pwn/www/synack_spec.rb +15 -0
  905. data/spec/lib/pwn/www/torch_spec.rb +15 -0
  906. data/spec/lib/pwn/www/trading_view_spec.rb +15 -0
  907. data/spec/lib/pwn/www/twitter_spec.rb +15 -0
  908. data/spec/lib/pwn/www/uber_spec.rb +15 -0
  909. data/spec/lib/pwn/www/upwork_spec.rb +15 -0
  910. data/spec/lib/pwn/www/youtube_spec.rb +15 -0
  911. data/spec/lib/pwn/www_spec.rb +10 -0
  912. data/spec/lib/pwn_spec.rb +10 -0
  913. data/spec/spec_helper.rb +3 -0
  914. data/third_party/.gitkeep +0 -0
  915. data/update_pwn.sh +9 -0
  916. data/upgrade_ruby.sh +42 -0
  917. data/vagrant/provisioners/apache2.sh +76 -0
  918. data/vagrant/provisioners/beef.rb +30 -0
  919. data/vagrant/provisioners/burpsuite_pro.rb +37 -0
  920. data/vagrant/provisioners/exploit-db.sh +2 -0
  921. data/vagrant/provisioners/gem.sh +4 -0
  922. data/vagrant/provisioners/init_env.sh +22 -0
  923. data/vagrant/provisioners/jenkins.sh +87 -0
  924. data/vagrant/provisioners/jenkins_ssh-keygen.rb +86 -0
  925. data/vagrant/provisioners/kali_customize.rb +130 -0
  926. data/vagrant/provisioners/letsencrypt.rb +35 -0
  927. data/vagrant/provisioners/metasploit.rb +25 -0
  928. data/vagrant/provisioners/nmap_all_live_hosts.sh +2 -0
  929. data/vagrant/provisioners/openvas.sh +23 -0
  930. data/vagrant/provisioners/openvas_wrappers.sh +2 -0
  931. data/vagrant/provisioners/post_install.sh +14 -0
  932. data/vagrant/provisioners/postgres.sh +22 -0
  933. data/vagrant/provisioners/pwn.sh +15 -0
  934. data/vagrant/provisioners/rvm.sh +18 -0
  935. data/vagrant/provisioners/ssllabs-scan.sh +10 -0
  936. data/vagrant/provisioners/toggle_tor.sh +2 -0
  937. data/vagrant/provisioners/update_jenkins_plugins.rb +30 -0
  938. data/vagrant/provisioners/update_os.sh +108 -0
  939. data/vagrant/provisioners/upload_globals.sh +63 -0
  940. data/vagrant/provisioners/userland_fdisk.sh +22 -0
  941. data/vagrant/provisioners/userland_lvm.sh +5 -0
  942. data/vagrant/provisioners/wpscan.rb +25 -0
  943. data/vagrant_rsync_third_party.lst +1 -0
  944. data/vagrant_rsync_userland_template.lst +8 -0
  945. metadata +992 -3
@@ -0,0 +1,71 @@
1
+ # frozen_string_literal: true
2
+
3
+ module PWN
4
+ # This file, using the autoload directive loads SP plugins
5
+ # into memory only when they're needed. For more information, see:
6
+ # http://www.rubyinside.com/ruby-techniques-revealed-autoload-1652.html
7
+ module Plugins
8
+ autoload :Android, 'pwn/plugins/android'
9
+ autoload :AnsibleVault, 'pwn/plugins/ansible_vault'
10
+ autoload :AuthenticationHelper, 'pwn/plugins/authentication_helper'
11
+ autoload :BareSIP, 'pwn/plugins/baresip'
12
+ autoload :BasicAuth, 'pwn/plugins/basic_auth'
13
+ autoload :BeEF, 'pwn/plugins/beef'
14
+ autoload :BurpSuite, 'pwn/plugins/burp_suite'
15
+ autoload :BusPirate, 'pwn/plugins/bus_pirate'
