pwn 0.4.700 → 0.4.702

data/lib/pwn/www/twitter.rb

@@ -9,13 +9,14 @@ module PWN
       # Supported Method Parameters::
       # browser_obj = PWN::WWW::Twitter.open(
       #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-      #   proxy: 'optional - scheme://proxy_host:port || :tor'
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
       # )
 
       public_class_method def self.open(opts = {})
         browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
 
-        browser_obj.goto('https://twitter.com')
+        browser = browser_obj[:browser]
+        browser.goto('https://twitter.com')
 
         browser_obj
       rescue StandardError => e
@@ -35,6 +36,8 @@ module PWN
         username = opts[:username].to_s.scrub.strip.chomp
         password = opts[:password]
 
+        browser = browser_obj[:browser]
+
         if password.nil?
           password = PWN::Plugins::AuthenticationHelper.mask_password
         else
@@ -44,14 +47,16 @@ module PWN
 
         browser_obj.goto('https://twitter.com/login')
 
-        browser_obj.text_field(index: 2).wait_until(&:present?).set(username)
-        browser_obj.text_field(index: 3).wait_until(&:present?).set(password)
-        browser_obj.button(index: 1).click!
+        browser.text_field(index: 2).wait_until(&:present?).set(username)
+        browser.text_field(index: 3).wait_until(&:present?).set(password)
+        browser.button(index: 1).click!
 
         if mfa
-          until browser_obj.url == 'https://twitter.com/' || browser_obj.url == 'https://twitter.com/home'
-            browser_obj.text_field(id: 'challenge_response').wait_until(&:present?).set(PWN::Plugins::AuthenticationHelper.mfa(prompt: 'enter mfa token'))
-            browser_obj.button(id: 'email_challenge_submit').click!
+          until browser.url == 'https://twitter.com/' ||
+                browser.url == 'https://twitter.com/home'
+
+            browser.text_field(id: 'challenge_response').wait_until(&:present?).set(PWN::Plugins::AuthenticationHelper.mfa(prompt: 'enter mfa token'))
+            browser.button(id: 'email_challenge_submit').click!
             sleep 3
           end
           print "\n"
@@ -69,8 +74,10 @@ module PWN
 
       public_class_method def self.logout(opts = {})
         browser_obj = opts[:browser_obj]
-        browser_obj.li(id: 'user-dropdown').wait_until(&:present?).click!
-        browser_obj.button(text: 'Log out').wait_until(&:present?).click!
+
+        browser = browser_obj[:browser]
+        browser.li(id: 'user-dropdown').wait_until(&:present?).click!
+        browser.button(text: 'Log out').wait_until(&:present?).click!
 
         browser_obj
       rescue StandardError => e
@@ -105,9 +112,10 @@ module PWN
         puts "USAGE:
           browser_obj = #{self}.open(
             browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-            proxy: 'optional - scheme://proxy_host:port || :tor'
+            proxy: 'optional - scheme://proxy_host:port || tor'
           )
-          puts browser_obj.public_methods
+          browser = browser_obj[:browser]
+          puts browser.public_methods
 
           browser_obj = #{self}.login(
             browser_obj: 'required - browser_obj returned from #open method',

data/lib/pwn/www/uber.rb

@@ -9,13 +9,14 @@ module PWN
       # Supported Method Parameters::
       # browser_obj = PWN::WWW::Uber.open(
       #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-      #   proxy: 'optional - scheme://proxy_host:port || :tor'
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
       # )
 
       public_class_method def self.open(opts = {})
         browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
 
-        browser_obj.goto('https://www.uber.com')
+        browser = browser_obj[:browser]
+        browser.goto('https://www.uber.com')
 
         browser_obj
       rescue StandardError => e
@@ -34,17 +35,19 @@ module PWN
         username = opts[:username].to_s.scrub.strip.chomp
         password = opts[:password]
 
+        browser = browser_obj[:browser]
+
         if password.nil?
           password = PWN::Plugins::AuthenticationHelper.mask_password
         else
           password = opts[:password].to_s.scrub.strip.chomp
         end
 
-        browser_obj.goto('https://login.uber.com/login')
+        browser.goto('https://login.uber.com/login')
 
