pwn 0.4.602 → 0.4.604
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/FUNDING.yml +1 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
- data/.gitignore +62 -0
- data/.rubocop.yml +14 -0
- data/.rubocop_todo.yml +115 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +24 -0
- data/CHANGELOG_BETWEEN_TAGS.txt +108 -0
- data/CODE_OF_CONDUCT.md +46 -0
- data/CONTRIBUTING.md +10 -0
- data/Gemfile +88 -0
- data/LICENSE.txt +22 -0
- data/README.md +84 -0
- data/Rakefile +20 -0
- data/Vagrantfile +250 -0
- data/bin/pwn +101 -0
- data/bin/pwn_android_war_dialer +161 -0
- data/bin/pwn_arachni +157 -0
- data/bin/pwn_arachni_rest +174 -0
- data/bin/pwn_autoinc_version +58 -0
- data/bin/pwn_aws_describe_resources +728 -0
- data/bin/pwn_burp_suite_pro_active_scan +113 -0
- data/bin/pwn_char_base64_encoding +24 -0
- data/bin/pwn_char_dec_encoding +23 -0
- data/bin/pwn_char_hex_escaped_encoding +26 -0
- data/bin/pwn_char_html_entity_encoding +24 -0
- data/bin/pwn_char_unicode_escaped_encoding +23 -0
- data/bin/pwn_char_url_encoding +24 -0
- data/bin/pwn_defectdojo_engagement_create +158 -0
- data/bin/pwn_defectdojo_importscan +104 -0
- data/bin/pwn_defectdojo_reimportscan +104 -0
- data/bin/pwn_domain_reversewhois +89 -0
- data/bin/pwn_fuzz_net_app_proto +160 -0
- data/bin/pwn_ibm_appscan_enterprise +112 -0
- data/bin/pwn_jenkins_create_job +68 -0
- data/bin/pwn_jenkins_create_view +68 -0
- data/bin/pwn_jenkins_install_plugin +91 -0
- data/bin/pwn_jenkins_thinBackup_aws_s3 +123 -0
- data/bin/pwn_jenkins_update_plugins +87 -0
- data/bin/pwn_jenkins_useradd +86 -0
- data/bin/pwn_mail_agent +127 -0
- data/bin/pwn_msf_postgres_login +28 -0
- data/bin/pwn_nessus_cloud_scan_crud +345 -0
- data/bin/pwn_nessus_cloud_vulnscan +99 -0
- data/bin/pwn_nexpose +52 -0
- data/bin/pwn_openvas_vulnscan +102 -0
- data/bin/pwn_owasp_zap_active_scan +134 -0
- data/bin/pwn_pastebin_sample_filter +61 -0
- data/bin/pwn_perimeter_recon +326 -0
- data/bin/pwn_phone +131 -0
- data/bin/pwn_sast +183 -0
- data/bin/pwn_serial_check_voicemail +66 -0
- data/bin/pwn_serial_msr206 +175 -0
- data/bin/pwn_serial_qualcomm_commands +16 -0
- data/bin/pwn_serial_son_micro_sm132_rfid +132 -0
- data/bin/pwn_shodan_search +79 -0
- data/bin/pwn_simple_http_server +57 -0
- data/bin/pwn_web_cache_deception +233 -0
- data/bin/pwn_www_checkip +62 -0
- data/bin/pwn_www_uri_buster +237 -0
- data/bin/pwn_xss_dom_vectors +169 -0
- data/build_pwn_gem.sh +30 -0
- data/documentation/PWN.png +0 -0
- data/documentation/PWN_Contributors_and_Users.png +0 -0
- data/documentation/fax-spectrogram.png +0 -0
- data/documentation/fax-waveform.png +0 -0
- data/documentation/pwn_android_war_dialer_session.png +0 -0
- data/documentation/pwn_install.png +0 -0
- data/documentation/pwn_wallpaper.jpg +0 -0
- data/documentation/ringing-spectrogram.png +0 -0
- data/documentation/ringing-waveform.png +0 -0
- data/etc/systemd/msfrpcd.service +12 -0
- data/etc/systemd/openvas.service +14 -0
- data/etc/userland/aws/apache2/jenkins_443.conf +90 -0
- data/etc/userland/aws/apache2/jenkins_80.conf +7 -0
- data/etc/userland/aws/apache2/openvas_443.conf +87 -0
- data/etc/userland/aws/apache2/openvas_80.conf +7 -0
- data/etc/userland/aws/apache2/sast_443.conf +87 -0
- data/etc/userland/aws/apache2/sast_80.conf +9 -0
- data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/aws/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/aws/jenkins/jenkins +81 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/aws/vagrant.yaml.EXAMPLE +35 -0
- data/etc/userland/docker/apache2/jenkins_443.conf +90 -0
- data/etc/userland/docker/apache2/jenkins_80.conf +7 -0
- data/etc/userland/docker/apache2/openvas_443.conf +87 -0
- data/etc/userland/docker/apache2/openvas_80.conf +7 -0
- data/etc/userland/docker/apache2/sast_443.conf +87 -0
- data/etc/userland/docker/apache2/sast_80.conf +9 -0
- data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/docker/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/docker/jenkins/jenkins +81 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/qemu/apache2/jenkins_443.conf +90 -0
- data/etc/userland/qemu/apache2/jenkins_80.conf +7 -0
- data/etc/userland/qemu/apache2/openvas_443.conf +87 -0
- data/etc/userland/qemu/apache2/openvas_80.conf +7 -0
- data/etc/userland/qemu/apache2/sast_443.conf +87 -0
- data/etc/userland/qemu/apache2/sast_80.conf +9 -0
- data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/qemu/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/qemu/jenkins/jenkins +81 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/ruby-gem/apache2/jenkins_443.conf +90 -0
- data/etc/userland/ruby-gem/apache2/jenkins_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/openvas_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/openvas_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/sast_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/sast_80.conf +9 -0
- data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/ruby-gem/jenkins/jenkins +81 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/apache2/jenkins_443.conf +90 -0
- data/etc/userland/virtualbox/apache2/jenkins_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/openvas_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/openvas_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/sast_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/sast_80.conf +9 -0
- data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/virtualbox/jenkins/jenkins +81 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/apache2/jenkins_443.conf +90 -0
- data/etc/userland/vmware/apache2/jenkins_80.conf +7 -0
- data/etc/userland/vmware/apache2/openvas_443.conf +87 -0
- data/etc/userland/vmware/apache2/openvas_80.conf +7 -0
- data/etc/userland/vmware/apache2/sast_443.conf +87 -0
- data/etc/userland/vmware/apache2/sast_80.conf +9 -0
- data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/vmware/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/vmware/jenkins/jenkins +81 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-arachni.xml +35 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/vmware/vagrant.yaml.EXAMPLE +5 -0
- data/find_latest_gem_versions_per_Gemfile.sh +11 -0
- data/git_commit_test_reinit_gem.sh +37 -0
- data/install.sh +176 -0
- data/lib/pwn/aws/acm.rb +92 -0
- data/lib/pwn/aws/api_gateway.rb +92 -0
- data/lib/pwn/aws/app_stream.rb +92 -0
- data/lib/pwn/aws/application_auto_scaling.rb +92 -0
- data/lib/pwn/aws/application_discovery_service.rb +92 -0
- data/lib/pwn/aws/auto_scaling.rb +92 -0
- data/lib/pwn/aws/batch.rb +92 -0
- data/lib/pwn/aws/budgets.rb +92 -0
- data/lib/pwn/aws/cloud_formation.rb +92 -0
- data/lib/pwn/aws/cloud_front.rb +92 -0
- data/lib/pwn/aws/cloud_hsm.rb +92 -0
- data/lib/pwn/aws/cloud_search.rb +92 -0
- data/lib/pwn/aws/cloud_search_domain.rb +92 -0
- data/lib/pwn/aws/cloud_trail.rb +92 -0
- data/lib/pwn/aws/cloud_watch.rb +92 -0
- data/lib/pwn/aws/cloud_watch_events.rb +92 -0
- data/lib/pwn/aws/cloud_watch_logs.rb +92 -0