16
+ autoload :Char, 'pwn/plugins/char'
17
+ autoload :CreditCard, 'pwn/plugins/credit_card'
18
+ autoload :PWNLogger, 'pwn/plugins/pwn_logger'
19
+ autoload :DAOLDAP, 'pwn/plugins/dao_ldap'
20
+ autoload :DAOMongo, 'pwn/plugins/dao_mongo'
21
+ autoload :DAOPostgres, 'pwn/plugins/dao_postgres'
22
+ autoload :DAOSQLite3, 'pwn/plugins/dao_sqlite3'
23
+ autoload :DefectDojo, 'pwn/plugins/defect_dojo'
24
+ autoload :DetectOS, 'pwn/plugins/detect_os'
25
+ autoload :EIN, 'pwn/plugins/ein'
26
+ autoload :FileFu, 'pwn/plugins/file_fu'
27
+ autoload :Fuzz, 'pwn/plugins/fuzz'
28
+ autoload :Git, 'pwn/plugins/git'
29
+ autoload :Github, 'pwn/plugins/github'
30
+ autoload :HackerOne, 'pwn/plugins/hacker_one'
31
+ autoload :IBMAppscan, 'pwn/plugins/ibm_appscan'
32
+ autoload :IPInfo, 'pwn/plugins/ip_info'
33
+ autoload :Jenkins, 'pwn/plugins/jenkins'
34
+ autoload :JSONPathify, 'pwn/plugins/json_pathify'
35
+ autoload :MailAgent, 'pwn/plugins/mail_agent'
36
+ autoload :Metasploit, 'pwn/plugins/metasploit'
37
+ autoload :MSR206, 'pwn/plugins/msr206'
38
+ autoload :NessusCloud, 'pwn/plugins/nessus_cloud'
39
+ autoload :NexposeVulnScan, 'pwn/plugins/nexpose_vuln_scan'
40
+ autoload :NmapIt, 'pwn/plugins/nmap_it'
41
+ autoload :OAuth2, 'pwn/plugins/oauth2'
42
+ autoload :OCR, 'pwn/plugins/ocr'
43
+ autoload :OpenAI, 'pwn/plugins/open_ai'
44
+ autoload :OpenVAS, 'pwn/plugins/openvas'
45
+ autoload :OwaspZap, 'pwn/plugins/owasp_zap'
46
+ autoload :Packet, 'pwn/plugins/packet'
47
+ autoload :PDFParse, 'pwn/plugins/pdf_parse'
48
+ autoload :Pony, 'pwn/plugins/pony'
49
+ autoload :RabbitMQ, 'pwn/plugins/rabbit_mq'
50
+ autoload :RFIDler, 'pwn/plugins/rfidler'
51
+ autoload :Serial, 'pwn/plugins/serial'
52
+ autoload :Shodan, 'pwn/plugins/shodan'
53
+ autoload :SlackClient, 'pwn/plugins/slack_client'
54
+ autoload :Sock, 'pwn/plugins/sock'
55
+ autoload :SonMicroRFID, 'pwn/plugins/son_micro_rfid'
56
+ autoload :Spider, 'pwn/plugins/spider'
57
+ autoload :SSN, 'pwn/plugins/ssn'
58
+ autoload :ThreadPool, 'pwn/plugins/thread_pool'
59
+ autoload :TransparentBrowser, 'pwn/plugins/transparent_browser'
60
+ autoload :TwitterAPI, 'pwn/plugins/twitter_api'
61
+ autoload :URIScheme, 'pwn/plugins/uri_scheme'
62
+ autoload :Voice, 'pwn/plugins/voice'
63
+ autoload :Vsphere, 'pwn/plugins/vsphere'
64
+
65
+ # Display a List of Every PWN Plugin
66
+
67
+ public_class_method def self.help
68
+ constants.sort
69
+ end
70
+ end
71
+ end
@@ -0,0 +1,272 @@
1
+ # frozen_string_literal: true
2
+
3
+ require 'json'
4
+
5
+ module PWN
6
+ module Reports
7
+ # This plugin generates Fuzz results from PWN::Plugins::Fuzz.
8
+ # Two files are created, a JSON file containing all of the
9
+ # Fuzz results and an HTML file which is essentially the UI
10
+ # for the JSON file.