-        browser_obj.text_field(id: 'email').wait_until(&:present?).set(username)
-        browser_obj.text_field(id: 'password').wait_until(&:present?).set(password)
-        browser_obj.button(id: 'login-submit-btn').click!
+        browser.text_field(id: 'email').wait_until(&:present?).set(username)
+        browser.text_field(id: 'password').wait_until(&:present?).set(password)
+        browser.button(id: 'login-submit-btn').click!
 
         browser_obj
       rescue StandardError => e
@@ -58,8 +61,10 @@ module PWN
 
       public_class_method def self.logout(opts = {})
         browser_obj = opts[:browser_obj]
-        browser_obj.span(index: 5).wait_until(&:present?).hover
-        browser_obj.link(index: 13).wait_until(&:present?).click!
+
+        browser = browser_obj[:browser]
+        browser.span(index: 5).wait_until(&:present?).hover
+        browser.link(index: 13).wait_until(&:present?).click!
 
         browser_obj
       rescue StandardError => e
@@ -94,9 +99,10 @@ module PWN
         puts "USAGE:
           browser_obj = #{self}.open(
             browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-            proxy: 'optional - scheme://proxy_host:port || :tor'
+            proxy: 'optional - scheme://proxy_host:port || tor'
           )
-          puts browser_obj.public_methods
+          browser = browser_obj[:browser]
+          puts browser.public_methods
 
           browser_obj = #{self}.login(
             browser_obj: 'required - browser_obj returned from #open method',

data/lib/pwn/www/upwork.rb

@@ -9,13 +9,14 @@ module PWN
       # Supported Method Parameters::
       # browser_obj = PWN::WWW::Upwork.open(
       #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-      #   proxy: 'optional - scheme://proxy_host:port || :tor'
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
       # )
 
       public_class_method def self.open(opts = {})
         browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
 
-        browser_obj.goto('https://www.upwork.com')
+        browser = browser_obj[:browser]
+        browser.goto('https://www.upwork.com')
 
         browser_obj
       rescue StandardError => e
@@ -34,17 +35,19 @@ module PWN
         username = opts[:username].to_s.scrub.strip.chomp
         password = opts[:password]
 
+        browser = browser_obj[:browser]
+
         if password.nil?
           password = PWN::Plugins::AuthenticationHelper.mask_password
         else
           password = opts[:password].to_s.scrub.strip.chomp
         end
 
-        browser_obj.goto('https://www.upwork.com/ab/account-security/login')
+        browser.goto('https://www.upwork.com/ab/account-security/login')
 
-        browser_obj.text_field(id: 'login_username').wait_until(&:present?).set(username)
-        browser_obj.text_field(id: 'login_password').wait_until(&:present?).set(password)
-        browser_obj.button(text: 'Log In').click!
+        browser.text_field(id: 'login_username').wait_until(&:present?).set(username)
+        browser.text_field(id: 'login_password').wait_until(&:present?).set(password)
+        browser.button(text: 'Log In').click!
 
         browser_obj
       rescue StandardError => e
@@ -58,8 +61,10 @@ module PWN
 
       public_class_method def self.logout(opts = {})
         browser_obj = opts[:browser_obj]
-        browser_obj.span(class: 'organization-selector').wait_until(&:present?).click!
-        browser_obj.link(index: 39).wait_until(&:present?).click!
+
+        browser = browser_obj[:browser]
+        browser.span(class: 'organization-selector').wait_until(&:present?).click!
+        browser.link(index: 39).wait_until(&:present?).click!
 
         browser_obj
       rescue StandardError => e
@@ -94,9 +99,10 @@ module PWN
         puts "USAGE:
           browser_obj = #{self}.open(
             browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-            proxy: 'optional - scheme://proxy_host:port || :tor'
+            proxy: 'optional - scheme://proxy_host:port || tor'
           )
-          puts browser_obj.public_methods
+          browser = browser_obj[:browser]
+          puts browser.public_methods
 
           browser_obj = #{self}.login(
             browser_obj: 'required - browser_obj returned from #open method',

data/lib/pwn/www/youtube.rb

@@ -7,13 +7,14 @@ module PWN
       # Supported Method Parameters::
       # browser_obj = PWN::WWW::Youtube.open(
       #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-      #   proxy: 'optional - scheme://proxy_host:port || :tor'
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
       # )
 
       public_class_method def self.open(opts = {})
         browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
 