- data/lib/pwn/aws/code_build.rb +92 -0
- data/lib/pwn/aws/code_commit.rb +92 -0
- data/lib/pwn/aws/code_deploy.rb +92 -0
- data/lib/pwn/aws/code_pipeline.rb +92 -0
- data/lib/pwn/aws/cognito_identity.rb +92 -0
- data/lib/pwn/aws/cognito_identity_provider.rb +92 -0
- data/lib/pwn/aws/cognito_sync.rb +92 -0
- data/lib/pwn/aws/config_service.rb +92 -0
- data/lib/pwn/aws/data_pipleline.rb +92 -0
- data/lib/pwn/aws/database_migration_service.rb +92 -0
- data/lib/pwn/aws/device_farm.rb +92 -0
- data/lib/pwn/aws/direct_connect.rb +92 -0
- data/lib/pwn/aws/directory_service.rb +92 -0
- data/lib/pwn/aws/dynamo_db.rb +92 -0
- data/lib/pwn/aws/dynamo_db_streams.rb +92 -0
- data/lib/pwn/aws/ec2.rb +92 -0
- data/lib/pwn/aws/ecr.rb +92 -0
- data/lib/pwn/aws/ecs.rb +92 -0
- data/lib/pwn/aws/efs.rb +92 -0
- data/lib/pwn/aws/elasti_cache.rb +92 -0
- data/lib/pwn/aws/elastic_beanstalk.rb +89 -0
- data/lib/pwn/aws/elastic_load_balancing.rb +92 -0
- data/lib/pwn/aws/elastic_load_balancing_v2.rb +92 -0
- data/lib/pwn/aws/elastic_transcoder.rb +92 -0
- data/lib/pwn/aws/elasticsearch_service.rb +92 -0
- data/lib/pwn/aws/emr.rb +92 -0
- data/lib/pwn/aws/firehose.rb +92 -0
- data/lib/pwn/aws/game_lift.rb +92 -0
- data/lib/pwn/aws/glacier.rb +92 -0
- data/lib/pwn/aws/health.rb +92 -0
- data/lib/pwn/aws/iam.rb +92 -0
- data/lib/pwn/aws/import_export.rb +92 -0
- data/lib/pwn/aws/inspector.rb +92 -0
- data/lib/pwn/aws/iot.rb +92 -0
- data/lib/pwn/aws/iot_data_plane.rb +92 -0
- data/lib/pwn/aws/kinesis.rb +92 -0
- data/lib/pwn/aws/kinesis_analytics.rb +92 -0
- data/lib/pwn/aws/kms.rb +92 -0
- data/lib/pwn/aws/lambda.rb +92 -0
- data/lib/pwn/aws/lambda_preview.rb +92 -0
- data/lib/pwn/aws/lex.rb +92 -0
- data/lib/pwn/aws/lightsail.rb +92 -0
- data/lib/pwn/aws/machine_learning.rb +92 -0
- data/lib/pwn/aws/marketplace_commerce_analytics.rb +92 -0
- data/lib/pwn/aws/marketplace_metering.rb +92 -0
- data/lib/pwn/aws/ops_works.rb +92 -0
- data/lib/pwn/aws/ops_works_cm.rb +92 -0
- data/lib/pwn/aws/pinpoint.rb +92 -0
- data/lib/pwn/aws/polly.rb +92 -0
- data/lib/pwn/aws/rds.rb +92 -0
- data/lib/pwn/aws/redshift.rb +92 -0
- data/lib/pwn/aws/rekognition.rb +92 -0
- data/lib/pwn/aws/route53.rb +92 -0
- data/lib/pwn/aws/route53_domains.rb +92 -0
- data/lib/pwn/aws/s3.rb +92 -0
- data/lib/pwn/aws/service_catalog.rb +92 -0
- data/lib/pwn/aws/ses.rb +92 -0
- data/lib/pwn/aws/shield.rb +92 -0
- data/lib/pwn/aws/simple_db.rb +92 -0
- data/lib/pwn/aws/sms.rb +92 -0
- data/lib/pwn/aws/snowball.rb +92 -0
- data/lib/pwn/aws/sns.rb +92 -0
- data/lib/pwn/aws/sqs.rb +92 -0
- data/lib/pwn/aws/ssm.rb +92 -0
- data/lib/pwn/aws/states.rb +92 -0
- data/lib/pwn/aws/storage_gateway.rb +92 -0
- data/lib/pwn/aws/sts.rb +63 -0
- data/lib/pwn/aws/support.rb +92 -0
- data/lib/pwn/aws/swf.rb +92 -0
- data/lib/pwn/aws/waf.rb +92 -0
- data/lib/pwn/aws/waf_regional.rb +92 -0
- data/lib/pwn/aws/workspaces.rb +92 -0
- data/lib/pwn/aws/x_ray.rb +92 -0
- data/lib/pwn/aws.rb +105 -0
- data/lib/pwn/banner/bubble.rb +42 -0
- data/lib/pwn/banner/matrix.rb +199 -0
- data/lib/pwn/banner/ninja.rb +54 -0
- data/lib/pwn/banner/off_the_air.rb +73 -0
- data/lib/pwn/banner/pirate.rb +62 -0
- data/lib/pwn/banner.rb +78 -0
- data/lib/pwn/ffi.rb +16 -0
- data/lib/pwn/plugins/android.rb +1616 -0
- data/lib/pwn/plugins/ansible_vault.rb +75 -0
- data/lib/pwn/plugins/authentication_helper.rb +79 -0
- data/lib/pwn/plugins/baresip.rb +704 -0
- data/lib/pwn/plugins/basic_auth.rb +63 -0
- data/lib/pwn/plugins/beef.rb +309 -0
- data/lib/pwn/plugins/burp_suite.rb +344 -0
- data/lib/pwn/plugins/bus_pirate.rb +148 -0
- data/lib/pwn/plugins/char.rb +459 -0
- data/lib/pwn/plugins/credit_card.rb +68 -0
- data/lib/pwn/plugins/dao_ldap.rb +131 -0
- data/lib/pwn/plugins/dao_mongo.rb +96 -0
- data/lib/pwn/plugins/dao_postgres.rb +224 -0
- data/lib/pwn/plugins/dao_sqlite3.rb +125 -0
- data/lib/pwn/plugins/defect_dojo.rb +759 -0
- data/lib/pwn/plugins/detect_os.rb +40 -0
- data/lib/pwn/plugins/ein.rb +141 -0
- data/lib/pwn/plugins/file_fu.rb +73 -0
- data/lib/pwn/plugins/fuzz.rb +206 -0
- data/lib/pwn/plugins/git.rb +166 -0
- data/lib/pwn/plugins/github.rb +136 -0
- data/lib/pwn/plugins/hacker_one.rb +152 -0
- data/lib/pwn/plugins/http_intercept_helper.rb +122 -0
- data/lib/pwn/plugins/ibm_appscan.rb +927 -0
- data/lib/pwn/plugins/ip_info.rb +100 -0
- data/lib/pwn/plugins/jenkins.rb +545 -0
- data/lib/pwn/plugins/json_pathify.rb +46 -0
- data/lib/pwn/plugins/mail_agent.rb +344 -0
- data/lib/pwn/plugins/metasploit.rb +151 -0
- data/lib/pwn/plugins/msr206.rb +1193 -0
- data/lib/pwn/plugins/nessus_cloud.rb +840 -0
- data/lib/pwn/plugins/nexpose_vuln_scan.rb +356 -0
- data/lib/pwn/plugins/nmap_it.rb +100 -0
- data/lib/pwn/plugins/oauth2.rb +67 -0
- data/lib/pwn/plugins/ocr.rb +43 -0
- data/lib/pwn/plugins/open_ai.rb +201 -0
- data/lib/pwn/plugins/openvas.rb +308 -0
- data/lib/pwn/plugins/owasp_zap.rb +550 -0
- data/lib/pwn/plugins/packet.rb +1313 -0
- data/lib/pwn/plugins/pdf_parse.rb +53 -0
- data/lib/pwn/plugins/pony.rb +282 -0
- data/lib/pwn/plugins/pwn_logger.rb +46 -0
- data/lib/pwn/plugins/rabbit_mq.rb +70 -0
- data/lib/pwn/plugins/rfidler.rb +56 -0
- data/lib/pwn/plugins/serial.rb +315 -0
- data/lib/pwn/plugins/shodan.rb +566 -0
- data/lib/pwn/plugins/slack_client.rb +104 -0
- data/lib/pwn/plugins/sock.rb +188 -0
- data/lib/pwn/plugins/son_micro_rfid.rb +504 -0
- data/lib/pwn/plugins/spider.rb +80 -0
- data/lib/pwn/plugins/ssn.rb +52 -0
- data/lib/pwn/plugins/thread_pool.rb +88 -0
- data/lib/pwn/plugins/transparent_browser.rb +423 -0
- data/lib/pwn/plugins/twitter_api.rb +148 -0
- data/lib/pwn/plugins/uri_scheme.rb +328 -0
- data/lib/pwn/plugins/voice.rb +145 -0
- data/lib/pwn/plugins/vsphere.rb +82 -0
- data/lib/pwn/plugins.rb +71 -0
- data/lib/pwn/reports/fuzz.rb +272 -0
- data/lib/pwn/reports/phone.rb +312 -0
- data/lib/pwn/reports/sast.rb +311 -0
- data/lib/pwn/reports/uri_buster.rb +248 -0
- data/lib/pwn/reports.rb +23 -0
- data/lib/pwn/sast/amqp_connect_as_guest.rb +143 -0
- data/lib/pwn/sast/apache_file_system_util_api.rb +144 -0
- data/lib/pwn/sast/aws.rb +145 -0
- data/lib/pwn/sast/banned_function_calls_c.rb +272 -0
- data/lib/pwn/sast/base64.rb +143 -0
- data/lib/pwn/sast/beef_hook.rb +143 -0
- data/lib/pwn/sast/cmd_execution_java.rb +145 -0
- data/lib/pwn/sast/cmd_execution_python.rb +147 -0
- data/lib/pwn/sast/cmd_execution_ruby.rb +155 -0
- data/lib/pwn/sast/cmd_execution_scala.rb +145 -0
- data/lib/pwn/sast/csrf.rb +142 -0
- data/lib/pwn/sast/deserial_java.rb +150 -0
- data/lib/pwn/sast/emoticon.rb +151 -0
- data/lib/pwn/sast/eval.rb +144 -0
- data/lib/pwn/sast/factory.rb +145 -0
- data/lib/pwn/sast/http_authorization_header.rb +148 -0
- data/lib/pwn/sast/inner_html.rb +144 -0
- data/lib/pwn/sast/keystore.rb +143 -0
- data/lib/pwn/sast/location_hash.rb +144 -0
- data/lib/pwn/sast/log4j.rb +143 -0
- data/lib/pwn/sast/logger.rb +158 -0
- data/lib/pwn/sast/outer_html.rb +144 -0
- data/lib/pwn/sast/password.rb +143 -0
- data/lib/pwn/sast/php_input_mechanisms.rb +149 -0