11
+ module Fuzz
12
+ # Supported Method Parameters::
13
+ # PWN::Reports::Fuzz.generate(
14
+ # dir_path: dir_path,
15
+ # results_hash: results_hash,
16
+ # char_encoding: 'optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)'
17
+ # )
18
+
19
+ public_class_method def self.generate(opts = {})
20
+ dir_path = opts[:dir_path].to_s if File.directory?(opts[:dir_path].to_s)
21
+ raise "PWN Error: Invalid Directory #{dir_path}" if dir_path.nil?
22
+
23
+ results_hash = opts[:results_hash]
24
+ opts[:char_encoding].nil? ? char_encoding = 'UTF-8' : char_encoding = opts[:char_encoding].to_s
25
+
26
+ # JSON object Completion
27
+ File.open("#{dir_path}/pwn_fuzz_net_app_proto.json", "w:#{char_encoding}") do |f|
28
+ f.print(
29
+ JSON.pretty_generate(results_hash).force_encoding(char_encoding)
30
+ )
31
+ end
32
+
33
+ # Report All the Bugs!!! \o/
34
+ html_report = %q{<!DOCTYPE HTML>
35
+ <html>
36
+ <head>
37
+ <!-- favicon.ico from https://0dayinc.com -->
38
+ <link rel="icon" href="data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAABIXAAASFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIkAAACJAgAAiSYAAIlbAACJcAAAiX0AAIlmAACJLQAAiQQAAIkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIkAAACJAAAAiS0AAIluAACJdwAAiXgAAIl+AACJeAAAiXQAAIk5AACJAQAAiQAAAAAAAAAAAAAAAAAAAAAAAACJAAAAiRgAAIlvAACJbQAAiXcAAIl7AACJcwAAiXEAAIl1AACJZwAAiR4AAIkAAACJAAAAAAAAAAAAAACJAAAAiQAAAIlEAACJfAAAiXIAAIlyAACJewAAiX4AAIl5AACJdQAAiXcAAIlIAACJAAAAiQAAAAAAAAAAAAAAiQAAAIkJAACJWQAAiXUAAIl9AACJdAAAiYYAAImLAACJdAAAiXkAAImNAACJfQAAiQwAAIkAAAAAAAAAAAAAAIkAAACJFQAAiWsAAIl2AACJfAAAiYIAAImCAACJfwAAiXYAAIl5AACJiQAAiYYAAIkWAACJAAAAAAAAAAAAAACJAAAAiSAAAIl2AACJeQAAiXkAAIl1AACJfwAAiYEAAIl8AACJbwAAiXoAAImBAACJFgAAiQAAAAAAAAAAAAAAiQAAAIkpAACJeAAAiXMAAIl3AACJeQAAiXUAAImAAACJfwAAiWYAAIl4AACJfwAAiR4AAIkAAAAAAAAAAAAAAIkAAACJKAAAiXkAAIlyAACJdQAAiXQAAIluAACJfAAAiXwAAIl3AACJewAAiXwAAIkvAACJAAAAAAAAAAAAAACJAAAAiSMAAIl4AACJdgAAiXsAAIl1AACJcQAAiXcAAIl6AACJeQAAiXoAAIl0AACJKQAAiQAAAAAAAAAAAAAAiQAAAIkXAACJaAAAiXgAAIl3AACJfAAAiXkAAIl3AACJZwAAiXcAAIl0AACJagAAiSgAAIkAAAAAAAAAAAAAAIkAAACJDgAAiV4AAIl5AACJbwAAiW4AAIl9AACJewAAiXcAAIl6AACJfQAAiW8AAIkWAACJAAAAAAAAAAAAAACJAAAAiQ0AAIllAACJewAAiXYAAIl4AACJdQAAiXUAAIl4AACJbQAAiXkAAIlNAACJAwAAiQAAAAAAAAAAAAAAiQAAAIkCAACJPQAAiXMAAIl2AACJeAAAiWgAAIlsAACJfQAAiXsAAIlwAACJGQAAiQAAAIkAAAAAAAAAAAAAAAAAAACJAAAAiQcAAIk4AACJXAAAiXoAAIl7AACJfAAAiYAAAIlsAACJJwAAiQMAAIkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIkAAACJAQAAiSsAAIluAACJewAAiXwAAIluAACJKgAAiQAAAIkAAAAAAAAAAAAAAAAA8A8AAPAHAADgBwAA4AcAAMADAADAAwAAwAMAAMADAADAAwAAwAMAAMADAADAAwAAwAMAAMAHAADgBwAA8B8AAA==" type="image/x-icon" />
39
+ <style>
40
+ body {
41
+ font-family: Verdana, Geneva, sans-serif;
42
+ font-size: 11px;
43
+ background-color: #FFFFFF;
44
+ color: #084B8A !important;
45
+ }
46
+
47
+ a:link {
48
+ color: #0174DF;
49
+ text-decoration: none;
50
+ }
51
+
52
+ a:visited {
53
+ color: #B40404;
54
+ text-decoration: none;
55
+ }
56
+
57
+ a:hover {
58
+ color: #01A9DB;
59
+ text-decoration: underline;
60
+ }
61
+
62
+ a:active {
63
+ color: #610B5E;
64
+ text-decoration: underline;