-        browser_obj.goto('https://www.youtube.com')
+        browser = browser_obj[:browser]
+        browser.goto('https://www.youtube.com')
 
         browser_obj
       rescue StandardError => e
@@ -30,8 +31,9 @@ module PWN
         browser_obj = opts[:browser_obj]
         q = opts[:q].to_s
 
-        browser_obj.text_field(name: 'search_query').wait_until(&:present?).set(q)
-        browser_obj.button(id: 'search-btn').click!
+        browser = browser_obj[:browser]
+        browser.text_field(name: 'search_query').wait_until(&:present?).set(q)
+        browser.button(id: 'search-btn').click!
 
         browser_obj
       rescue StandardError => e
@@ -66,9 +68,10 @@ module PWN
         puts "USAGE:
           browser_obj =#{self}.open(
             browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
-            proxy: 'optional - scheme://proxy_host:port || :tor'
+            proxy: 'optional - scheme://proxy_host:port || tor'
           )
-          puts 'browser_obj.public_methods'
+          browser = browser_obj[:browser]
+          puts 'browser.public_methods'
 
           browser_obj =#{self}.search(
             browser_obj: 'required - browser_obj returned from #open method',

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.700
+  version: 0.4.702
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-16 00:00:00.000000000 Z
+date: 2023-05-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -1150,8 +1150,6 @@ email:
 executables:
 - pwn
 - pwn_android_war_dialer
-- pwn_arachni
-- pwn_arachni_rest
 - pwn_autoinc_version
 - pwn_aws_describe_resources
 - pwn_burp_suite_pro_active_scan
@@ -1217,8 +1215,6 @@ files:
 - Vagrantfile
 - bin/pwn
 - bin/pwn_android_war_dialer
-- bin/pwn_arachni
-- bin/pwn_arachni_rest
 - bin/pwn_autoinc_version
 - bin/pwn_aws_describe_resources
 - bin/pwn_burp_suite_pro_active_scan