- data/lib/pwn/sast/php_type_juggling.rb +144 -0
- data/lib/pwn/sast/pom_version.rb +152 -0
- data/lib/pwn/sast/port.rb +150 -0
- data/lib/pwn/sast/private_key.rb +143 -0
- data/lib/pwn/sast/redirect.rb +145 -0
- data/lib/pwn/sast/redos.rb +150 -0
- data/lib/pwn/sast/shell.rb +151 -0
- data/lib/pwn/sast/signature.rb +143 -0
- data/lib/pwn/sast/sql.rb +147 -0
- data/lib/pwn/sast/ssl.rb +147 -0
- data/lib/pwn/sast/sudo.rb +143 -0
- data/lib/pwn/sast/task_tag.rb +157 -0
- data/lib/pwn/sast/throw_errors.rb +143 -0
- data/lib/pwn/sast/token.rb +145 -0
- data/lib/pwn/sast/version.rb +144 -0
- data/lib/pwn/sast/window_location_hash.rb +143 -0
- data/lib/pwn/sast.rb +56 -0
- data/lib/pwn/version.rb +5 -0
- data/lib/pwn/www/app_cobalt_io.rb +137 -0
- data/lib/pwn/www/bing.rb +89 -0
- data/lib/pwn/www/bug_crowd.rb +134 -0
- data/lib/pwn/www/checkip.rb +71 -0
- data/lib/pwn/www/coinbase_pro.rb +134 -0
- data/lib/pwn/www/duckduckgo.rb +111 -0
- data/lib/pwn/www/facebook.rb +122 -0
- data/lib/pwn/www/google.rb +114 -0
- data/lib/pwn/www/hacker_one.rb +122 -0
- data/lib/pwn/www/linkedin.rb +122 -0
- data/lib/pwn/www/pandora.rb +122 -0
- data/lib/pwn/www/pastebin.rb +84 -0
- data/lib/pwn/www/paypal.rb +204 -0
- data/lib/pwn/www/synack.rb +134 -0
- data/lib/pwn/www/torch.rb +106 -0
- data/lib/pwn/www/trading_view.rb +125 -0
- data/lib/pwn/www/twitter.rb +134 -0
- data/lib/pwn/www/uber.rb +122 -0
- data/lib/pwn/www/upwork.rb +122 -0
- data/lib/pwn/www/youtube.rb +89 -0
- data/lib/pwn/www.rb +35 -0
- data/lib/pwn.rb +25 -0
- data/packer/daemons/msfrpcd.rb +64 -0
- data/packer/daemons/openvas.rb +51 -0
- data/packer/deploy_docker_containers.sh +9 -0
- data/packer/deploy_packer_box.sh +87 -0
- data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_prototyper.json +48 -0
- data/packer/docker/kali_rolling_docker_pwn_sast.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +46 -0
- data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +34 -0
- data/packer/http/kali_rolling_preseed.cfg +81 -0
- data/packer/kali_rolling_aws_ami.json +137 -0
- data/packer/kali_rolling_qemu_kvm.json +157 -0
- data/packer/kali_rolling_virtualbox.json +184 -0
- data/packer/kali_rolling_vmware.json +165 -0
- data/packer/packer_secrets.json.EXAMPLE +9 -0
- data/packer/provisioners/PayloadsAllTheThings.sh +5 -0
- data/packer/provisioners/SecLists.sh +5 -0
- data/packer/provisioners/afl.sh +28 -0
- data/packer/provisioners/aliases.rb +18 -0
- data/packer/provisioners/amass.sh +5 -0
- data/packer/provisioners/android.sh +18 -0
- data/packer/provisioners/ansible.sh +5 -0
- data/packer/provisioners/apache2.sh +24 -0
- data/packer/provisioners/arachni.sh +28 -0
- data/packer/provisioners/awscli.sh +5 -0
- data/packer/provisioners/bashrc.sh +13 -0
- data/packer/provisioners/beef.rb +23 -0
- data/packer/provisioners/burpsuite.sh +23 -0
- data/packer/provisioners/chrome.sh +11 -0
- data/packer/provisioners/coreutils.sh +6 -0
- data/packer/provisioners/curl.sh +6 -0
- data/packer/provisioners/docker.sh +43 -0
- data/packer/provisioners/docker_bashrc.sh +2 -0
- data/packer/provisioners/docker_rvm.sh +22 -0
- data/packer/provisioners/eyewitness.sh +5 -0
- data/packer/provisioners/ffmpeg.sh +6 -0
- data/packer/provisioners/firefox.sh +7 -0
- data/packer/provisioners/fuzzdb.sh +5 -0
- data/packer/provisioners/gdb.sh +5 -0
- data/packer/provisioners/geckodriver.sh +9 -0
- data/packer/provisioners/ghidra.sh +5 -0
- data/packer/provisioners/git.sh +6 -0
- data/packer/provisioners/init_image.sh +103 -0
- data/packer/provisioners/install_vagrant_ssh_key.sh +15 -0
- data/packer/provisioners/jenkins.sh +62 -0
- data/packer/provisioners/metasploit.rb +59 -0
- data/packer/provisioners/nmap_all_live_hosts.sh +8 -0
- data/packer/provisioners/openvas.sh +23 -0
- data/packer/provisioners/openvas_wrappers.sh +4 -0
- data/packer/provisioners/openvpn.sh +7 -0
- data/packer/provisioners/peda.sh +4 -0
- data/packer/provisioners/phantomjs.rb +28 -0
- data/packer/provisioners/phantomjs_wrapper.sh +22 -0
- data/packer/provisioners/post_install.sh +41 -0
- data/packer/provisioners/postgresql.sh +49 -0
- data/packer/provisioners/preeny.sh +8 -0
- data/packer/provisioners/pwn.sh +100 -0
- data/packer/provisioners/pwntools.sh +13 -0
- data/packer/provisioners/radamsa.sh +7 -0
- data/packer/provisioners/rc.local.sh +16 -0
- data/packer/provisioners/reboot_os.sh +7 -0
- data/packer/provisioners/ruby.sh +35 -0
- data/packer/provisioners/rvm.sh +31 -0
- data/packer/provisioners/scapy.sh +5 -0
- data/packer/provisioners/scout2.sh +5 -0
- data/packer/provisioners/sox.sh +5 -0
- data/packer/provisioners/ssllabs-scan.sh +9 -0
- data/packer/provisioners/strace.sh +5 -0
- data/packer/provisioners/sublist3r.sh +5 -0
- data/packer/provisioners/terminator.sh +5 -0
- data/packer/provisioners/toggle_tor.sh +2 -0
- data/packer/provisioners/tor.sh +5 -0
- data/packer/provisioners/twinkle.sh +6 -0
- data/packer/provisioners/update_os.sh +108 -0
- data/packer/provisioners/upload_globals.sh +63 -0
- data/packer/provisioners/vim.sh +19 -0
- data/packer/provisioners/virtualbox_guest_additions.sh +20 -0
- data/packer/provisioners/vmware_tools.sh +8 -0
- data/packer/provisioners/wpscan.rb +23 -0
- data/packer/provisioners/xrdp.sh +22 -0
- data/packer/provisioners/zzuf.sh +5 -0
- data/pwn.gemspec +55 -0
- data/reinstall_pwn_gemset.sh +27 -0
- data/spec/lib/pwn/aws/acm_spec.rb +15 -0
- data/spec/lib/pwn/aws/api_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/app_stream_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_discovery_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/batch_spec.rb +15 -0
- data/spec/lib/pwn/aws/budgets_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_formation_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_front_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_hsm_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_trail_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_build_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_commit_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_deploy_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_pipeline_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_sync_spec.rb +15 -0
- data/spec/lib/pwn/aws/config_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/data_pipleline_spec.rb +15 -0
- data/spec/lib/pwn/aws/database_migration_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/device_farm_spec.rb +15 -0
- data/spec/lib/pwn/aws/direct_connect_spec.rb +15 -0
- data/spec/lib/pwn/aws/directory_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +15 -0
- data/spec/lib/pwn/aws/ec2_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecr_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecs_spec.rb +15 -0
- data/spec/lib/pwn/aws/efs_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasti_cache_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/emr_spec.rb +15 -0
- data/spec/lib/pwn/aws/firehose_spec.rb +15 -0
- data/spec/lib/pwn/aws/game_lift_spec.rb +15 -0
- data/spec/lib/pwn/aws/glacier_spec.rb +15 -0
- data/spec/lib/pwn/aws/health_spec.rb +15 -0
- data/spec/lib/pwn/aws/iam_spec.rb +15 -0
- data/spec/lib/pwn/aws/import_export_spec.rb +15 -0
- data/spec/lib/pwn/aws/inspector_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_data_plane_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_spec.rb +15 -0
- data/spec/lib/pwn/aws/kms_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_preview_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_spec.rb +15 -0
- data/spec/lib/pwn/aws/lex_spec.rb +15 -0
- data/spec/lib/pwn/aws/lightsail_spec.rb +15 -0
- data/spec/lib/pwn/aws/machine_learning_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_metering_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_cm_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_spec.rb +15 -0
- data/spec/lib/pwn/aws/pinpoint_spec.rb +15 -0
- data/spec/lib/pwn/aws/polly_spec.rb +15 -0
- data/spec/lib/pwn/aws/rds_spec.rb +15 -0
- data/spec/lib/pwn/aws/redshift_spec.rb +15 -0
- data/spec/lib/pwn/aws/rekognition_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_domains_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_spec.rb +15 -0
- data/spec/lib/pwn/aws/s3_spec.rb +15 -0
- data/spec/lib/pwn/aws/service_catalog_spec.rb +15 -0
- data/spec/lib/pwn/aws/ses_spec.rb +15 -0
- data/spec/lib/pwn/aws/shield_spec.rb +15 -0
- data/spec/lib/pwn/aws/simple_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/sms_spec.rb +15 -0
- data/spec/lib/pwn/aws/snowball_spec.rb +15 -0
- data/spec/lib/pwn/aws/sns_spec.rb +15 -0
- data/spec/lib/pwn/aws/sqs_spec.rb +15 -0
- data/spec/lib/pwn/aws/ssm_spec.rb +15 -0
- data/spec/lib/pwn/aws/states_spec.rb +15 -0
- data/spec/lib/pwn/aws/storage_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/sts_spec.rb +15 -0
- data/spec/lib/pwn/aws/support_spec.rb +15 -0
- data/spec/lib/pwn/aws/swf_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_regional_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_spec.rb +15 -0
- data/spec/lib/pwn/aws/workspaces_spec.rb +15 -0
- data/spec/lib/pwn/aws/x_ray_spec.rb +15 -0
- data/spec/lib/pwn/aws_spec.rb +10 -0
- data/spec/lib/pwn/banner/bubble_spec.rb +20 -0
- data/spec/lib/pwn/banner/matrix_spec.rb +20 -0
- data/spec/lib/pwn/banner/ninja_spec.rb +20 -0
- data/spec/lib/pwn/banner/off_the_air_spec.rb +20 -0
- data/spec/lib/pwn/banner/pirate_spec.rb +20 -0
- data/spec/lib/pwn/banner_spec.rb +15 -0
- data/spec/lib/pwn/ffi_spec.rb +10 -0
- data/spec/lib/pwn/plugins/android_spec.rb +15 -0
- data/spec/lib/pwn/plugins/authentication_helper_spec.rb +15 -0
- data/spec/lib/pwn/plugins/basic_auth_spec.rb +15 -0
- data/spec/lib/pwn/plugins/beef_spec.rb +15 -0
- data/spec/lib/pwn/plugins/burp_suite_spec.rb +15 -0
- data/spec/lib/pwn/plugins/bus_pirate_spec.rb +15 -0
- data/spec/lib/pwn/plugins/char_spec.rb +15 -0
- data/spec/lib/pwn/plugins/credit_card_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_ldap_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_mongo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_postgres_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +15 -0
- data/spec/lib/pwn/plugins/defect_dojo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/detect_os_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ein_spec.rb +15 -0
- data/spec/lib/pwn/plugins/file_fu_spec.rb +15 -0
- data/spec/lib/pwn/plugins/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/plugins/git_spec.rb +15 -0
- data/spec/lib/pwn/plugins/github_spec.rb +15 -0
- data/spec/lib/pwn/plugins/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ibm_appscan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ip_info_spec.rb +15 -0
- data/spec/lib/pwn/plugins/jenkins_spec.rb +15 -0
- data/spec/lib/pwn/plugins/json_pathify_spec.rb +15 -0
- data/spec/lib/pwn/plugins/mail_agent_spec.rb +15 -0
- data/spec/lib/pwn/plugins/metasploit_spec.rb +15 -0
- data/spec/lib/pwn/plugins/msr206_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nmap_it_spec.rb +15 -0
- data/spec/lib/pwn/plugins/oauth2_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ocr_spec.rb +15 -0
- data/spec/lib/pwn/plugins/openvas_spec.rb +15 -0
- data/spec/lib/pwn/plugins/owasp_zap_spec.rb +15 -0
- data/spec/lib/pwn/plugins/packet_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pdf_parse_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pony_spec.rb +15 -0
- data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +15 -0
- data/spec/lib/pwn/plugins/rfidler_spec.rb +15 -0
- data/spec/lib/pwn/plugins/serial_spec.rb +15 -0
- data/spec/lib/pwn/plugins/shodan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/slack_client_spec.rb +15 -0
- data/spec/lib/pwn/plugins/sock_spec.rb +15 -0
- data/spec/lib/pwn/plugins/son_micro_rfid_spec.rb +15 -0
- data/spec/lib/pwn/plugins/spider_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ssn_spec.rb +15 -0
- data/spec/lib/pwn/plugins/thread_pool_spec.rb +15 -0
- data/spec/lib/pwn/plugins/transparent_browser_spec.rb +15 -0
- data/spec/lib/pwn/plugins/twitter_api_spec.rb +15 -0
- data/spec/lib/pwn/plugins/uri_scheme_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vsphere_spec.rb +15 -0
- data/spec/lib/pwn/plugins_spec.rb +10 -0
- data/spec/lib/pwn/reports/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/reports/phone_spec.rb +15 -0
- data/spec/lib/pwn/reports/sast_spec.rb +15 -0
- data/spec/lib/pwn/reports/uri_buster_spec.rb +15 -0
- data/spec/lib/pwn/reports_spec.rb +10 -0
- data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +25 -0
- data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +25 -0
- data/spec/lib/pwn/sast/aws_spec.rb +25 -0
- data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +25 -0
- data/spec/lib/pwn/sast/base64_spec.rb +25 -0
- data/spec/lib/pwn/sast/beef_hook_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +25 -0
- data/spec/lib/pwn/sast/csrf_spec.rb +25 -0
- data/spec/lib/pwn/sast/deserial_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/emoticon_spec.rb +25 -0
- data/spec/lib/pwn/sast/eval_spec.rb +25 -0
- data/spec/lib/pwn/sast/factory_spec.rb +25 -0
- data/spec/lib/pwn/sast/http_authorization_header_spec.rb +25 -0
- data/spec/lib/pwn/sast/inner_html_spec.rb +25 -0
- data/spec/lib/pwn/sast/keystore_spec.rb +25 -0
- data/spec/lib/pwn/sast/location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast/log4j_spec.rb +25 -0
- data/spec/lib/pwn/sast/logger_spec.rb +25 -0
- data/spec/lib/pwn/sast/password_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_type_juggling_spec.rb +25 -0
- data/spec/lib/pwn/sast/pom_version_spec.rb +25 -0
- data/spec/lib/pwn/sast/port_spec.rb +25 -0
- data/spec/lib/pwn/sast/private_key_spec.rb +25 -0
- data/spec/lib/pwn/sast/redirect_spec.rb +25 -0
- data/spec/lib/pwn/sast/redos_spec.rb +25 -0
- data/spec/lib/pwn/sast/shell_spec.rb +25 -0
- data/spec/lib/pwn/sast/signature_spec.rb +25 -0
- data/spec/lib/pwn/sast/sql_spec.rb +25 -0
- data/spec/lib/pwn/sast/ssl_spec.rb +25 -0
- data/spec/lib/pwn/sast/sudo_spec.rb +25 -0
- data/spec/lib/pwn/sast/task_tag_spec.rb +25 -0
- data/spec/lib/pwn/sast/throw_errors_spec.rb +25 -0
- data/spec/lib/pwn/sast/token_spec.rb +25 -0
- data/spec/lib/pwn/sast/version_spec.rb +25 -0
- data/spec/lib/pwn/sast/window_location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast_spec.rb +10 -0
- data/spec/lib/pwn/www/app_cobalt_io_spec.rb +15 -0
- data/spec/lib/pwn/www/bing_spec.rb +15 -0
- data/spec/lib/pwn/www/bug_crowd.rb +15 -0
- data/spec/lib/pwn/www/checkip_spec.rb +15 -0
- data/spec/lib/pwn/www/coinbase_pro_spec.rb +15 -0
- data/spec/lib/pwn/www/duckduckgo_spec.rb +15 -0
- data/spec/lib/pwn/www/facebook_spec.rb +15 -0
- data/spec/lib/pwn/www/google_spec.rb +15 -0
- data/spec/lib/pwn/www/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/www/linkedin_spec.rb +15 -0
- data/spec/lib/pwn/www/pandora_spec.rb +15 -0
- data/spec/lib/pwn/www/pastebin_spec.rb +15 -0
- data/spec/lib/pwn/www/paypal_spec.rb +15 -0
- data/spec/lib/pwn/www/synack_spec.rb +15 -0
- data/spec/lib/pwn/www/torch_spec.rb +15 -0
- data/spec/lib/pwn/www/trading_view_spec.rb +15 -0
- data/spec/lib/pwn/www/twitter_spec.rb +15 -0
- data/spec/lib/pwn/www/uber_spec.rb +15 -0
- data/spec/lib/pwn/www/upwork_spec.rb +15 -0
- data/spec/lib/pwn/www/youtube_spec.rb +15 -0
- data/spec/lib/pwn/www_spec.rb +10 -0
- data/spec/lib/pwn_spec.rb +10 -0
- data/spec/spec_helper.rb +3 -0
- data/third_party/.gitkeep +0 -0
- data/update_pwn.sh +9 -0
- data/upgrade_ruby.sh +42 -0
- data/vagrant/provisioners/apache2.sh +76 -0
- data/vagrant/provisioners/beef.rb +30 -0
- data/vagrant/provisioners/burpsuite_pro.rb +37 -0
- data/vagrant/provisioners/exploit-db.sh +2 -0
- data/vagrant/provisioners/gem.sh +4 -0
- data/vagrant/provisioners/init_env.sh +22 -0
- data/vagrant/provisioners/jenkins.sh +87 -0
- data/vagrant/provisioners/jenkins_ssh-keygen.rb +86 -0
- data/vagrant/provisioners/kali_customize.rb +130 -0
- data/vagrant/provisioners/letsencrypt.rb +35 -0
- data/vagrant/provisioners/metasploit.rb +25 -0
- data/vagrant/provisioners/nmap_all_live_hosts.sh +2 -0
- data/vagrant/provisioners/openvas.sh +23 -0
- data/vagrant/provisioners/openvas_wrappers.sh +2 -0
- data/vagrant/provisioners/post_install.sh +14 -0
- data/vagrant/provisioners/postgres.sh +22 -0
- data/vagrant/provisioners/pwn.sh +15 -0
- data/vagrant/provisioners/rvm.sh +18 -0
- data/vagrant/provisioners/ssllabs-scan.sh +10 -0
- data/vagrant/provisioners/toggle_tor.sh +2 -0
- data/vagrant/provisioners/update_jenkins_plugins.rb +30 -0
- data/vagrant/provisioners/update_os.sh +108 -0
- data/vagrant/provisioners/upload_globals.sh +63 -0
- data/vagrant/provisioners/userland_fdisk.sh +22 -0
- data/vagrant/provisioners/userland_lvm.sh +5 -0
- data/vagrant/provisioners/wpscan.rb +25 -0
- data/vagrant_rsync_third_party.lst +1 -0
- data/vagrant_rsync_userland_template.lst +8 -0
- metadata +993 -4
@@ -0,0 +1,80 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
require 'anemone'
|
4
|
+
|
5
|
+
module PWN
|
6
|
+
module Plugins
|
7
|
+
# This plugin supports Pastebin actions.
|
8
|
+
module Spider
|
9
|
+
# Supported Method Parameters::
|
10
|
+
# PWN::Plugins::Spider.crawl(
|
11
|
+
# target_fqdn: 'required - target fqdn to spider',
|
12
|
+
# results_path: 'required - path to save spider results',
|
13
|
+
# proxy: 'optional - proxy to spider through e.g. http://127.0.0.1:8080'
|
14
|
+
# )
|
15
|
+
|
16
|
+
@@logger = PWN::Plugins::PWNLogger.create
|
17
|
+
|
18
|
+
public_class_method def self.crawl(opts = {})
|
19
|
+
# TODO: Add AuthN Support
|
20
|
+
# FYI: Anemone very well may have a memory leak.
|
21
|
+
# Despite saving results to file, Anemone causes
|
22
|
+
# memory exhaustion on large sites
|
23
|
+
target_fqdn = opts[:target_fqdn].to_s.scrub.strip.chomp
|
24
|
+
results_path = opts[:results_path].to_s.scrub.strip.chomp
|
25
|
+
|
26
|
+
proxy = opts[:proxy].to_s.scrub.strip.chomp unless opts[:proxy].nil?
|
27
|
+
|
28
|
+
# Colors!
|
29
|
+
green = "\e[32m"
|
30
|
+
yellow = "\e[33m"
|
31
|
+
end_of_color = "\e[0m"
|
32
|
+
|
33
|
+
puts "#{green}Spidering Target FQDN: #{target_fqdn}#{end_of_color}"
|
34
|
+
File.open(results_path, 'w') do |f|
|
35
|
+
if proxy
|
36
|
+
proxy_uri = URI.parse(proxy)
|
37
|
+
proxy_hash = { proxy_host: proxy_uri.host, proxy_port: proxy_uri.port }
|
38
|
+
Anemone.crawl(target_fqdn, proxy_hash) do |anemone|
|
39
|
+
anemone.on_every_page do |page|
|
40
|
+
puts "#{yellow}Discovered: #{page.url}#{end_of_color}"
|
41
|
+
f.puts(page.url)
|
42
|
+
end
|
43
|
+
end
|
44
|
+
else
|
45
|
+
Anemone.crawl(target_fqdn) do |anemone|
|
46
|
+
anemone.on_every_page do |page|
|
47
|
+
puts "#{green}Discovered: #{page.url}#{end_of_color}"
|
48
|
+
f.puts(page.url)
|
49
|
+
end
|
50
|
+
end
|
51
|
+
end
|
52
|
+
end
|
53
|
+
rescue StandardError => e
|
54
|
+
raise e
|
55
|
+
end
|
56
|
+
|
57
|
+
# Author(s):: 0day Inc. <request.pentest@0dayinc.com>
|
58
|
+
|
59
|
+
public_class_method def self.authors
|
60
|
+
"AUTHOR(S):
|
61
|
+
0day Inc. <request.pentest@0dayinc.com>
|
62
|
+
"
|
63
|
+
end
|
64
|
+
|
65
|
+
# Display Usage for this Module
|
66
|
+
|
67
|
+
public_class_method def self.help
|
68
|
+
puts %{USAGE:
|
69
|
+
#{self}.crawl(
|
70
|
+
target_fqdn: 'required - target fqdn to spider',
|
71
|
+
results_path: 'required - path to save spider results',
|
72
|
+
proxy: 'optional - proxy to spider through e.g. http://127.0.0.1:8080'
|
73
|
+
)
|
74
|
+
|
75
|
+
#{self}.authors
|
76
|
+
}
|
77
|
+
end
|
78
|
+
end
|
79
|
+
end
|
80
|
+
end
|
@@ -0,0 +1,52 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
module PWN
|
4
|
+
module Plugins
|
5
|
+
# This plugin provides useful social security number capabilities
|
6
|
+
module SSN
|
7
|
+
# Supported Method Parameters::
|
8
|
+
# PWN::Plugins::SSN.generate(
|
9
|
+
# count: 'required - number of SSN numbers to generate'
|
10
|
+
# )
|
11
|
+
|
12
|
+
public_class_method def self.generate(opts = {})
|
13
|
+
count = opts[:count].to_i
|
14
|
+
|
15
|
+
# Based upon new SSN Randomization:
|
16
|
+
# https://www.ssa.gov/employer/randomization.html
|
17
|
+
ssn_result_arr = []
|
18
|
+
(1..count).each do
|
19
|
+
this_area = format('%0.3d', Random.rand(1..999))
|
20
|
+
this_group = format('%0.2d', Random.rand(1..99))
|
21
|
+
this_serial = format('%0.4d', Random.rand(1..9999))
|
22
|
+
this_ssn = "#{this_area}-#{this_group}-#{this_serial}"
|
23
|
+
ssn_result_arr.push(this_ssn)
|
24
|
+
end
|
25
|
+
|
26
|
+
ssn_result_arr
|
27
|
+
rescue StandardError => e
|
28
|
+
raise e
|
29
|
+
end
|
30
|
+
|
31
|
+
# Author(s):: 0day Inc. <request.pentest@0dayinc.com>
|
32
|
+
|
33
|
+
public_class_method def self.authors
|
34
|
+
"AUTHOR(S):
|
35
|
+
0day Inc. <request.pentest@0dayinc.com>
|
36
|
+
"
|
37
|
+
end
|
38
|
+
|
39
|
+
# Display Usage for this Module
|
40
|
+
|
41
|
+
public_class_method def self.help
|
42
|
+
puts "USAGE:
|
43
|
+
#{self}.generate(
|
44
|
+
count: 'required - number of SSN numbers to generate'
|
45
|
+
)
|
46
|
+
|
47
|
+
#{self}.authors
|
48
|
+
"