65
+ }
66
+
67
+ table {
68
+ width: 100%;
69
+ border-spacing:0px;
70
+ }
71
+
72
+ table.squish {
73
+ table-layout: fixed;
74
+ }
75
+
76
+ td {
77
+ vertical-align: top;
78
+ word-wrap: break-word !important;
79
+ }
80
+
81
+ .highlighted {
82
+ background-color: #F2F5A9 !important;
83
+ }
84
+ </style>
85
+
86
+ <!-- jQuery & DataTables -->
87
+ <script src="//code.jquery.com/jquery-3.6.0.min.js"></script>
88
+
89
+ <link rel="stylesheet" type="text/css" href="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.css"/>
90
+
91
+ <script type="text/javascript" src="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.js"></script>
92
+ </head>
93
+
94
+ <body id="pwn_body">
95
+
96
+ <h1 style="display:inline">
97
+ &nbsp;~&nbsp;<a href="https://github.com/0dayinc/pwn/tree/master">pwn network fuzzer</a>
98
+ </h1><br /><br />
99
+
100
+ <div><button type="button" id="button">Rows Selected</button></div><br />
101
+ <div>
102
+ <b>Toggle Column(s):</b>&nbsp;
103
+ <a class="toggle-vis" data-column="1" href="#">Timestamp</a>&nbsp;|&nbsp;
104
+ <a class="toggle-vis" data-column="2" href="#">Request</a>&nbsp;|&nbsp;
105
+ <a class="toggle-vis" data-column="3" href="#">Request Encoding</a>&nbsp;|&nbsp;
106
+ <a class="toggle-vis" data-column="3" href="#">Request Length</a>&nbsp;|&nbsp;
107
+ <a class="toggle-vis" data-column="3" href="#">Response</a>&nbsp;|&nbsp;
108
+ <a class="toggle-vis" data-column="3" href="#">Response Length</a>&nbsp;|&nbsp;
109
+ </div>
110
+ <br /><br />
111
+
112
+ <div>
113
+ <table id="pwn_fuzz_net_app_proto" class="display squish" cellspacing="0">
114
+ <thead>
115
+ <tr>
116
+ <th>#</th>
117
+ <th>Timestamp</th>
118
+ <th>Request</th>
119
+ <th>Request Encoding</th>
120
+ <th>Request Length</th>
121
+ <th>Response</th>
122
+ <th>Response Length</th>
123
+ </tr>
124
+ </thead>
125
+ <col width="30px" />
126
+ <col width="60px" />
127
+ <col width="300px" />
128
+ <col width="90px" />
129
+ <col width="90px" />
130
+ <col width="300px" />
131
+ <col width="90px" />
132
+ <!-- DataTables <tbody> -->
133
+ </table>
134
+ </div>
135
+
136
+ <script>
137
+ var htmlEntityEncode = $.fn.dataTable.render.text().display;
138
+
139
+ var line_entry_uri = "";
140
+ $(document).ready(function() {
141
+ var oldStart = 0;
142
+ var table = $('#pwn_fuzz_net_app_proto').DataTable( {
143
+ "paging": true,
144
+ "pagingType": "full_numbers",
145
+ "fnDrawCallback": function ( oSettings ) {
146
+ /* Need to redo the counters if filtered or sorted */
147
+ if ( oSettings.bSorted || oSettings.bFiltered ) {
148
+ for ( var i=0, iLen=oSettings.aiDisplay.length ; i<iLen ; i++ ) {
149
+ $('td:eq(0)', oSettings.aoData[ oSettings.aiDisplay[i] ].nTr ).html( i+1 );
150
+ }
151
+ }
152
+ // Jump to top when utilizing pagination
153
+ if ( oSettings._iDisplayStart != oldStart ) {
154
+ var targetOffset = $('#pwn_body').offset().top;
155
+ $('html,body').animate({scrollTop: targetOffset}, 500);
156
+ oldStart = oSettings._iDisplayStart;
157
+ }
158
+ // Select individual lines in a row
159
+ $('#multi_line_select tbody').on('click', 'tr', function () {
160
+ $(this).toggleClass('highlighted');
161
+ if ($('#multi_line_select tr.highlighted').length > 0) {
162
+ $('#multi_line_select tr td button').attr('disabled', 'disabled');
163
+ // Remove multi-line bug button
164
+ } else {
165
+ $('#multi_line_select tr td button').removeAttr('disabled');
166
+ // Add multi-line bug button
167
+ }
168
+ });
169
+ },
170
+ "ajax": "pwn_fuzz_net_app_proto.json",
171
+ //"deferRender": true,
172
+ "dom": "fplitfpliS",
173
+ "autoWidth": false,
174
+ "fixedColumns": true,
175
+ "columnDefs": [
176
+ {
177
+ targets: 3,
178
+ className: 'dt-body-center'
179
+ },
180
+ {
181
+ targets: 5,
182
+ className: 'dt-body-center'
183
+ }
184
+ ],
185
+ "columns": [
186
+ { "data": null },
187
+ {
188
+ "data": "timestamp",
189
+ "render": $.fn.dataTable.render.text()
190
+ },
191
+ {
192
+ "data": "request",
193
+ "render": $.fn.dataTable.render.text()
194
+ },
195
+ {
196
+ "data": "request_encoding",
197
+ "render": $.fn.dataTable.render.text()
198
+ },
199
+ {
200
+ "data": "request_len",
201
+ "render": $.fn.dataTable.render.text()
202
+ },
203
+ {
204
+ "data": "response",
205
+ "render": $.fn.dataTable.render.text()
206
+ },
207
+ {
208
+ "data": "response_len",
209
+ "render": $.fn.dataTable.render.text()
210
+ }
211
+ ],
212
+ });
213
+ // Toggle Columns
214
+ $('a.toggle-vis').on('click', function (e) {
215
+ e.preventDefault();
216
+
217
+ // Get the column API object
218
+ var column = table.column( $(this).attr('data-column') );
219
+
220
+ // Toggle the visibility
221
+ column.visible( ! column.visible() );
222
+ });
223
+
224
+ // TODO: Open bug for highlighted rows ;)
225
+ $('#button').click( function () {
226
+ alert($('#multi_line_select tr.highlighted').length +' row(s) highlighted');
227
+ });
228
+ });
229
+
230
+ function multi_line_select() {
231
+ // Select all lines in a row
232
+ //$('#pwn_fuzz_net_app_proto tbody').on('click', 'tr', function () {
233
+ // $(this).children('td').children('#multi_line_select').children('tbody').children('tr').toggleClass('highlighted');
234
+ //});
235
+
236
+ }
237
+ </script>
238
+ </body>
239
+ </html>
240
+ }
241
+
242
+ File.open("#{dir_path}/pwn_fuzz_net_app_proto.html", 'w') do |f|
243
+ f.print(html_report)
244
+ end
245
+ rescue StandardError => e
246
+ raise e
247
+ end
248
+
249
+ # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
250
+
251
+ public_class_method def self.authors
252
+ "AUTHOR(S):
253
+ 0day Inc. <request.pentest@0dayinc.com>
254
+ "
255
+ end
256
+
257
+ # Display Usage for this Module
258
+
259
+ public_class_method def self.help
260
+ puts "USAGE:
261
+ #{self}.generate(
262
+ dir_path: dir_path,
263
+ results_hash: results_hash,
264
+ char_encoding: 'optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)'
265
+ )
266
+
267
+ #{self}.authors
268
+ "
269
+ end
270
+ end
271
+ end
272
+ end
@@ -0,0 +1,312 @@
1
+ # frozen_string_literal: true
2
+
3
+ require 'json'
4
+
5
+ module PWN
6
+ module Reports
7
+ # This plugin generates the War Dialing results produced by pwn_phone.
8
+ module Phone
9
+ # Supported Method Parameters::
10
+ # PWN::Reports::Phone.generate(
11
+ # dir_path: dir_path,
12
+ # results_hash: results_hash
13
+ # )
14
+
15
+ public_class_method def self.generate(opts = {})
16
+ dir_path = opts[:dir_path].to_s if File.directory?(opts[:dir_path].to_s)
17
+ raise "PWN Error: Invalid Directory #{dir_path}" if dir_path.nil?
18
+
19
+ results_hash = opts[:results_hash]
20
+
21
+ File.write(
22
+ "#{dir_path}/pwn_phone.json",
23
+ JSON.pretty_generate(results_hash)
24
+ )
25
+
26
+ html_report = %q{<!DOCTYPE HTML>
27
+ <html>
28
+ <head>
29
+ <!-- favicon.ico from https://0dayinc.com -->
30
+ <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
31
+ <style>
32
+ body {
33
+ font-family: Verdana, Geneva, sans-serif;
34
+ font-size: 11px;
35
+ background-color: #FFFFFF;
36
+ color: #084B8A !important;
37
+ }
38
+
39
+ a:link {
40
+ color: #0174DF;
41
+ text-decoration: none;
42
+ }
43
+
44
+ a:visited {
45
+ color: #B40404;
46
+ text-decoration: none;
47
+ }
48
+
49
+ a:hover {
50
+ color: #01A9DB;
51
+ text-decoration: underline;
52
+ }
53
+
54
+ a:active {
55
+ color: #610B5E;
56
+ text-decoration: underline;
57
+ }
58
+
59
+ table {
60
+ width: 100%;
61
+ border-spacing:0px;
62
+ }
63
+
64
+ table.squish {
65
+ table-layout: fixed;
66
+ }
67
+
68
+ td {
69
+ vertical-align: top;
70
+ word-wrap: break-word !important;
71
+ }
72
+
73
+ .highlighted {
74
+ background-color: #F2F5A9 !important;
75
+ }
76
+ </style>
77
+
78
+ <!-- jQuery, DataTables, & FancyApps -->
79
+ <script type="text/javascript" src="//code.jquery.com/jquery-3.6.0.min.js"></script>
80
+
81
+ <link rel="stylesheet" type="text/css" href="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.css"/>
82
+
83
+ <script type="text/javascript" src="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.js"></script>
84
+
85
+ <link rel="stylesheet" href="//cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.css" type="text/css" />
86
+
87
+ <script type="text/javascript" src="//cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.umd.js"></script>
88
+ </head>
89
+
90
+ <body id="pwn_body">
91
+
92
+ <h1 style="display:inline">
93
+ <a href="https://github.com/0dayinc/pwn/tree/master">~ pwn phone</a>
94
+ </h1><br /><br />
95
+ <h2 id="report_name"></h2><br />
96
+
97
+ <div><button type="button" id="button">Rows Selected</button></div><br />
98
+ <div>
99
+ <b>Toggle Column(s):</b>&nbsp;
100
+ <a class="toggle-vis" data-column="1" href="#">Call Started</a>&nbsp;|&nbsp;
101
+ <a class="toggle-vis" data-column="2" href="#">Source #</a>&nbsp;|&nbsp;
102
+ <a class="toggle-vis" data-column="3" href="#">Source # Rules</a>&nbsp;|&nbsp;
103
+ <a class="toggle-vis" data-column="4" href="#">Target #</a>&nbsp;|&nbsp;
104
+ <a class="toggle-vis" data-column="5" href="#">Seconds Recorded</a>&nbsp;|&nbsp;
105
+ <a class="toggle-vis" data-column="6" href="#">Call Stopped</a>
106
+ <a class="toggle-vis" data-column="7" href="#">Reason</a>
107
+ <a class="toggle-vis" data-column="8" href="#">Screenlog</a>&nbsp;|&nbsp;
108
+ <a class="toggle-vis" data-column="9" href="#">Recording</a>&nbsp;|&nbsp;
109
+ <a class="toggle-vis" data-column="10" href="#">Speech to Text</a>&nbsp;|&nbsp;
110
+ <a class="toggle-vis" data-column="11" href="#">Spectrogram</a>&nbsp;|&nbsp;
111
+ <a class="toggle-vis" data-column="12" href="#">Waveform</a>
112
+ </div>
113
+ <br /><br />
114
+
115
+ <div>
116
+ <table id="pwn_phone_results" class="display" cellspacing="0">
117
+ <thead>
118
+ <tr>
119
+ <th>#</th>
120
+ <th>Call Started</th>
121
+ <th>Source #</th>
122
+ <th>Source # Rules</th>
123
+ <th>Target #</th>
124
+ <th>Seconds Recorded</th>
125
+ <th>Call Stopped</th>
126
+ <th>Reason Stopped</th>
127
+ <th>Screenlog</th>
128
+ <th>Recording</th>
129
+ <th>Speech to Text</th>
130
+ <th>Spectrogram</th>
131
+ <th>Waveform</th>
132
+ </tr>
133
+ </thead>
134
+ <!-- DataTables <tbody> -->
135
+ </table>
136
+ </div>
137
+
138
+ <script>
139
+ var htmlEntityEncode = $.fn.dataTable.render.text().display;
140
+ var line_entry_uri = "";
141
+ $(document).ready(function() {
142
+ var oldStart = 0;
143
+ var table = $('#pwn_phone_results').DataTable( {
144
+ "paging": true,
145
+ "pagingType": "full_numbers",
146
+ "fnDrawCallback": function ( oSettings ) {
147
+ /* Need to redo the counters if filtered or sorted */
148
+ if ( oSettings.bSorted || oSettings.bFiltered ) {
149
+ for ( var i=0, iLen=oSettings.aiDisplay.length ; i<iLen ; i++ ) {
150
+ $('td:eq(0)', oSettings.aoData[ oSettings.aiDisplay[i] ].nTr ).html( i+1 );
151
+ }
152
+ }
153
+ // Jump to top when utilizing pagination
154
+ if ( oSettings._iDisplayStart != oldStart ) {
155
+ var targetOffset = $('#pwn_body').offset().top;
156
+ $('html,body').animate({scrollTop: targetOffset}, 500);
157
+ oldStart = oSettings._iDisplayStart;
158
+ }
159
+ // Select individual lines in a row
160
+ $('#multi_line_select tbody').on('click', 'tr', function () {
161
+ $(this).toggleClass('highlighted');
162
+ if ($('#multi_line_select tr.highlighted').length > 0) {
163
+ $('#multi_line_select tr td button').attr('disabled', 'disabled');
164
+ // Remove multi-line bug button
165
+ } else {
166
+ $('#multi_line_select tr td button').removeAttr('disabled');
167
+ // Add multi-line bug button
168
+ }
169
+ });
170
+ },
171
+ "ajax": "pwn_phone.json",
172
+ //"deferRender": true,
173
+ "dom": "fplitfpliS",
174
+ "autoWidth": false,
175
+ "columns": [
176
+ { "data": null },
177
+ {
178
+ "data": "call_started",
179
+ "render": $.fn.dataTable.render.text()
180
+ },
181
+ {
182
+ "data": "src_num",
183
+ "render": $.fn.dataTable.render.text()
184
+ },
185
+ {
186
+ "data": "src_num_rules",
187
+ "render": $.fn.dataTable.render.text()
188
+ },
189
+ {
190
+ "data": "target_num",
191
+ "render": $.fn.dataTable.render.text()
192
+ },
193
+ {
194
+ "data": "seconds_recorded",
195
+ "render": $.fn.dataTable.render.text()
196
+ },
197
+ {
198
+ "data": "call_stopped",
199
+ "render": $.fn.dataTable.render.text()
200
+ },
201
+ {
202
+ "data": "reason",
203
+ "render": $.fn.dataTable.render.text()
204
+ },
205
+ {
206
+ "data": "screenlog",
207
+ "render": function (data, type, row, meta) {
208
+ var screenlog = htmlEntityEncode(data);
209
+ return '<a href="' + screenlog +'" target="_blank">' + screenlog + '</a>';
210
+ }
211
+ },
212
+ {
213
+ "data": "recording",
214
+ "render": function (data, type, row, meta) {
215
+ var wav = htmlEntityEncode(data);
216
+ if (wav == '--') {
217
+ return wav;
218
+ } else {
219
+ return '<audio controls><source src="' + wav +'" type="audio/wav"></audio>';
220
+ }
221
+ }
222
+ },
223
+ {
224
+ "data": "speech_to_text",
225
+ "render": function (data, type, row, meta) {
226
+ var speech_to_text = htmlEntityEncode(data);
227
+ return '<a href="' + speech_to_text +'" target="_blank">' + speech_to_text + '</a>';
228
+ }
229
+ },
230
+ {
231
+ "data": "spectrogram",
232
+ "render": function (data, type, row, meta) {
233
+ var spt = htmlEntityEncode(data);
234
+ if (spt == '--') {
235
+ return spt;
236
+ } else {
237
+ return '<a data-fancybox data-src="' + spt + '" data-caption="' + spt + '"><img src="' + data +'" target="_blank" style="width:150px; height:150px;"/></a>';
238
+ }
239
+ }
240
+ },
241
+ {
242
+ "data": "waveform",
243
+ "render": function (data, type, row, meta) {
244
+ var wfm = htmlEntityEncode(data);
245
+ if (wfm == '--') {
246
+ return wfm;
247
+ } else {
248
+ return '<a data-fancybox data-src="' + wfm + '" data-caption="' + wfm + '"><img src="' + data +'" target="_blank" style="width:150px; height:150px;"/></a>';
249
+ }
250
+ }
251
+ }
252
+ ]
253
+ });
254
+ // Toggle Columns
255
+ $('a.toggle-vis').on('click', function (e) {
256
+ e.preventDefault();
257
+
258
+ // Get the column API object
259
+ var column = table.column( $(this).attr('data-column') );
260
+
261
+ // Toggle the visibility
262
+ column.visible( ! column.visible() );
263
+ });
264
+
265
+ // TODO: Open bug for highlighted rows ;)
266
+ $('#button').click( function () {
267
+ alert($('#multi_line_select tr.highlighted').length +' row(s) highlighted');
268
+ });
269
+ });
270
+
271
+ function multi_line_select() {
272
+ // Select all lines in a row
273
+ //$('#pwn_phone_results tbody').on('click', 'tr', function () {
274
+ // $(this).children('td').children('#multi_line_select').children('tbody').children('tr').toggleClass('highlighted');
275
+ //});
276
+
277
+ }
278
+ </script>
279
+ </body>
280
+ </html>
281
+ }
282
+
283
+ File.open("#{dir_path}/pwn_phone.html", 'w') do |f|
284
+ f.print(html_report)
285
+ end
286
+ rescue StandardError => e
287
+ raise e
288
+ end
289
+
290
+ # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
291
+
292
+ public_class_method def self.authors
293
+ "AUTHOR(S):
294
+ 0day Inc. <request.pentest@0dayinc.com>
295
+ "
296
+ end
297
+
298
+ # Display Usage for this Module
299
+
300
+ public_class_method def self.help
301
+ puts "USAGE:
302
+ #{self}.generate(
303
+ dir_path: dir_path,
304
+ results_hash: results_hash
305
+ )
306
+
307
+ #{self}.authors
308
+ "
309
+ end
310
+ end
311
+ end
312
+ end