pwn 0.4.720 → 0.4.722
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +1 -1
- data/README.md +2 -2
- data/bin/pwn_diff_csv_files_w_column_exclude +4 -2
- data/bin/pwn_fuzz_net_app_proto +10 -1
- data/bin/pwn_phone +2 -1
- data/bin/pwn_sast +2 -1
- data/bin/pwn_www_uri_buster +4 -1
- data/lib/pwn/version.rb +1 -1
- data/packer/provisioners/vmware_tools.sh +1 -1
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 7bbc9f14487dddfa239bc7f85bbccf8fc06b32abe298fe6a1c9099f5471999d7
|
4
|
+
data.tar.gz: 021b481cab4531a566e6da682b72a5cf37dcdc5abe1ade52d37d510f0b06bae7
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 338a02788c9069d19f8bdcef94ea88971421fc2679e432654b8ead18e296baefb0af1cd379439a84d4f051fbf7d56c4b34a6c7753f71da20de71ac53e8e3e145
|
7
|
+
data.tar.gz: c6b8945cfa10ca5333ce38b1bb50f624cd107408817c62466ffc4146b081cbeeb73b7bba4f09b0cd0370ff5f6d67026c4af95a4276be22c411832ef1489dc9c1
|
data/Gemfile
CHANGED
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
37
37
|
$ rvm list gemsets
|
38
38
|
$ gem install --verbose pwn
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.722]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.722]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
|
@@ -134,7 +134,8 @@ def csv_diff(opts = {})
|
|
134
134
|
CSV.open(diff_path, 'w', col_sep: ',', quote_char: '"', force_quotes: true) do |csv|
|
135
135
|
larger_csv.each do |line_arr|
|
136
136
|
line = line_arr.join(',')
|
137
|
-
csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
|
137
|
+
# csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
|
138
|
+
csv.puts line_arr if smaller_csv.none? { |sc| sc.join(',') == line }
|
138
139
|
end
|
139
140
|
end
|
140
141
|
diff_csv = CSV.open(
|
@@ -151,7 +152,8 @@ def csv_diff(opts = {})
|
|
151
152
|
larger_csv_orig.each_with_index do |line_arr, index|
|
152
153
|
# Use larger_csv instead of orig to compare column redaction to diff_csv
|
153
154
|
line = larger_csv[index].join(',')
|
154
|
-
csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
|
155
|
+
# csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
|
156
|
+
csv.puts line_arr if diff_csv.any? { |dc| dc.join(',') == line }
|
155
157
|
end
|
156
158
|
end
|
157
159
|
end
|
data/bin/pwn_fuzz_net_app_proto
CHANGED
@@ -78,7 +78,16 @@ if opts.empty?
|
|
78
78
|
end
|
79
79
|
|
80
80
|
pwn_provider = 'ruby-gem'
|
81
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
81
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
82
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
83
|
+
|
84
|
+
if pwn_provider == 'ruby-gem'
|
85
|
+
require 'pwn'
|
86
|
+
elsif pwn_provider == 'docker'
|
87
|
+
require '/opt/pwn/lib/pwn'
|
88
|
+
else
|
89
|
+
raise "PWN_PROVIDER env variable is not set to 'ruby-gem' or 'docker'"
|
90
|
+
end
|
82
91
|
|
83
92
|
dir_path = opts[:dir_path].to_s.scrub
|
84
93
|
target = opts[:target]
|
data/bin/pwn_phone
CHANGED
@@ -66,7 +66,8 @@ end
|
|
66
66
|
|
67
67
|
begin
|
68
68
|
pwn_provider = 'ruby-gem'
|
69
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
69
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
70
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
70
71
|
$stdout.sync = true
|
71
72
|
|
72
73
|
# Required Flag Variables
|
data/bin/pwn_sast
CHANGED
@@ -47,7 +47,8 @@ end
|
|
47
47
|
|
48
48
|
begin
|
49
49
|
pwn_provider = 'ruby-gem'
|
50
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
50
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
51
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
51
52
|
|
52
53
|
green = "\e[32m"
|
53
54
|
end_of_color = "\e[0m"
|
data/bin/pwn_www_uri_buster
CHANGED
@@ -101,6 +101,8 @@ def request_path(opts = {})
|
|
101
101
|
http_resp_length: response.body.length,
|
102
102
|
http_resp: "#{response.body[0..300]}..."
|
103
103
|
}
|
104
|
+
rescue Errno::ECONNREFUSED
|
105
|
+
raise 'ERROR: Connection(s) Refused. Try lowering the --max-threads value.'
|
104
106
|
rescue Errno::ECONNRESET,
|
105
107
|
RestClient::Exceptions::ReadTimeout,
|
106
108
|
RestClient::ServerBrokeConnection => e
|
@@ -138,7 +140,8 @@ end
|
|
138
140
|
|
139
141
|
begin
|
140
142
|
pwn_provider = 'ruby-gem'
|
141
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
143
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
144
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
142
145
|
$stdout.sync = true
|
143
146
|
|
144
147
|
target_url = opts[:target_url]
|
data/lib/pwn/version.rb
CHANGED
@@ -4,5 +4,5 @@ source /etc/profile.d/globals.sh
|
|
4
4
|
$screen_cmd "${apt} install -y linux-headers-$(uname -r) ${assess_update_errors}"
|
5
5
|
grok_error
|
6
6
|
|
7
|
-
$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop
|
7
|
+
$screen_cmd "${apt} install --reinstall -y open-vm-tools-desktop fuse3 ${assess_update_errors}"
|
8
8
|
grok_error
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: pwn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.4.
|
4
|
+
version: 0.4.722
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- 0day Inc.
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-06-04 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -800,14 +800,14 @@ dependencies:
|
|
800
800
|
requirements:
|
801
801
|
- - '='
|
802
802
|
- !ruby/object:Gem::Version
|
803
|
-
version: 1.
|
803
|
+
version: 1.52.0
|
804
804
|
type: :runtime
|
805
805
|
prerelease: false
|
806
806
|
version_requirements: !ruby/object:Gem::Requirement
|
807
807
|
requirements:
|
808
808
|
- - '='
|
809
809
|
- !ruby/object:Gem::Version
|
810
|
-
version: 1.
|
810
|
+
version: 1.52.0
|
811
811
|
- !ruby/object:Gem::Dependency
|
812
812
|
name: rubocop-rake
|
813
813
|
requirement: !ruby/object:Gem::Requirement
|