pwn 0.4.651 → 0.4.653

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c4b81344cb5bb70ec45204f93a79e5e2e27a5a488db9c1d37ffae3f4f2833b81
-  data.tar.gz: 2b88a5ee2bda66bb4a8c958677cc536cbc84f72264453d42828af6dae6eb5063
+  metadata.gz: aa31a0685f4b71542d4de0c1ea82eca417150824926d001c0d2362430b205af8
+  data.tar.gz: 693cd87b5ff9b8718938aebeb311255a78dff482f89a1d80286065736dfaf039
 SHA512:
-  metadata.gz: 6b0cb40ac7aa4e7e1cdeff0a17989baf36c79a4666a10d4a890e8ae2ce917b48bcdb9083925feb9a83c9fe9a82d16f872f837f7e1c692bc5cdfa8ecba138e0d7
-  data.tar.gz: 07f37c206622eddbc1f77dac842d6efdd01c738d705894b14fdfa7aed35361fe18cba71024beb02abb56acf6f23b6d6fd1f41cff623c9bd889081fc88a798cfd
+  metadata.gz: 562b20c192ca60805ea3adab4396383e7453e40daafaca11baae0bf546f69775f9ec1f0a27ddea680a05341a35b54507cc90d1ea6b69add60932e9f6033601b3
+  data.tar.gz: 784269b7048cd37a07e288608351597577cef43e48b69ac70453b9e0fe8b6895ca14c1974dcf530b9b34e5df1957f4eae5d19e2f422f02b48c824da6e9de62fb

data/Gemfile

@@ -52,7 +52,7 @@ gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
 gem 'pdf-reader', '2.11.0'
-gem 'pg', '1.4.6'
+gem 'pg', '1.5.0'
 gem 'pry', '0.14.2'
 gem 'pry-doc', '1.4.0'
 gem 'rake', '13.0.6'
@@ -81,6 +81,7 @@ gem 'spreadsheet', '1.3.0'
 gem 'sqlite3', '1.6.2'
 gem 'thin', '1.8.2'
 gem 'tty-prompt', '0.23.1'
+gem 'tty-spinner', '0.9.3'
 gem 'watir', '7.2.2'
 gem 'waveform', '0.1.3'
 gem 'webrick', '1.8.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.651]:001 >>> PWN.help
+pwn[v0.4.653]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.651]:001 >>> PWN.help
+pwn[v0.4.653]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/jira_server.rb

@@ -0,0 +1,136 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'tty-spinner'
+
+module PWN
+  module Plugins
+    # This plugin is used for interacting w/ on-prem Jira Server's REST API using
+    # the 'rest' browser type of PWN::Plugins::TransparentBrowser.
+    # This is based on the following Jira API Specification:
+    # https://developer.atlassian.com/server/jira/platform/rest-apis/
+    module JiraServer
+      @@logger = PWN::Plugins::PWNLogger.create
+
+      # Supported Method Parameters::
+      # rest_call(
+      #   token: 'required - bearer token',
+      #   http_method: 'optional HTTP method (defaults to GET)',
+      #   rest_call: 'required rest call to make per the schema',
+      #   params: 'optional params passed in the URI or HTTP Headers',
+      #   http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'
+      # )
+
+      private_class_method def self.rest_call(opts = {})
+        http_method = if opts[:http_method].nil?
+                        :get
+                      else
+                        opts[:http_method].to_s.scrub.to_sym
+                      end
+        rest_call = opts[:rest_call].to_s.scrub
+        params = opts[:params]
+        http_body = opts[:http_body].to_s.scrub
+        base_api_uri = opts[:base_api_uri]
+
+        raise 'ERROR: base_api_uri cannot be nil.' if base_api_uri.nil?
+
+        token = opts[:token]
+
+        rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+
+        spinner = TTY::Spinner.new
+        spinner.auto_spin
+
+        case http_method
+        when :get
+          response = rest_client.execute(
+            method: :get,
+            url: "#{base_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              authorization: "Bearer #{token}",
+              params: params
+            },
+            verify_ssl: false
+          )
+
+        when :post
+          response = rest_client.execute(
+            method: :post,
+            url: "#{base_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              authorization: "Bearer #{token}"
+            },
+            payload: http_body,
+            verify_ssl: false
+          )
+
+        else
+          raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
+        end
+
+        JSON.parse(response, symbolize_names: true)
+      rescue StandardError => e
+        case e.message
+        when '400 Bad Request', '404 Resource Not Found'
+          "#{e.message}: #{e.response}"
+        else
+          raise e
+        end
+      ensure
+        spinner.stop
+      end
+
+      # Supported Method Parameters::
+      # issue_resp = PWN::Plugins::JiraServer.get_issue(
+      #   base_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',
+      #   token: 'required - bearer token',
+      #   issue: 'required - issue to lookup'
+      # )
+
+      private_class_method def self.get_issue(opts = {})
+        base_api_uri = opts[:base_api_uri]
+
+        token = opts[:token]
+        token ||= PWN::Plugins::AuthenticationHelper.mask_password(
+          prompt: 'Personal Access Token'
+        )
+
+        issue = opts[:issue]
+
+        raise 'ERROR: issue cannot be nil.' if issue.nil?
+
+        rest_call(
+          base_api_uri: base_api_uri,
+          token: token,
+          rest_call: "/issue/#{issue}"
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <request.pentest@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          issue_resp = PWN::Plugins::JiraServer.get_issue(
+            base_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',
+            token: 'required - bearer token',
+            issue: 'required - issue to lookup'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/plugins/open_ai.rb

@@ -2,6 +2,7 @@
 
 require 'json'
 require 'securerandom'
+require 'tty-spinner'
 
 module PWN
   module Plugins
@@ -34,6 +35,8 @@ module PWN
         token = opts[:token]
 
         rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+        spinner = TTY::Spinner.new
+        spinner.auto_spin
 
         case http_method
         when :get
@@ -71,6 +74,8 @@ module PWN
         else
           raise e
         end
+      ensure
+        spinner.stop
       end
 
       # Supported Method Parameters::

data/lib/pwn/plugins.rb

@@ -31,6 +31,7 @@ module PWN
     autoload :IBMAppscan, 'pwn/plugins/ibm_appscan'
     autoload :IPInfo, 'pwn/plugins/ip_info'
     autoload :Jenkins, 'pwn/plugins/jenkins'
+    autoload :JiraServer, 'pwn/plugins/jira_server'
     autoload :JSONPathify, 'pwn/plugins/json_pathify'
     autoload :MailAgent, 'pwn/plugins/mail_agent'
     autoload :Metasploit, 'pwn/plugins/metasploit'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.651'
+  VERSION = '0.4.653'
 end

data/spec/lib/pwn/plugins/jira_server_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Plugins::JiraServer do
+  it 'should display information for authors' do
+    authors_response = PWN::Plugins::JiraServer
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Plugins::JiraServer
+    expect(help_response).to respond_to :help
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.651
+  version: 0.4.653
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-04-22 00:00:00.000000000 Z
+date: 2023-04-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -590,14 +590,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.6
+        version: 1.5.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.6
+        version: 1.5.0
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -990,6 +990,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 0.23.1
+- !ruby/object:Gem::Dependency
+  name: tty-spinner
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.9.3
 - !ruby/object:Gem::Dependency
   name: watir
   requirement: !ruby/object:Gem::Requirement
@@ -1641,6 +1655,7 @@ files:
 - lib/pwn/plugins/ibm_appscan.rb
 - lib/pwn/plugins/ip_info.rb
 - lib/pwn/plugins/jenkins.rb
+- lib/pwn/plugins/jira_server.rb
 - lib/pwn/plugins/json_pathify.rb
 - lib/pwn/plugins/mail_agent.rb
 - lib/pwn/plugins/metasploit.rb
@@ -1947,6 +1962,7 @@ files:
 - spec/lib/pwn/plugins/ibm_appscan_spec.rb
 - spec/lib/pwn/plugins/ip_info_spec.rb
 - spec/lib/pwn/plugins/jenkins_spec.rb
+- spec/lib/pwn/plugins/jira_server_spec.rb
 - spec/lib/pwn/plugins/json_pathify_spec.rb
 - spec/lib/pwn/plugins/mail_agent_spec.rb
 - spec/lib/pwn/plugins/metasploit_spec.rb