|
49
|
+
end
|
50
|
+
end
|
51
|
+
end
|
52
|
+
end
|
@@ -0,0 +1,88 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
module PWN
|
4
|
+
module Plugins
|
5
|
+
# This plugin makes the creation of a thread pool much simpler.
|
6
|
+
module ThreadPool
|
7
|
+
# Supported Method Parameters::
|
8
|
+
# PWN::Plugins::ThreadPool.fill(
|
9
|
+
# enumerable_array: 'required array for proper thread pool assignment',
|
10
|
+
# max_threads: 'optional number of threads in the thread pool (defaults to 9)',
|
11
|
+
# seconds_between_thread_exec: 'optional - time to sleep between thread execution (defaults to 0)'
|
12
|
+
# &block
|
13
|
+
# )
|
14
|
+
#
|
15
|
+
# Example:
|
16
|
+
# arr = [1, 2, 3, 4, 5, 6, 7, 8, 9]
|
17
|
+
# mutex = Mutex.new
|
18
|
+
# PWN::Plugins::ThreadPool.fill(enumerable_array: arr, max_threads: 9) do |integer|
|
19
|
+
# mutex.synchronize do
|
20
|
+
# puts integer
|
21
|
+
# end
|
22
|
+
# end
|
23
|
+
|
24
|
+
public_class_method def self.fill(opts = {})
|
25
|
+
enumerable_array = opts[:enumerable_array]
|
26
|
+
max_threads = opts[:max_threads].to_i
|
27
|
+
max_threads = 9 if max_threads.zero?
|
28
|
+
# seconds_between_thread_exec = opts[:seconds_between_thread_exec].to_i
|
29
|
+
|
30
|
+
puts "Initiating Thread Pool of #{max_threads} Worker Threads...."
|
31
|
+
queue = SizedQueue.new(max_threads)
|
32
|
+
threads = Array.new(max_threads) do
|
33
|
+
Thread.new do
|
34
|
+
until (this_thread = queue.pop) == :POOL_EXHAUSTED
|
35
|
+
yield this_thread
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
|
40
|
+
enumerable_array.uniq.sort.each do |this_thread|
|
41
|
+
queue << this_thread
|
42
|
+
end
|
43
|
+
|
44
|
+
max_threads.times do
|
45
|
+
queue << :POOL_EXHAUSTED
|
46
|
+
end
|
47
|
+
|
48
|
+
# threads.each do |thread|
|
49
|
+
# sleep seconds_between_thread_exec if seconds_between_thread_exec.positive?
|
50
|
+
# thread.join
|
51
|
+
# end
|
52
|
+
threads.each(&:join)
|
53
|
+
rescue Interrupt
|
54
|
+
puts "\nGoodbye."
|
55
|
+
rescue StandardError => e
|
56
|
+
raise e
|
57
|
+
end
|
58
|
+
|
59
|
+
# Author(s):: 0day Inc. <request.pentest@0dayinc.com>
|
60
|
+
|
61
|
+
public_class_method def self.authors
|
62
|
+
"AUTHOR(S):
|
63
|
+
0day Inc. <request.pentest@0dayinc.com>
|
64
|
+
"
|
65
|
+
end
|
66
|
+
|
67
|
+
# Display Usage for this Module
|
68
|
+
|
69
|
+
public_class_method def self.help
|
70
|
+
puts "USAGE:
|
71
|
+
#{self}.fill(
|
72
|
+
enumerable_array. => 'required array for proper thread pool assignment',
|
73
|
+
max_threads: 'optional number of threads in the thread pool (defaults to 9)',
|
74
|
+
&block
|
75
|
+
)
|
76
|
+
|
77
|
+
Example:
|
78
|
+
arr = [1, 2, 3, 4, 5, 6, 7, 8, 9]
|
79
|
+
#{self}.fill(enumerable_array: arr, max_threads: 9) do |integer|
|
80
|
+
puts integer
|
81
|
+
end
|
82
|
+
|
83
|
+
#{self}.authors
|
84
|
+
"
|
85
|
+
end
|
86
|
+
end
|
87
|
+
end
|
88
|
+
end
|
@@ -0,0 +1,423 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
require 'watir'
|
4
|
+
require 'selenium/webdriver'
|
5
|
+
require 'selenium/devtools'
|
6
|
+
require 'rest-client'
|
7
|
+
require 'socksify'
|
8
|
+
require 'openssl'
|
9
|
+
require 'em/pure_ruby'
|
10
|
+
require 'faye/websocket'
|
11
|
+
|
12
|
+
module PWN
|
13
|
+
module Plugins
|
14
|
+
# This plugin rocks. Chrome, Firefox, PhantomJS, IE, REST Client,
|
15
|
+
# all from the comfort of one plugin. Proxy support (e.g. Burp
|
16
|
+
# Suite Professional) is completely available for all browsers
|
17
|
+
# except for limited functionality within IE (IE has interesting
|
18
|
+
# protections in place to prevent this). This plugin also supports
|
19
|
+
# taking screenshots :)
|
20
|
+
module TransparentBrowser
|
21
|
+
@@logger = PWN::Plugins::PWNLogger.create
|
22
|
+
|
23
|
+
# Supported Method Parameters::
|
24
|
+
# browser_obj1 = PWN::Plugins::TransparentBrowser.open(
|
25
|
+
# browser_type: :firefox|:chrome|:headless|:rest|:websocket,
|
26
|
+
# proxy: 'optional - scheme://proxy_host:port',
|
27
|
+
# with_tor: 'optional - boolean (defaults to false)'
|
28
|
+
# with_devtools: 'optional - boolean (defaults to false)'
|
29
|
+
# )
|
30
|
+
|
31
|
+
public_class_method def self.open(opts = {})
|
32
|
+
this_browser = nil
|
33
|
+
browser_type = opts[:browser_type]
|
34
|
+
proxy = opts[:proxy].to_s unless opts[:proxy].nil?