data/bin/pwn_arachni

@@ -1,157 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'pwn'
-require 'optparse'
-
-opts = {}
-OptionParser.new do |options|
-  options.banner = "USAGE:
-    #{$PROGRAM_NAME} [opts]
-  "
-
-  options.on('-tTARGET', '--target_url=TARGET', '<Required - Target URI to Scan>') do |t|
-    opts[:target_url] = t
-  end
-
-  options.on('-oDIR', '--report_output_dir=DIR', '<Required - Output Directory for Results Generation>') do |o|
-    opts[:output_dir] = o
-  end
-
-  options.on('-bTYPE', '--browser_type=TYPE', '<Optional - Browser Type <firefox|chrome|headless> (Defaults to chrome)>') do |b|
-    opts[:browser_type] = b
-  end
-
-  options.on('-IINST', '--navigation_instruct=INST', '<Optional - Path to Navigation Instructions (e.g. Auth w/ Target - see /pwn/etc/arachni/navigation.instruct.EXAMPLE)>') do |i|
-    opts[:navigation_instruct] = i
-  end
-
-  options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
-    opts[:proxy] = p
-  end
-
-  options.on('-xTYPE', '--proxy-type=TYPE', '<Optional - Proxy Type (See arachni --help)>') do |x|
-    opts[:proxy_type] = x
-  end
-
-  options.on('-ePATTERN', '--exclude-pattern=PATTERN', '<Optional - Exclude comma-delimited resources whose URL matches pattern>') do |e|
-    opts[:exclude_pattern] = e
-  end
-
-  options.on('-d', '--[no-]deep', '<Optional - Enable Deep Scanning (Much Longer to Complete)>') do |d|
-    opts[:deep_scan] = d
-  end
-end.parse!
-
-if opts.empty?
-  puts `#{$PROGRAM_NAME} --help`
-  exit 1
-end
-
-begin
-  logger = PWN::Plugins::PWNLogger.create
-
-  target_url = opts[:target_url].to_s.scrub
-  output_dir = opts[:output_dir].to_s.scrub if Dir.exist?(opts[:output_dir].to_s.scrub)
-  if opts[:browser_type].nil?
-    browser_type = :chrome
-  else
-    browser_type = opts[:browser_type].to_s.strip.chomp.scrub.to_sym
-  end
-  navigation_instruct = opts[:navigation_instruct].to_s.strip.chomp.scrub if File.exist?(opts[:navigation_instruct].to_s.strip.chomp.scrub)
-  proxy = opts[:proxy]
-  proxy_type = opts[:proxy_type]
-  exclude_pattern = opts[:exclude_pattern]
-  deep_scan = opts[:deep_scan]
-
-  raise 'ERROR: please use pwn_arachni_rest for REST Scanning.' if browser_type == :rest
-
-  browser = PWN::Plugins::TransparentBrowser.open(
-    browser_type: browser_type,
-    proxy: proxy
-  )
-
-  browser.goto(target_url)
-
-  if navigation_instruct
-    File.read(navigation_instruct).each_line do |instruction|
-      browser.instance_eval(instruction.to_s.scrub.strip.chomp)
-    end
-
-    # We should have an authenticated session by now in our browser object...
-    http_cookie_header = ''
-    browser.cookies.to_a.each_with_index do |this_symbolized_cookie_hash, index|
-      # Need to convert symbolized key names in browser.cookies.to_a[index]
-      # to strings for proper CGI::Cookie consumption
-      this_cookie = {}
-      this_symbolized_cookie_hash.each do |key, val|
-        this_cookie[key.to_s] = val
-      end
-
-      cgi_cookie_str = CGI::Cookie.new(this_cookie).to_s
-
-      if index.zero?
-        http_cookie_header = cgi_cookie_str
-      else
-        http_cookie_header = "#{http_cookie_header}, #{cgi_cookie_str}"
-      end
-    end
-  end
-
-  arachni_cmd_str = "arachni #{target_url} --audit-parameter-names"
-  arachni_cmd_str = "#{arachni_cmd_str} --output-debug"
-  arachni_cmd_str = "#{arachni_cmd_str} --checks=*"
-  arachni_cmd_str = "#{arachni_cmd_str} --audit-ui-inputs --audit-ui-forms"
-  arachni_cmd_str = "#{arachni_cmd_str} --audit-jsons --audit-xmls"
-  arachni_cmd_str = "#{arachni_cmd_str} --audit-links --audit-forms --audit-cookies"
-  arachni_cmd_str = "#{arachni_cmd_str} --report-save-path=#{output_dir}/arachni_results.afr"
-  arachni_cmd_str = "#{arachni_cmd_str} --http-proxy #{proxy}" if proxy
-  arachni_cmd_str = "#{arachni_cmd_str} --http-proxy-type #{proxy_type}" if proxy_type
-  arachni_cmd_str = "#{arachni_cmd_str} --http-cookie-string='#{http_cookie_header}'" if navigation_instruct
-  arachni_cmd_str = "#{arachni_cmd_str} --audit-headers --audit-with-both-methods --audit-cookies-extensively" if deep_scan
-
-  if exclude_pattern
-    exclude_pattern.to_s.split(',').each do |exclude_entry|
-      arachni_cmd_str = "#{arachni_cmd_str} --scope-exclude-pattern #{exclude_entry}"
-    end
-  end
-
-  # Kick off scan as defined by pwn_arachni flags
-  system(
-    'sudo',
-    '/bin/bash',
-    '--login',
-    '-c',
-    arachni_cmd_str
-  )
-
-  # Report Scan Results
-  system(
-    'sudo',
-    '/bin/bash',
-    '--login',
-    '-c',
-    "arachni_reporter #{output_dir}/arachni_results.afr --reporter=html:outfile=#{output_dir}/arachni_results.html.zip"
-  )
-
-  system(
-    'sudo',
-    '/bin/bash',
-    '--login',
-    '-c',
-    "arachni_reporter #{output_dir}/arachni_results.afr --reporter=json:outfile=#{output_dir}/arachni_results.json"
-  )
-
-  # Unzip Results in Output Dir
-  system(
-    'sudo',
-    '/bin/bash',
-    '--login',
-    '-c',
-    "cd #{output_dir} && unzip -o arachni_results.html.zip"
-  )
-rescue StandardError, SystemExit, Interrupt => e
-  raise e
-ensure
-  browser = PWN::Plugins::TransparentBrowser.close(browser_obj: browser) unless browser.nil?
-end

data/bin/pwn_arachni_rest

@@ -1,174 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'pwn'
-require 'optparse'
-require 'securerandom'
-require 'pty'
-require 'json'
-
-opts = {}
-OptionParser.new do |options|
-  options.banner = "USAGE:
-    #{$PROGRAM_NAME} [opts]
-  "
-
-  options.on('-tTARGET', '--target_url=TARGET', '<Required - Target URI to Scan>') do |t|
-    opts[:target_url] = t
-  end
-
-  options.on('-oDIR', '--report_output_dir=DIR', '<Required - Output Directory for Results Generation>') do |o|
-    opts[:output_dir] = o
-  end
-
-  options.on('-IINST', '--navigation_instruct=INST', '<Required - Path to Navigation Instructions (e.g. Auth w/ Target - see /pwn/etc/arachni/navigation-REST.instruct.EXAMPLE)>') do |i|
-    opts[:navigation_instruct] = i
-  end
-
-  options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
-    opts[:proxy] = p
-  end
-
-  options.on('-xTYPE', '--proxy-type=TYPE', '<Optional - Proxy Type (See arachni --help)>') do |x|
-    opts[:proxy_type] = x
-  end
-
-  options.on('-ePATTERN', '--exclude-pattern=PATTERN', '<Optional - Exclude comma-delimited resources whose URL matches pattern>') do |e|
-    opts[:exclude_pattern] = e
-  end
-
-  options.on('-d', '--[no-]deep', '<Optional - Enable Deep Scanning (Much Longer to Complete)>') do |d|
-    opts[:deep_scan] = d
-  end
-end.parse!
-
-if opts.empty?
-  puts `#{$PROGRAM_NAME} --help`
-  exit 1
-end
-
-logger = PWN::Plugins::PWNLogger.create
-
-target_url = opts[:target_url].to_s.scrub
-output_dir = opts[:output_dir].to_s.scrub if Dir.exist?(opts[:output_dir].to_s.scrub)
-navigation_instruct = opts[:navigation_instruct].to_s.strip.chomp.scrub if File.exist?(opts[:navigation_instruct].to_s.strip.chomp.scrub)
-proxy = opts[:proxy]
-proxy_type = opts[:proxy_type]
-exclude_pattern = opts[:exclude_pattern]
-deep_scan = opts[:deep_scan]
-
-# Proxy defaults to 127.0.0.1:8282
-arachni_cmd_str = 'arachni --plugin=proxy:address=127.0.0.1,port=8282'
-arachni_cmd_str = "#{arachni_cmd_str} --output-debug"
-arachni_cmd_str = "#{arachni_cmd_str} --scope-page-limit=0"
-arachni_cmd_str = "#{arachni_cmd_str} --checks=*,-common_*,-backup*,-backdoors,-directory_listing,-csrf"
-arachni_cmd_str = "#{arachni_cmd_str} --report-save-path=#{output_dir}/arachni_results.afr"
-arachni_cmd_str = "#{arachni_cmd_str} --http-proxy #{proxy}" if proxy
-arachni_cmd_str = "#{arachni_cmd_str} --http-proxy-type #{proxy_type}" if proxy_type
-arachni_cmd_str = "#{arachni_cmd_str} --audit-jsons --audit-xmls --audit-forms --audit-links"
-arachni_cmd_str = "#{arachni_cmd_str} --audit-headers --audit-with-both-methods --audit-parameter-names" if deep_scan
-arachni_cmd_str = "#{arachni_cmd_str} #{target_url}"
-
-if exclude_pattern
-  exclude_pattern.to_s.split(',').each do |exclude_entry|
-    arachni_cmd_str = "#{arachni_cmd_str} --scope-exclude-pattern #{exclude_entry}"
-  end
-end
-
-arachni_stdout_log_path = "/tmp/pwn_arachni_rest-#{SecureRandom.hex}.log"
-arachni_stdout_log = File.new(arachni_stdout_log_path, 'w')
-# Immediately writes all buffered data in IO to disk
-arachni_stdout_log.sync = true
-arachni_stdout_log.fsync
-
-trained_attack_vectors_yaml = ''
-
-# Kick off scan as defined by pwn_arachni_rest flags
-begin
-  fork_pid = Process.fork do
-    PTY.spawn(
-      "sudo /bin/bash --login -c \"#{arachni_cmd_str}\""
-    ) do |stdout, _stdin, _pid|
-      stdout.each do |line|
-        puts line
-        arachni_stdout_log.puts line
-      end
-    end
-  end
-  Process.detach(fork_pid)
-  puts 'Arachni proxy plugin process exiting...'
-rescue StandardError => e
-  puts 'ERROR: Arachni proxy plugin process exiting...'
