pwn 0.4.720 → 0.4.722

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d5127d508798b97f84a9f6bba53a3e1facd1e8df7eb509d0bbc00c27c87d867c
-  data.tar.gz: c8094c41e93b4b9f66a306c6ce3da070eaf4a759fc12bcb1d3b2caad88df7d07
+  metadata.gz: 7bbc9f14487dddfa239bc7f85bbccf8fc06b32abe298fe6a1c9099f5471999d7
+  data.tar.gz: 021b481cab4531a566e6da682b72a5cf37dcdc5abe1ade52d37d510f0b06bae7
 SHA512:
-  metadata.gz: 4ca59a7dfb3be9e0167b787ceaa6a7b44c501f0c50e191c99d00d45d3d3ecf2511197edb754cb9ab09fb1e96774b32f59a5ef0c2bd0af954c8b9e1d2a99352d7
-  data.tar.gz: 109d9153b2a19fa8f05de51e533ee8fa6c05e38ebb51acf39e1789030c54bb622afc167ad865231d075c906fab3e3e0b86a6196b5114e5288a35158894b0d6c8
+  metadata.gz: 338a02788c9069d19f8bdcef94ea88971421fc2679e432654b8ead18e296baefb0af1cd379439a84d4f051fbf7d56c4b34a6c7753f71da20de71ac53e8e3e145
+  data.tar.gz: c6b8945cfa10ca5333ce38b1bb50f624cd107408817c62466ffc4146b081cbeeb73b7bba4f09b0cd0370ff5f6d67026c4af95a4276be22c411832ef1489dc9c1

data/Gemfile

@@ -67,7 +67,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.2.0'
 gem 'rspec', '3.12.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.51.0'
+gem 'rubocop', '1.52.0'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.22.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.720]:001 >>> PWN.help
+pwn[v0.4.722]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.720]:001 >>> PWN.help
+pwn[v0.4.722]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_diff_csv_files_w_column_exclude

@@ -134,7 +134,8 @@ def csv_diff(opts = {})
   CSV.open(diff_path, 'w', col_sep: ',', quote_char: '"', force_quotes: true) do |csv|
     larger_csv.each do |line_arr|
       line = line_arr.join(',')
-      csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
+      # csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
+      csv.puts line_arr if smaller_csv.none? { |sc| sc.join(',') == line }
     end
   end
   diff_csv = CSV.open(
@@ -151,7 +152,8 @@ def csv_diff(opts = {})
     larger_csv_orig.each_with_index do |line_arr, index|
       # Use larger_csv instead of orig to compare column redaction to diff_csv
       line = larger_csv[index].join(',')
-      csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
+      # csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
+      csv.puts line_arr if diff_csv.any? { |dc| dc.join(',') == line }
     end
   end
 end

data/bin/pwn_fuzz_net_app_proto

@@ -78,7 +78,16 @@ if opts.empty?
 end
 
 pwn_provider = 'ruby-gem'
-pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
+
+if pwn_provider == 'ruby-gem'
+  require 'pwn'
+elsif pwn_provider == 'docker'
+  require '/opt/pwn/lib/pwn'
+else
+  raise "PWN_PROVIDER env variable is not set to 'ruby-gem' or 'docker'"
+end
 
 dir_path = opts[:dir_path].to_s.scrub
 target = opts[:target]

data/bin/pwn_phone

@@ -66,7 +66,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
   $stdout.sync = true
 
   # Required Flag Variables

data/bin/pwn_sast

@@ -47,7 +47,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
 
   green = "\e[32m"
   end_of_color = "\e[0m"

data/bin/pwn_www_uri_buster

@@ -101,6 +101,8 @@ def request_path(opts = {})
       http_resp_length: response.body.length,
       http_resp: "#{response.body[0..300]}..."
     }
+  rescue Errno::ECONNREFUSED
+    raise 'ERROR: Connection(s) Refused. Try lowering the --max-threads value.'
   rescue Errno::ECONNRESET,
          RestClient::Exceptions::ReadTimeout,
          RestClient::ServerBrokeConnection => e
@@ -138,7 +140,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
   $stdout.sync = true
 
   target_url = opts[:target_url]

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.720'
+  VERSION = '0.4.722'
 end

data/packer/provisioners/vmware_tools.sh

@@ -4,5 +4,5 @@ source /etc/profile.d/globals.sh
 $screen_cmd "${apt} install -y linux-headers-$(uname -r) ${assess_update_errors}"
 grok_error
 
-$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop fuse ${assess_update_errors}"
+$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop fuse3 ${assess_update_errors}"
 grok_error

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.720
+  version: 0.4.722
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-05-31 00:00:00.000000000 Z
+date: 2023-06-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -800,14 +800,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.51.0
+        version: 1.52.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.51.0
+        version: 1.52.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement