pwn 0.4.652 → 0.4.654

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7e7a35bfc97e85ab0a8b2ebcf7371330863a4c4fe6fe7abdd4ef6bac4437eabd
-  data.tar.gz: 81bbea512d0836bf3ed92267b32da86b28f24da82157cb665c683be7a3b5cb3c
+  metadata.gz: 473473414ab3732072d2d6b8bdbf4eae1bfbb120da3c284f9c2febf1fea5cac3
+  data.tar.gz: 586707790ae9dc07d77582f5afaf38741d9b069f44aa07a59d9dfa078434e609
 SHA512:
-  metadata.gz: 7b9a89a60caf7b7809ef308a312e1678387b1b722cbcdf8ee629be5b0c9143491820a84f1826523f227aa2f414499de9c8ecd66d8e84d1d3fd29750a776e757a
-  data.tar.gz: 6822ea5542a6fceffb78b43b2ade137a0fca94b7d2cb8e5a8f1944b70f69a3bc1862e89e37da5e952b89a9e170525bd88cc3c800e4c896e77176ddad034a487e
+  metadata.gz: 63661e592b625fcafb80c93444e68fdef6356a834e4e91615d9c0957584dcd7a4c50d3726ebcb61d692ad007407449eab84d8c94011106395d40ba1ee40d1105
+  data.tar.gz: 79791151d635d851bdb9f6aa0095deefe2ed3a9ef295c8740d4b05715e6cc9e4581889426dca0fd4840153c88f29f1f400b1d7049858e12a0810cf53d9d28e5b

data/Gemfile

@@ -52,7 +52,7 @@ gem 'oily_png', '1.2.1'
 gem 'os', '1.1.4'
 gem 'packetfu', '1.1.13'
 gem 'pdf-reader', '2.11.0'
-gem 'pg', '1.4.6'
+gem 'pg', '1.5.0'
 gem 'pry', '0.14.2'
 gem 'pry-doc', '1.4.0'
 gem 'rake', '13.0.6'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.652]:001 >>> PWN.help
+pwn[v0.4.654]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.652]:001 >>> PWN.help
+pwn[v0.4.654]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/jira_server.rb

@@ -0,0 +1,136 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'tty-spinner'
+
+module PWN
+  module Plugins
+    # This plugin is used for interacting w/ on-prem Jira Server's REST API using
+    # the 'rest' browser type of PWN::Plugins::TransparentBrowser.
+    # This is based on the following Jira API Specification:
+    # https://developer.atlassian.com/server/jira/platform/rest-apis/
+    module JiraServer
+      @@logger = PWN::Plugins::PWNLogger.create
+
+      # Supported Method Parameters::
+      # rest_call(
+      #   token: 'required - bearer token',
+      #   http_method: 'optional HTTP method (defaults to GET)',
+      #   rest_call: 'required rest call to make per the schema',
+      #   params: 'optional params passed in the URI or HTTP Headers',
+      #   http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'
+      # )
+
+      private_class_method def self.rest_call(opts = {})
+        http_method = if opts[:http_method].nil?
+                        :get
+                      else
+                        opts[:http_method].to_s.scrub.to_sym
+                      end
+        rest_call = opts[:rest_call].to_s.scrub
+        params = opts[:params]
+        http_body = opts[:http_body].to_s.scrub
+        base_api_uri = opts[:base_api_uri]
+
+        raise 'ERROR: base_api_uri cannot be nil.' if base_api_uri.nil?
+
+        token = opts[:token]
+
+        rest_client = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)::Request
+
+        spinner = TTY::Spinner.new
+        spinner.auto_spin
+
+        case http_method
+        when :get
+          response = rest_client.execute(
+            method: :get,
+            url: "#{base_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              authorization: "Bearer #{token}",
+              params: params
+            },
+            verify_ssl: false
+          )
+
+        when :post
+          response = rest_client.execute(
+            method: :post,
+            url: "#{base_api_uri}/#{rest_call}",
+            headers: {
+              content_type: 'application/json; charset=UTF-8',
+              authorization: "Bearer #{token}"
+            },
+            payload: http_body,
+            verify_ssl: false
+          )
+
+        else
+          raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
+        end
+
+        JSON.parse(response, symbolize_names: true)
+      rescue StandardError => e
+        case e.message
+        when '400 Bad Request', '404 Resource Not Found'
+          "#{e.message}: #{e.response}"
+        else
+          raise e
+        end
+      ensure
+        spinner.stop
+      end
+
+      # Supported Method Parameters::
+      # issue_resp = PWN::Plugins::JiraServer.get_issue(
+      #   base_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',
+      #   token: 'required - bearer token',
+      #   issue: 'required - issue to lookup'
+      # )
+
+      public_class_method def self.get_issue(opts = {})
+        base_api_uri = opts[:base_api_uri]
+
+        token = opts[:token]
+        token ||= PWN::Plugins::AuthenticationHelper.mask_password(
+          prompt: 'Personal Access Token'
+        )
+
+        issue = opts[:issue]
+
+        raise 'ERROR: issue cannot be nil.' if issue.nil?
+
+        rest_call(
+          base_api_uri: base_api_uri,
+          token: token,
+          rest_call: "/issue/#{issue}"
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <request.pentest@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          issue_resp = PWN::Plugins::JiraServer.get_issue(
+            base_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',
+            token: 'required - bearer token',
+            issue: 'required - issue to lookup'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/plugins/open_ai.rb

@@ -66,7 +66,6 @@ module PWN
         else
           raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
         end
-        spinner.stop
         response
       rescue StandardError => e
         case e.message
@@ -75,6 +74,8 @@ module PWN
         else
           raise e
         end
+      ensure
+        spinner.stop
       end
 
       # Supported Method Parameters::

data/lib/pwn/plugins.rb

@@ -31,6 +31,7 @@ module PWN
     autoload :IBMAppscan, 'pwn/plugins/ibm_appscan'
     autoload :IPInfo, 'pwn/plugins/ip_info'
     autoload :Jenkins, 'pwn/plugins/jenkins'
+    autoload :JiraServer, 'pwn/plugins/jira_server'
     autoload :JSONPathify, 'pwn/plugins/json_pathify'
     autoload :MailAgent, 'pwn/plugins/mail_agent'
     autoload :Metasploit, 'pwn/plugins/metasploit'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.652'
+  VERSION = '0.4.654'
 end

data/spec/lib/pwn/plugins/jira_server_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Plugins::JiraServer do
+  it 'should display information for authors' do
+    authors_response = PWN::Plugins::JiraServer
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Plugins::JiraServer
+    expect(help_response).to respond_to :help
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.652
+  version: 0.4.654
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-04-23 00:00:00.000000000 Z
+date: 2023-04-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -590,14 +590,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.6
+        version: 1.5.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.4.6
+        version: 1.5.0
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
@@ -1655,6 +1655,7 @@ files:
 - lib/pwn/plugins/ibm_appscan.rb
 - lib/pwn/plugins/ip_info.rb
 - lib/pwn/plugins/jenkins.rb
+- lib/pwn/plugins/jira_server.rb
 - lib/pwn/plugins/json_pathify.rb
 - lib/pwn/plugins/mail_agent.rb
 - lib/pwn/plugins/metasploit.rb
@@ -1961,6 +1962,7 @@ files:
 - spec/lib/pwn/plugins/ibm_appscan_spec.rb
 - spec/lib/pwn/plugins/ip_info_spec.rb
 - spec/lib/pwn/plugins/jenkins_spec.rb
+- spec/lib/pwn/plugins/jira_server_spec.rb
 - spec/lib/pwn/plugins/json_pathify_spec.rb
 - spec/lib/pwn/plugins/mail_agent_spec.rb
 - spec/lib/pwn/plugins/metasploit_spec.rb