pwn 0.4.716 → 0.4.718

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0249d1b65b57936b80399b3d5676bfd6729da8d29e5da4d0a1385e06e81a100c'
-  data.tar.gz: 3eb456af567655ff485238033d3b409dde6a0d36bd82c2c709bad908f0bfa9bf
+  metadata.gz: 26afd053ddf66ceb52b537a86b5b9a26ffd84786f6ab3682f205e9159089d05d
+  data.tar.gz: bbe2d2805ee9ed4412cb96ec4431ec8971f5a606ae12728bef4991617348f77f
 SHA512:
-  metadata.gz: 69d5b29665d3cd99dd584fdb0ad96559941deb73321e63f8ff5a5c312965bc86bf61ee809592450c117a112f5a0376d6207f4c096d8a717d320cbc5bfa5172f5
-  data.tar.gz: e799946fdc810711efc928440a1c0f5e031e17f9c5d7e5c598652e2378d3cb5beecd9426b8af9438752ea7e1d4bc37d321993833ac68ec135d4d243043430adf
+  metadata.gz: f8f353d22573d94df9ed1a607968fb7b01ac116a6af3bde0a5712804fe38a99edc5796c4e251eff2249e3c4a8cbab29917579a83ab1c67a8cb8034e3364b0b62
+  data.tar.gz: a027d2f5a316c18459bd5d5a33d9bf08166e833603bfc1ec9c263553829a007888e663d020b5e7cc93da18d1dfce749ef09887d402f544bfb73565d2cab1140e

data/Gemfile

@@ -11,12 +11,12 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '7.0.4.3'
+gem 'activesupport', '7.0.5'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
-gem 'brakeman', '5.4.1'
+gem 'brakeman', '6.0.0'
 gem 'bson', '4.15.0'
 gem 'bundler', '>=2.4.13'
 gem 'bundler-audit', '0.9.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.716]:001 >>> PWN.help
+pwn[v0.4.718]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.716]:001 >>> PWN.help
+pwn[v0.4.718]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_defectdojo_importscan

@@ -57,6 +57,10 @@ OptionParser.new do |options|
   options.on('-v', '--[no-]verified', '<Optional - flag finding as verified by a tester (defaults to false)') do |v|
     opts[:verified] = v
   end
+
+  options.on('-g', '--create-finding-groups', '<Optional - group similar findings into one finding (defaults to false)') do |g|
+    opts[:create_finding_groups] = g
+  end
 end.parse!
 
 if opts.empty?
@@ -79,6 +83,7 @@ tags = opts[:tags]
 minimum_severity = opts[:minimum_severity]
 scan_date = opts[:scan_date]
 verified = opts[:verified]
+create_findings_groups = opts[:create_finding_groups]
 
 begin
   dd_obj = PWN::Plugins::DefectDojo.login(
@@ -97,7 +102,8 @@ begin
     tags: tags,
     minimum_severity: minimum_severity,
     scan_date: scan_date,
-    verified: verified
+    verified: verified,
+    create_findings_groups: create_findings_groups
   )
 rescue StandardError => e
   raise e

data/bin/pwn_nmap_discover_tcp_udp

@@ -28,8 +28,8 @@ OptionParser.new do |options|
     opts[:results_root] = r
   end
 
-  options.on('-N', '--no-script', '<Optional - Exclude Nmap Scripts>') do |n|
-    opts[:no_script] = n
+  options.on('-S', '--stop-nse', '<Optional - Disable Nmap Scripting Engine>') do |n|
+    opts[:stop_nse] = n
   end
 
   options.on('-T', '--tor', '<Optional - Source Scans from Tor Nodes>') do |t|
@@ -64,8 +64,8 @@ File.new(exclude_file, 'w') unless File.exist?(exclude_file)
 interface = opts[:interface]
 interface ||= 'eth0'
 
-no_script = true if opts[:no_script]
-no_script ||= false
+stop_nse = true if opts[:stop_nse]
+stop_nse ||= false
 
 with_tor = true if opts[:with_tor]
 with_tor ||= false
@@ -258,7 +258,7 @@ begin
   # retransmission attempts on filtered ports.
   PWN::Plugins::NmapIt.port_scan do |nmap|
     nmap.proxies = proxy if with_tor
-    unless no_script
+    unless stop_nse
       nmap.default_script = true
       nmap.update_scriptdb = true
     end
@@ -305,7 +305,7 @@ begin
   # retransmission attempts on filtered ports.
   PWN::Plugins::NmapIt.port_scan do |nmap|
     nmap.proxies = proxy if with_tor
-    unless no_script
+    unless stop_nse
       nmap.default_script = true
       nmap.update_scriptdb = true
     end

data/lib/pwn/plugins/defect_dojo.rb

@@ -462,6 +462,8 @@ module PWN
         # Defaults to false
         opts[:verified] ? (http_body[:verified] = true) : (http_body[:verified] = false)
 
+        opts[:create_finding_groups] ? (http_body[:create_finding_groups_for_all_findings] = true) : (http_body[:create_finding_groups_for_all_findings] = false)
+
         api_path = 'import-scan/'
         api_path = 'importscan/' if api_version == 'v1'
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.716'
+  VERSION = '0.4.718'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.716
+  version: 0.4.718
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-24 00:00:00.000000000 Z
+date: 2023-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4.3
+        version: 7.0.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4.3
+        version: 7.0.5
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -86,14 +86,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.4.1
+        version: 6.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 5.4.1
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: bson
   requirement: !ruby/object:Gem::Requirement