pwn 0.4.668 → 0.4.670

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81bb385ebabab222a3d4da59c7eda736aaac086600e3c9710d6680428e05c023
-  data.tar.gz: 3227d1e76969e9b89ed2b5ce7090f8f2407288f89aa157b2af33dd4138855e38
+  metadata.gz: d48662417de23f29ea2e4a610b7c79477a98ee0164cbc393848ebc5a389015ec
+  data.tar.gz: c3b99f5416f14f38e7d49ddb749a105805a1b72322713ab9dcf93fd3289d2764
 SHA512:
-  metadata.gz: 262b94064b575f5200f500c4ea41e42bde4050d82f95ce8675ea3166c2ee4370126bcdb7222b3e261496e283dd04d85b80b040d939587817a8606f6e3be15559
-  data.tar.gz: c2cfd0bc37664e45aca472b1f4682962ad675262fc39363e6830caf05ffaf2e34b27795efdf7b7395cd383e6edd5bcb9a19518162aa7a5de87337335dce83043
+  metadata.gz: b35d6ecd5fdd6a0c3a33cd5fcd19516ba9e8bdb20c56587af541c2ceff0c348cf3c7828e2bbf04b034979b6bad7ad30a4a8f018219d860dc0cb8e72526b760df
+  data.tar.gz: d46298ac157563739c49d686d60df1064cd1cafeecf2d2b02b502c6a3b7804ebf990f9b907ab5382b11c6e868b787e076cd76bd1201b9263869f376379eb114e

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.668]:001 >>> PWN.help
+pwn[v0.4.670]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.668]:001 >>> PWN.help
+pwn[v0.4.670]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_diff_csv_files_w_column_exclude

@@ -109,7 +109,7 @@ def csv_diff(opts = {})
       end
     else
       f.puts csv_headers_orig
-      larger_csv_orig(1..-1).each do |line_arr|
+      larger_csv_orig[1..-1].each do |line_arr|
         line = line_arr.join(',')
         f.puts line if diff_csv.include?(line_arr)
       end

data/bin/pwn_openvas_vulnscan

@@ -25,6 +25,10 @@ OptionParser.new do |options|
   options.on('-pPASSWORD', '--password=PASSWORD', '<Optional - Password to AuthN (Will Prompt if nil)>') do |p|
     opts[:password] = p
   end
+
+  options.on('-fFILTER', '--report-filter=FILTER', '<Optional - GVM Results Filter (Default: "apply_overrides=0 levels=hml rows=1000 min_qod=70 first=1 sort-reverse=severity")>') do |p|
+    opts[:password] = p
+  end
 end.parse!
 
 if opts.empty?
@@ -46,6 +50,8 @@ password = if opts[:password].nil?
              opts[:password].to_s.scrub
            end
 
+report_filter = opts[:report_filter]
+
 begin
   start_time = Time.now
   puts "Started: #{start_time}"
@@ -89,6 +95,7 @@ begin
     report_type: :csv,
     report_id: last_report_id,
     report_dir: report_dir,
+    report_filter: report_filter,
     username: username,
     password: password
   )

data/lib/pwn/plugins/openvas.rb

@@ -147,6 +147,7 @@ module PWN
       # PWN::Plugins::OpenVAS.save_report(
       #   report_type: 'required report type (csv|itg|pdf|txt|xml)',
       #   report_id: 'required report id to save',
+      #   report_filter: 'optional - results filter (Default: "")
       #   username: 'required username',
       #   password: 'optional password (will prompt if nil)'
       # )
@@ -159,6 +160,9 @@ module PWN
           report_dir
         )
 
+        report_filter = opts[:report_filter]
+        report_filter ||= 'apply_overrides=0 levels=hml rows=1000 min_qod=70 first=1 sort-reverse=severity'
+
         username = opts[:username].to_s.scrub
 
         password = if opts[:password].nil?
@@ -203,7 +207,7 @@ module PWN
             --gmp-username '#{username}' \
             --gmp-password '#{password}' \
             socket \
-            --xml="<get_reports report_id='#{report_id}' format_id='#{format_id}' details='1' />"
+            --xml="<get_reports report_id='#{report_id}' format_id='#{format_id}' filter='#{report_filter}' details='1' />"
           `
         )
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.668'
+  VERSION = '0.4.670'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.668
+  version: 0.4.670
 platform: ruby
 authors:
 - 0day Inc.