-  raise e
-rescue Interrupt
-  puts 'CTRL+C Detected - goodbye.'
-  exit 1
-ensure
-  Process.kill('TERM', fork_pid) if fork_pid
-  File.unlink(arachni_stdout_log_path)
-  File.unlink(trained_attack_vectors_yaml)
-end
-
-# Watch for Arachni proxy plugin to intialize prior to invoking navigation-REST.instruct
-return_pattern = 'Proxy: The scan will resume once you visit the shutdown URL.'
-loop do
-  if File.exist?(arachni_stdout_log_path) &&
-     File.read(arachni_stdout_log_path).include?(return_pattern)
-
-    print 'Proxy started...sleeping for 9s.  '
-    sleep 9
-    puts 'Ready to proceed.'
-    break
-  end
-  sleep 3
-end
-
-# Initiate rest_client object to pump requests through Arachni proxy plugin.
-rest_client = PWN::Plugins::TransparentBrowser.open(
-  browser_type: :rest,
-  proxy: 'http://127.0.0.1:8282'
-)::Request
-
-# Now that the proxy is up, we can run the navigation-REST.instruct through the Arachni
-# proxy plugin (http://127.0.0.1:8282) to train arachni how to interact w/ the API.
-puts "Initialize REST API Training: #{navigation_instruct}"
-pwn_arachni_rest_custom_http_header = instance_eval(File.read(navigation_instruct), navigation_instruct)
-puts "REST API Training Complete: #{navigation_instruct}"
-puts 'Sleeping for 9s prior to proceeding...'
-sleep 9
-
-# Close rest_client used for training Arachni
-PWN::Plugins::TransparentBrowser.close(browser_obj: rest_client)
-
-trained_attack_vectors_yaml = "#{File.dirname(arachni_stdout_log_path)}/#{File.basename(arachni_stdout_log_path, File.extname(arachni_stdout_log_path))}.yml"
-
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("/bin/bash --login -c \"http_proxy=http://127.0.0.1:8282 curl http://arachni.proxy/panel/vectors.yml -o #{trained_attack_vectors_yaml}\"")
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system('/bin/bash --login -c "http_proxy=http://127.0.0.1:8282 curl http://arachni.proxy/shutdown"')
-fork_pid = nil
-
-arachni_trained_cmd_str = "arachni --plugin=vector_feed:yaml_file=#{trained_attack_vectors_yaml}"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --output-debug"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --scope-page-limit=0"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --checks=*,-common_*,-backup*,-backdoors,-directory_listing,-csrf"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-request-header='#{pwn_arachni_rest_custom_http_header}'" if pwn_arachni_rest_custom_http_header != ''
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --report-save-path=#{output_dir}/arachni_results.afr"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-proxy #{proxy}" if proxy
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --http-proxy-type #{proxy_type}" if proxy_type
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --audit-jsons --audit-xmls --audit-forms --audit-links"
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} --audit-headers --audit-with-both-methods --audit-parameter-names" if deep_scan
-arachni_trained_cmd_str = "#{arachni_trained_cmd_str} #{target_url}"
-
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"#{arachni_trained_cmd_str}\"")
-
-# Report Scan Results
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=html:outfile=#{output_dir}/arachni_results.html.zip\"")
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"arachni_reporter #{output_dir}/arachni_results.afr --reporter=json:outfile=#{output_dir}/arachni_results.json\"")
-
-# Unzip Results in Output Dir
-# TODO: Use Process.spawn instead of system to capture pid for proper cleanup
-system("sudo /bin/bash --login -c \"cd #{output_dir} && unzip -o arachni_results.html.zip\"")