|
35
|
+
opts[:with_tor] ? (with_tor = true) : (with_tor = false)
|
36
|
+
opts[:with_devtools] ? (with_devtools = true) : (with_devtools = false)
|
37
|
+
|
38
|
+
# Let's crank up the default timeout from 30 seconds to 15 min for slow sites
|
39
|
+
Watir.default_timeout = 900
|
40
|
+
|
41
|
+
case browser_type
|
42
|
+
when :firefox
|
43
|
+
this_profile = Selenium::WebDriver::Firefox::Profile.new
|
44
|
+
|
45
|
+
# Increase Web Assembly Verbosity
|
46
|
+
this_profile['javascript.options.wasm_verbose'] = true
|
47
|
+
|
48
|
+
# Downloads reside in ~/Downloads
|
49
|
+
this_profile['browser.download.folderList'] = 1
|
50
|
+
this_profile['browser.helperApps.neverAsk.saveToDisk'] = 'application/pdf'
|
51
|
+
|
52
|
+
# disable Firefox's built-in PDF viewer
|
53
|
+
this_profile['pdfjs.disabled'] = true
|
54
|
+
|
55
|
+
# disable Adobe Acrobat PDF preview plugin
|
56
|
+
this_profile['plugin.scan.plid.all'] = false
|
57
|
+
this_profile['plugin.scan.Acrobat'] = '99.0'
|
58
|
+
|
59
|
+
# ensure localhost proxy capabilities are enabled
|
60
|
+
this_profile['network.proxy.no_proxies_on'] = ''
|
61
|
+
|
62
|
+
# allow scripts to run a bit longer
|
63
|
+
# this_profile['dom.max_chrome_script_run_time'] = 180
|
64
|
+
# this_profile['dom.max_script_run_time'] = 180
|
65
|
+
|
66
|
+
# disable browser cache
|
67
|
+
this_profile['browser.cache.disk.enable'] = false
|
68
|
+
this_profile['browser.cache.disk_cache_ssl.enable'] = false
|
69
|
+
this_profile['browser.cache.memory.enable'] = false
|
70
|
+
this_profile['browser.cache.offline.enable'] = false
|
71
|
+
this_profile['devtools.cache.disabled'] = true
|
72
|
+
this_profile['dom.caches.enabled'] = false
|
73
|
+
|
74
|
+
# caps = Selenium::WebDriver::Remote::Capabilities.firefox
|
75
|
+
# caps[:acceptInsecureCerts] = true
|
76
|
+
|
77
|
+
if proxy
|
78
|
+
this_profile['network.proxy.type'] = 1
|
79
|
+
this_profile['network.proxy.allow_hijacking_localhost'] = true
|
80
|
+
if with_tor
|
81
|
+
this_profile['network.proxy.socks_version'] = 5
|
82
|
+
this_profile['network.proxy.socks'] = URI(proxy).host
|
83
|
+
this_profile['network.proxy.socks_port'] = URI(proxy).port
|
84
|
+
else
|
85
|
+
this_profile['network.proxy.ftp'] = URI(proxy).host
|
86
|
+
this_profile['network.proxy.ftp_port'] = URI(proxy).port
|
87
|
+
this_profile['network.proxy.http'] = URI(proxy).host
|
88
|
+
this_profile['network.proxy.http_port'] = URI(proxy).port
|
89
|
+
this_profile['network.proxy.ssl'] = URI(proxy).host
|
90
|
+
this_profile['network.proxy.ssl_port'] = URI(proxy).port
|
91
|
+
end
|
92
|
+
end
|
93
|
+
|
94
|
+
args = []
|
95
|
+
|
96
|
+
args.push('--devtools') if with_devtools
|
97
|
+
options = Selenium::WebDriver::Firefox::Options.new(args: args, accept_insecure_certs: true)
|
98
|
+
options.profile = this_profile
|
99
|
+
driver = Selenium::WebDriver.for(:firefox, capabilities: options)
|
100
|
+
this_browser = Watir::Browser.new(driver)
|
101
|
+
|
102
|
+
when :chrome
|
103
|
+
this_profile = Selenium::WebDriver::Chrome::Profile.new
|
104
|
+
this_profile['download.prompt_for_download'] = false
|
105
|
+
this_profile['download.default_directory'] = '~/Downloads'
|
106
|
+
|
107
|
+
switches = []
|
108
|
+
switches.push('--start-maximized')
|
109
|
+
switches.push('--disable-notifications')
|
110
|
+
|
111
|
+
if proxy
|
112
|
+
switches.push("--host-resolver-rules='MAP * 0.0.0.0 , EXCLUDE #{URI(proxy).host}'") if with_tor
|
113
|
+
switches.push("--proxy-server=#{proxy}")
|
114
|
+
end
|
115
|
+
|
116
|
+
if with_devtools
|
117
|
+
switches.push('--auto-open-devtools-for-tabs')
|
118
|
+
switches.push('--disable-hang-monitor')
|
119
|
+
end
|
120
|
+
|
121
|
+
options = Selenium::WebDriver::Chrome::Options.new(
|
122
|
+
args: switches,
|
123
|
+
accept_insecure_certs: true
|
124
|
+
)
|
125
|
+
|
126
|
+
options.profile = this_profile
|
127
|
+
driver = Selenium::WebDriver.for(:chrome, capabilities: options)
|
128
|
+
this_browser = Watir::Browser.new(driver)
|
129
|
+
|
130
|
+
when :headless, :headless_firefox
|
131
|
+
this_profile = Selenium::WebDriver::Firefox::Profile.new
|
132
|
+
|
133
|
+
# Increase Web Assembly Verbosity
|
134
|
+
this_profile['javascript.options.wasm_verbose'] = true
|
135
|
+
|
136
|
+
# Downloads reside in ~/Downloads
|
137
|
+
this_profile['browser.download.folderList'] = 1
|
138
|
+
this_profile['browser.helperApps.neverAsk.saveToDisk'] = 'application/pdf'
|
139
|
+
|
140
|
+
# disable Firefox's built-in PDF viewer
|
141
|
+
this_profile['pdfjs.disabled'] = true
|
142
|
+
|
143
|
+
# disable Adobe Acrobat PDF preview plugin
|
144
|
+
this_profile['plugin.scan.plid.all'] = false
|
145
|
+
this_profile['plugin.scan.Acrobat'] = '99.0'
|
146
|
+
|
147
|
+
# ensure localhost proxy capabilities are enabled
|
148
|
+
this_profile['network.proxy.no_proxies_on'] = ''
|
149
|
+
|
150
|
+
# allow scripts to run a bit longer
|
151
|
+
# this_profile['dom.max_chrome_script_run_time'] = 180
|
152
|
+
# this_profile['dom.max_script_run_time'] = 180
|
153
|
+
|
154
|
+
# disable browser cache
|
155
|
+
this_profile['browser.cache.disk.enable'] = false
|
156
|
+
this_profile['browser.cache.disk_cache_ssl.enable'] = false
|
157
|
+
this_profile['browser.cache.memory.enable'] = false
|
158
|
+
this_profile['browser.cache.offline.enable'] = false
|
159
|
+
this_profile['devtools.cache.disabled'] = true
|
160
|
+
this_profile['dom.caches.enabled'] = false
|
161
|
+
|
162
|
+
# caps = Selenium::WebDriver::Remote::Capabilities.firefox
|
163
|
+
# caps[:acceptInsecureCerts] = true
|
164
|
+
|
165
|
+
if proxy
|
166
|
+
this_profile['network.proxy.type'] = 1
|
167
|
+
this_profile['network.proxy.allow_hijacking_localhost'] = true
|
168
|
+
if with_tor
|
169
|
+
this_profile['network.proxy.socks_version'] = 5
|
170
|
+
this_profile['network.proxy.socks'] = URI(proxy).host
|
171
|
+
this_profile['network.proxy.socks_port'] = URI(proxy).port
|
172
|
+
else
|
173
|
+
this_profile['network.proxy.ftp'] = URI(proxy).host
|
174
|
+
this_profile['network.proxy.ftp_port'] = URI(proxy).port
|
175
|
+
this_profile['network.proxy.http'] = URI(proxy).host
|
176
|
+
this_profile['network.proxy.http_port'] = URI(proxy).port
|
177
|
+
this_profile['network.proxy.ssl'] = URI(proxy).host
|
178
|
+
this_profile['network.proxy.ssl_port'] = URI(proxy).port
|
179
|
+
end
|
180
|
+
end
|
181
|
+
|
182
|
+
options = Selenium::WebDriver::Firefox::Options.new(args: ['-headless'], accept_insecure_certs: true)
|
183
|
+
options.profile = this_profile
|
184
|
+
driver = Selenium::WebDriver.for(:firefox, capabilities: options)
|
185
|
+
this_browser = Watir::Browser.new(driver)
|
186
|
+
|
187
|
+
when :headless_chrome
|
188
|
+
this_profile = Selenium::WebDriver::Chrome::Profile.new
|
189
|
+
this_profile['download.prompt_for_download'] = false
|
190
|
+
this_profile['download.default_directory'] = '~/Downloads'
|
191
|
+
|
192
|
+
switches = []
|
193
|
+
switches.push('--headless')
|
194
|
+
switches.push('--start-maximized')
|
195
|
+
switches.push('--disable-notifications')
|
196
|
+
|
197
|
+
if proxy
|
198
|
+
switches.push("--host-resolver-rules='MAP * 0.0.0.0 , EXCLUDE #{URI(proxy).host}'") if with_tor
|
199
|
+
switches.push("--proxy-server=#{proxy}")
|
200
|
+
end
|
201
|
+
|
202
|
+
options = Selenium::WebDriver::Chrome::Options.new(
|
203
|
+
args: switches,
|
204
|
+
accept_insecure_certs: true
|
205
|
+
)
|
206
|
+
|
207
|
+
options.profile = this_profile
|
208
|
+
driver = Selenium::WebDriver.for(:chrome, capabilities: options)
|
209
|
+
this_browser = Watir::Browser.new(driver)
|
210
|
+
|
211
|
+
when :rest
|
212
|
+
this_browser = RestClient
|
213
|
+
if proxy
|
214
|
+
if with_tor
|
215
|
+
TCPSocket.socks_server = URI(proxy).host
|
216
|
+
TCPSocket.socks_port = URI(proxy).port
|
217
|
+
else
|
218
|
+
this_browser.proxy = proxy
|
219
|
+
end
|
220
|
+
end
|
221
|
+
|
222
|
+
when :websocket
|
223
|
+
if proxy
|
224
|
+
if with_tor
|
225
|
+
TCPSocket.socks_server = URI(proxy).host
|
226
|
+
TCPSocket.socks_port = URI(proxy).port
|
227
|
+
end
|
228
|
+
proxy_opts = { origin: proxy }
|
229
|
+
tls_opts = { verify_peer: false }
|
230
|
+
this_browser = Faye::WebSocket::Client.new(
|
231
|
+
'',
|
232
|
+
[],
|
233
|
+
{
|
234
|
+
tls: tls_opts,
|
235
|
+
proxy: proxy_opts
|
236
|
+
}
|
237
|
+
)
|
238
|
+
else
|
239
|
+
this_browser = Faye::WebSocket::Client.new('')
|
240
|
+
end
|
241
|
+
else
|
242
|
+
puts 'Error: browser_type only supports :firefox, :chrome, :headless, :rest, or :websocket'
|
243
|
+
return nil
|
244
|
+
end
|
245
|
+
|
246
|
+
this_browser
|
247
|
+
rescue StandardError => e
|
248
|
+
raise e
|
249
|
+
end
|
250
|
+
|
251
|
+
# Supported Method Parameters::
|
252
|
+
# browser_obj = PWN::Plugins::TransparentBrowser.linkout(
|
253
|
+
# browser_obj: browser_obj1
|
254
|
+
# )
|
255
|
+
|
256
|
+
public_class_method def self.linkout(opts = {})
|
257
|
+
this_browser_obj = opts[:browser_obj]
|
258
|
+
|
259
|
+
this_browser_obj.links.each do |link|
|
260
|
+
@@logger.info("#{link.text} => #{link.href}\n\n\n") unless link.text == ''
|
261
|
+
end
|
262
|
+
|
263
|
+
this_browser_obj
|
264
|
+
rescue StandardError => e
|
265
|
+
raise e
|
266
|
+
end
|
267
|
+
|
268
|
+
# Supported Method Parameters::
|
269
|
+
# PWN::Plugins::TransparentBrowser.type_as_human(
|
270
|
+
# string: 'required - string to type as human',
|
271
|
+
# rand_sleep_float: 'optional - float timing in between keypress (defaults to 0.09)'
|
272
|
+
# )
|
273
|
+
|
274
|
+
public_class_method def self.type_as_human(opts = {})
|
275
|
+
string = opts[:string].to_s
|
276
|
+
|
277
|
+
rand_sleep_float = if opts[:rand_sleep_float]
|
278
|
+
opts[:rand_sleep_float].to_f
|
279
|
+
else
|
280
|
+
0.09
|
281
|
+
end
|
282
|
+
|
283
|
+
string.each_char do |char|
|
284
|
+
yield char
|
285
|
+
sleep Random.rand(rand_sleep_float)
|
286
|
+
end
|
287
|
+
rescue StandardError => e
|
288
|
+
raise e
|
289
|
+
end
|
290
|
+
|
291
|
+
# Supported Method Parameters::
|
292
|
+
# browser_obj1 = PWN::Plugins::TransparentBrowser.close(
|
293
|
+
# browser_obj: 'required - browser_obj returned from #open method)'
|
294
|
+
# )
|
295
|
+
|
296
|
+
public_class_method def self.close(opts = {})
|
297
|
+
this_browser_obj = opts[:browser_obj]
|
298
|
+
|
299
|
+
unless this_browser_obj.to_s.include?('RestClient')
|
300
|
+
# Close the browser unless this_browser_obj.nil? (thus the &)
|
301
|
+
this_browser_obj&.close
|
302
|
+
end
|
303
|
+
nil
|
304
|
+
rescue StandardError => e
|
305
|
+
raise e
|
306
|
+
end
|
307
|
+
|
308
|
+
# Author(s):: 0day Inc. <request.pentest@0dayinc.com>
|
309
|
+
|
310
|
+
public_class_method def self.authors
|
311
|
+
"AUTHOR(S):
|
312
|
+
0day Inc. <request.pentest@0dayinc.com>
|
313
|
+
"
|
314
|
+
end
|
315
|
+
|
316
|
+
# Display Usage for this Module
|
317
|
+
|
318
|
+
public_class_method def self.help
|
319
|
+
puts "USAGE:
|
320
|
+
browser_obj1 = #{self}.open(
|
321
|
+
browser_type: :firefox|:chrome|:headless_chrome|:headless_firefox|:rest|:websocket,
|
322
|
+
proxy: 'optional scheme://proxy_host:port',
|
323
|
+
with_tor: 'optional boolean (defaults to false)',
|
324
|
+
with_devtools: 'optional - boolean (defaults to false)'
|
325
|
+
)
|
326
|
+
puts browser_obj1.public_methods
|
327
|
+
|
328
|
+
********************************************************
|
329
|
+
* DevTools Interaction Only works w/ Chrome
|
330
|
+
* All DevTools Commands can be found here:
|
331
|
+
* https://chromedevtools.github.io/devtools-protocol/
|
332
|
+
* Examples
|
333
|
+
devtools = browser_obj1.driver.devtools
|
334
|
+
puts devtools.public_methods
|
335
|
+
puts devtools.instance_variables
|
336
|
+
puts devtools.instance_variable_get('@messages')
|
337
|
+
|
338
|
+
* Tracing
|
339
|
+
devtools.send_cmd('Tracing.start')
|
340
|
+
devtools.send_cmd('Tracing.requestMemoryDump')
|
341
|
+
devtools.send_cmd('Tracing.end')
|
342
|
+
puts devtools.instance_variable_get('@messages')
|
343
|
+
|
344
|
+
* Network
|
345
|
+
devtools.send_cmd('Network.enable')
|
346
|
+
last_ws_resp = devtools.instance_variable_get('@messages').last if devtools.instance_variable_get('@messages').last['method'] == 'Network.webSocketFrameReceived'
|
347
|
+
puts last_ws_resp
|
348
|
+
devtools.send_cmd('Network.disable')
|
349
|
+
|
350
|
+
* Debugging DOM and Sending JavaScript to Console
|
351
|
+
devtools.send_cmd('Runtime.enable')
|
352
|
+
devtools.send_cmd('Console.enable')
|
353
|
+
devtools.send_cmd('DOM.enable')
|
354
|
+
devtools.send_cmd('Page.enable')
|
355
|
+
devtools.send_cmd('Log.enable')
|
356
|
+
devtools.send_cmd('Debugger.enable')
|
357
|
+
devtools.send_cmd('Debugger.pause')
|
358
|
+
step = 1
|
359
|
+
next_step = 60
|
360
|
+
loop do
|
361
|
+
devtools.send_cmd('Console.clearMessages')
|
362
|
+
devtools.send_cmd('Log.clear')
|
363
|
+
console_events = []
|
364
|
+
b.driver.on_log_event(:console) { |event| console_events.push(event) }
|
365
|
+
|
366
|
+
devtools.send_cmd('Debugger.stepInto')
|
367
|
+
puts \"Step: \#{step}\"
|
368
|
+
|
369
|
+
this_document = devtools.send_cmd('DOM.getDocument')
|
370
|
+
puts \"This #document:\\n\#{this_document}\\n\\n\\n\"
|
371
|
+
|
372
|
+
console_cmd = {
|
373
|
+
expression: 'for(var pop_var in window) { if (window.hasOwnProperty(pop_var) && window[pop_var] != null) console.log(pop_var + \" = \" + window[pop_var]); }'
|
374
|
+
}
|
375
|
+
puts devtools.send_cmd('Runtime.evaluate', **console_cmd)
|
376
|
+
|
377
|
+
print '-' * 180
|
378
|
+
print \"\\n\"
|
379
|
+
console_events.each do |event|
|
380
|
+
puts event.args
|
381
|
+
end
|
382
|
+
puts \"Console Response Length: \#{console_events.length}\"
|
383
|
+
console_events_digest = OpenSSL::Digest::SHA256.hexdigest(
|
384
|
+
console_events.inspect
|
385
|
+
)
|
386
|
+
puts \"Console Events Array SHA256 Digest: \#{console_events_digest}\"
|
387
|
+
print '-' * 180
|
388
|
+
puts \"\\n\\n\\n\"
|
389
|
+
|
390
|
+
print \"Next Step in \"
|
391
|
+
next_step.downto(1) {|n| print \"\#{n} \"; sleep 1 }
|
392
|
+
puts 'READY!'
|
393
|
+
step += 1
|
394
|
+
end
|
395
|
+
|
396
|
+
devtools.send_cmd('Debugger.disable')
|
397
|
+
devtools.send_cmd('Log.disable')
|
398
|
+
devtools.send_cmd('Page.disable')
|
399
|
+
devtools.send_cmd('DOM.disable')
|
400
|
+
devtools.send_cmd('Console.disable')
|
401
|
+
devtools.send_cmd('Runtime.disable')
|
402
|
+
* End of DevTools Examples
|
403
|
+
********************************************************
|
404
|
+
|
405
|
+
browser_obj1 = #{self}.linkout(
|
406
|
+
browser_obj: 'required - browser_obj returned from #open method)'
|
407
|
+
)
|
408
|
+
|
409
|
+
#{self}.type_as_human(
|
410
|
+
string: 'required - string to type as human',
|
411
|
+
rand_sleep_float: 'optional - float timing in between keypress (defaults to 0.09)'
|
412
|
+
) {|char| browser_obj1.text_field(name: \"search\").send_keys(char) }
|
413
|
+
|
414
|
+
browser_obj1 = #{self}.close(
|
415
|
+
browser_obj: 'required - browser_obj returned from #open method)'
|
416
|
+
)
|
417
|
+
|
418
|
+
#{self}.authors
|
419
|
+
"
|
420
|
+
end
|
421
|
+
end
|
422
|
+
end
|
423
|
+
end
|