pwn 0.4.719 → 0.4.721

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d5a7a93b7b534675f369a97e9ab0654d485a9d6c0f6c1b954011d5a95c000391
-  data.tar.gz: cbd332f8a8577d3438348ff5a6205152f4a432fc15071e7e0a92db9e90d7082b
+  metadata.gz: c955683b5eaf02952a897892a4ffb163e8e3d37e189774f8b6b947e9b0719091
+  data.tar.gz: 4d14d45e6e693a8264e817ae908dbee175aefe65808b616701bee56d8ee886ba
 SHA512:
-  metadata.gz: 7227ac0c69e95f9362712d757db641959c3507fe17511c2f0dbd7a19b454e730c9a51c394a553f463b3d2e47020add3cb5548270524f00d0e0547e7dc09cefac
-  data.tar.gz: 1c623f506c519b69fea6e602205e3c9ff8f20a618210ea524fd55f6870e7e5f0e33cf1a883936819a1dd6cbc8d4f3faf8879f28cd40de7e60f6b716a0f491d28
+  metadata.gz: c6b4f75c5a4f54a1ffc0b152ae2b3ef59f57f1a4e9cb3d4e4b0383ebb9cfd41fd4f1e9254c0c3d2129e43dbab7dca613b52421fec88ab5ed85cf091ab86b61a3
+  data.tar.gz: 5773b15cebf70e751af66483d374b9b50cfb819239492588059f40b1e9ff56a9631e8c370971bbd62714ed3c08d6927a862b6c22b3fbaafc428e7e19297e2055

data/Gemfile

@@ -67,7 +67,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.2.0'
 gem 'rspec', '3.12.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.51.0'
+gem 'rubocop', '1.52.0'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.22.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.719]:001 >>> PWN.help
+pwn[v0.4.721]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.719]:001 >>> PWN.help
+pwn[v0.4.721]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_defectdojo_reimportscan

@@ -57,6 +57,10 @@ OptionParser.new do |options|
   options.on('-v', '--[no-]verified', '<Optional - flag finding as verified by a tester (defaults to false)') do |v|
     opts[:verified] = v
   end
+
+  options.on('-g', '--create-finding-groups', '<Optional - group similar findings into one finding (defaults to false)') do |g|
+    opts[:create_finding_groups] = g
+  end
 end.parse!
 
 if opts.empty?
@@ -79,6 +83,7 @@ tags = opts[:tags]
 minimum_severity = opts[:minimum_severity]
 scan_date = opts[:scan_date]
 verified = opts[:verified]
+create_finding_groups = opts[:create_finding_groups]
 
 begin
   dd_obj = PWN::Plugins::DefectDojo.login(
@@ -97,7 +102,8 @@ begin
     tags: tags,
     minimum_severity: minimum_severity,
     scan_date: scan_date,
-    verified: verified
+    verified: verified,
+    create_finding_groups: create_finding_groups
   )
 rescue StandardError => e
   raise e

data/bin/pwn_www_uri_buster

@@ -101,6 +101,8 @@ def request_path(opts = {})
       http_resp_length: response.body.length,
       http_resp: "#{response.body[0..300]}..."
     }
+  rescue Errno::ECONNREFUSED
+    raise 'ERROR: Connection(s) Refused. Try lowering the --max-threads value.'
   rescue Errno::ECONNRESET,
          RestClient::Exceptions::ReadTimeout,
          RestClient::ServerBrokeConnection => e

data/lib/pwn/plugins/defect_dojo.rb

@@ -488,7 +488,8 @@ module PWN
       #   test_resource_uri: 'optional - alternative to tag names to know which test to reimport',
       #   minimum_severity: 'optional - minimum finding severity Info||Low||Medium||High||Critical (Defaults to Info)',
       #   scan_date: 'optional - date in which scan was kicked off (defaults to now)',
-      #   verified: 'optional - flag finding as verified by a tester (defaults to false)'
+      #   verified: 'optional - flag finding as verified by a tester (defaults to false)',
+      #   create_finding_groups: 'optional - flag to create finding groups (defaults to false)'
       # )
 
       public_class_method def self.reimportscan(opts = {})
@@ -567,6 +568,8 @@ module PWN
         # Defaults to false
         opts[:verified] ? (http_body[:verified] = true) : (http_body[:verified] = false)
 
+        opts[:create_finding_groups] ? (http_body[:create_finding_groups_for_all_findings] = true) : (http_body[:create_finding_groups_for_all_findings] = false)
+
         api_path = 'reimport-scan/'
         api_path = 'reimportscan/' if api_version == 'v1'
 
@@ -735,7 +738,8 @@ module PWN
             test_resource_uri: 'optional - alternative to tag names to know which test to reimport',
             minimum_severity: 'optional - minimum finding severity Info||Low||Medium||High||Critical (Defaults to Info)',
             scan_date: 'optional - date in which scan was kicked off (defaults to now)',
-            verified: 'optional - flag finding as verified by a tester (defaults to false)'
+            verified: 'optional - flag finding as verified by a tester (defaults to false)',
+            create_finding_groups: 'optional - flag to create finding groups (defaults to false)'
           )
 
           finding_list = #{self}.finding_list(

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.719'
+  VERSION = '0.4.721'
 end

data/packer/provisioners/vmware_tools.sh

@@ -4,5 +4,5 @@ source /etc/profile.d/globals.sh
 $screen_cmd "${apt} install -y linux-headers-$(uname -r) ${assess_update_errors}"
 grok_error
 
-$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop fuse ${assess_update_errors}"
+$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop fuse3 ${assess_update_errors}"
 grok_error

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.719
+  version: 0.4.721
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-31 00:00:00.000000000 Z
+date: 2023-06-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -800,14 +800,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.51.0
+        version: 1.52.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.51.0
+        version: 1.52.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement