pwn 0.4.721 → 0.4.723
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile +5 -5
- data/README.md +2 -2
- data/bin/pwn_defectdojo_importscan +1 -1
- data/bin/pwn_diff_csv_files_w_column_exclude +4 -2
- data/bin/pwn_fuzz_net_app_proto +10 -1
- data/bin/pwn_phone +2 -1
- data/bin/pwn_sast +2 -1
- data/bin/pwn_www_uri_buster +2 -1
- data/lib/pwn/version.rb +1 -1
- metadata +13 -13
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: d8136928e086e6f9a41b4d5e489143b2f150fc2d84c2f714279ca568f4669752
|
4
|
+
data.tar.gz: b640f489a86f13d733e616ad8c5d96bff17d89ca2b20d2bdd6fa87eb3f82cd47
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b66071a066d5abeeb3b5e4361fcffdc7436001ede84be218e779b66e45bfb48cfd8b92401e09b6accc92d0cca379ef1c4f9c486eca6a52b9a84057bab4696896
|
7
|
+
data.tar.gz: 180e9a3d2df927b4c82f6a14aed00a9a7721d1c33917fa1f080e86acc05fc0f01cb7a0f38eea19d8ac637fb978fe013a6dda186c70a5f22844475a59e01b030b
|
data/Gemfile
CHANGED
@@ -18,9 +18,9 @@ gem 'aws-sdk', '3.1.0'
|
|
18
18
|
gem 'bettercap', '1.6.2'
|
19
19
|
gem 'brakeman', '6.0.0'
|
20
20
|
gem 'bson', '4.15.0'
|
21
|
-
gem 'bundler', '>=2.4.
|
21
|
+
gem 'bundler', '>=2.4.14'
|
22
22
|
gem 'bundler-audit', '0.9.1'
|
23
|
-
gem 'bunny', '2.
|
23
|
+
gem 'bunny', '2.22.0'
|
24
24
|
gem 'colorize', '0.8.1'
|
25
25
|
gem 'credit_card_validations', '6.0.0'
|
26
26
|
gem 'eventmachine', '1.2.7'
|
@@ -37,7 +37,7 @@ gem 'jenkins_api_client2', '1.9.0'
|
|
37
37
|
gem 'js-beautify', '0.1.8'
|
38
38
|
gem 'json', '2.6.3'
|
39
39
|
gem 'jsonpath', '1.1.3'
|
40
|
-
gem 'jwt', '2.7.
|
40
|
+
gem 'jwt', '2.7.1'
|
41
41
|
gem 'luhn', '1.0.2'
|
42
42
|
gem 'mail', '2.8.1'
|
43
43
|
gem 'mongo', '2.18.2'
|
@@ -67,7 +67,7 @@ gem 'rex', '2.0.13'
|
|
67
67
|
gem 'rmagick', '5.2.0'
|
68
68
|
gem 'rspec', '3.12.0'
|
69
69
|
gem 'rtesseract', '3.1.2'
|
70
|
-
gem 'rubocop', '1.52.
|
70
|
+
gem 'rubocop', '1.52.1'
|
71
71
|
gem 'rubocop-rake', '0.6.0'
|
72
72
|
gem 'rubocop-rspec', '2.22.0'
|
73
73
|
gem 'ruby-audio', '1.6.1'
|
@@ -75,7 +75,7 @@ gem 'ruby-nmap', '1.0.1'
|
|
75
75
|
gem 'ruby-saml', '1.15.0'
|
76
76
|
gem 'rvm', '1.11.3.9'
|
77
77
|
gem 'savon', '2.14.0'
|
78
|
-
gem 'selenium-devtools', '0.
|
78
|
+
gem 'selenium-devtools', '0.114.0'
|
79
79
|
gem 'serialport', '1.3.2'
|
80
80
|
gem 'sinatra', '3.0.6'
|
81
81
|
gem 'slack-ruby-client', '2.1.0'
|
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
37
37
|
$ rvm list gemsets
|
38
38
|
$ gem install --verbose pwn
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.723]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.723]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
|
@@ -26,7 +26,7 @@ OptionParser.new do |options|
|
|
26
26
|
opts[:api_key] = a
|
27
27
|
end
|
28
28
|
|
29
|
-
options.on('-nNAME', '--
|
29
|
+
options.on('-nNAME', '--engagement-name=NAME', '<Required - name of engagement to associate w/ scan>') do |n|
|
30
30
|
opts[:engagement_name] = n
|
31
31
|
end
|
32
32
|
|
@@ -134,7 +134,8 @@ def csv_diff(opts = {})
|
|
134
134
|
CSV.open(diff_path, 'w', col_sep: ',', quote_char: '"', force_quotes: true) do |csv|
|
135
135
|
larger_csv.each do |line_arr|
|
136
136
|
line = line_arr.join(',')
|
137
|
-
csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
|
137
|
+
# csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
|
138
|
+
csv.puts line_arr if smaller_csv.none? { |sc| sc.join(',') == line }
|
138
139
|
end
|
139
140
|
end
|
140
141
|
diff_csv = CSV.open(
|
@@ -151,7 +152,8 @@ def csv_diff(opts = {})
|
|
151
152
|
larger_csv_orig.each_with_index do |line_arr, index|
|
152
153
|
# Use larger_csv instead of orig to compare column redaction to diff_csv
|
153
154
|
line = larger_csv[index].join(',')
|
154
|
-
csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
|
155
|
+
# csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
|
156
|
+
csv.puts line_arr if diff_csv.any? { |dc| dc.join(',') == line }
|
155
157
|
end
|
156
158
|
end
|
157
159
|
end
|
data/bin/pwn_fuzz_net_app_proto
CHANGED
@@ -78,7 +78,16 @@ if opts.empty?
|
|
78
78
|
end
|
79
79
|
|
80
80
|
pwn_provider = 'ruby-gem'
|
81
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
81
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
82
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
83
|
+
|
84
|
+
if pwn_provider == 'ruby-gem'
|
85
|
+
require 'pwn'
|
86
|
+
elsif pwn_provider == 'docker'
|
87
|
+
require '/opt/pwn/lib/pwn'
|
88
|
+
else
|
89
|
+
raise "PWN_PROVIDER env variable is not set to 'ruby-gem' or 'docker'"
|
90
|
+
end
|
82
91
|
|
83
92
|
dir_path = opts[:dir_path].to_s.scrub
|
84
93
|
target = opts[:target]
|
data/bin/pwn_phone
CHANGED
@@ -66,7 +66,8 @@ end
|
|
66
66
|
|
67
67
|
begin
|
68
68
|
pwn_provider = 'ruby-gem'
|
69
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
69
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
70
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
70
71
|
$stdout.sync = true
|
71
72
|
|
72
73
|
# Required Flag Variables
|
data/bin/pwn_sast
CHANGED
@@ -47,7 +47,8 @@ end
|
|
47
47
|
|
48
48
|
begin
|
49
49
|
pwn_provider = 'ruby-gem'
|
50
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
50
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
51
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
51
52
|
|
52
53
|
green = "\e[32m"
|
53
54
|
end_of_color = "\e[0m"
|
data/bin/pwn_www_uri_buster
CHANGED
@@ -140,7 +140,8 @@ end
|
|
140
140
|
|
141
141
|
begin
|
142
142
|
pwn_provider = 'ruby-gem'
|
143
|
-
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
143
|
+
# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
|
144
|
+
pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
|
144
145
|
$stdout.sync = true
|
145
146
|
|
146
147
|
target_url = opts[:target_url]
|
data/lib/pwn/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: pwn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.4.
|
4
|
+
version: 0.4.723
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- 0day Inc.
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-06-
|
11
|
+
date: 2023-06-13 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -114,14 +114,14 @@ dependencies:
|
|
114
114
|
requirements:
|
115
115
|
- - ">="
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: 2.4.
|
117
|
+
version: 2.4.14
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
122
|
- - ">="
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: 2.4.
|
124
|
+
version: 2.4.14
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: bundler-audit
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|
@@ -142,14 +142,14 @@ dependencies:
|
|
142
142
|
requirements:
|
143
143
|
- - '='
|
144
144
|
- !ruby/object:Gem::Version
|
145
|
-
version: 2.
|
145
|
+
version: 2.22.0
|
146
146
|
type: :runtime
|
147
147
|
prerelease: false
|
148
148
|
version_requirements: !ruby/object:Gem::Requirement
|
149
149
|
requirements:
|
150
150
|
- - '='
|
151
151
|
- !ruby/object:Gem::Version
|
152
|
-
version: 2.
|
152
|
+
version: 2.22.0
|
153
153
|
- !ruby/object:Gem::Dependency
|
154
154
|
name: colorize
|
155
155
|
requirement: !ruby/object:Gem::Requirement
|
@@ -380,14 +380,14 @@ dependencies:
|
|
380
380
|
requirements:
|
381
381
|
- - '='
|
382
382
|
- !ruby/object:Gem::Version
|
383
|
-
version: 2.7.
|
383
|
+
version: 2.7.1
|
384
384
|
type: :runtime
|
385
385
|
prerelease: false
|
386
386
|
version_requirements: !ruby/object:Gem::Requirement
|
387
387
|
requirements:
|
388
388
|
- - '='
|
389
389
|
- !ruby/object:Gem::Version
|
390
|
-
version: 2.7.
|
390
|
+
version: 2.7.1
|
391
391
|
- !ruby/object:Gem::Dependency
|
392
392
|
name: luhn
|
393
393
|
requirement: !ruby/object:Gem::Requirement
|
@@ -800,14 +800,14 @@ dependencies:
|
|
800
800
|
requirements:
|
801
801
|
- - '='
|
802
802
|
- !ruby/object:Gem::Version
|
803
|
-
version: 1.52.
|
803
|
+
version: 1.52.1
|
804
804
|
type: :runtime
|
805
805
|
prerelease: false
|
806
806
|
version_requirements: !ruby/object:Gem::Requirement
|
807
807
|
requirements:
|
808
808
|
- - '='
|
809
809
|
- !ruby/object:Gem::Version
|
810
|
-
version: 1.52.
|
810
|
+
version: 1.52.1
|
811
811
|
- !ruby/object:Gem::Dependency
|
812
812
|
name: rubocop-rake
|
813
813
|
requirement: !ruby/object:Gem::Requirement
|
@@ -912,14 +912,14 @@ dependencies:
|
|
912
912
|
requirements:
|
913
913
|
- - '='
|
914
914
|
- !ruby/object:Gem::Version
|
915
|
-
version: 0.
|
915
|
+
version: 0.114.0
|
916
916
|
type: :runtime
|
917
917
|
prerelease: false
|
918
918
|
version_requirements: !ruby/object:Gem::Requirement
|
919
919
|
requirements:
|
920
920
|
- - '='
|
921
921
|
- !ruby/object:Gem::Version
|
922
|
-
version: 0.
|
922
|
+
version: 0.114.0
|
923
923
|
- !ruby/object:Gem::Dependency
|
924
924
|
name: serialport
|
925
925
|
requirement: !ruby/object:Gem::Requirement
|
@@ -2164,7 +2164,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
2164
2164
|
- !ruby/object:Gem::Version
|
2165
2165
|
version: '0'
|
2166
2166
|
requirements: []
|
2167
|
-
rubygems_version: 3.4.
|
2167
|
+
rubygems_version: 3.4.14
|
2168
2168
|
signing_key:
|
2169
2169
|
specification_version: 4
|
2170
2170
|
summary: Automated Security Testing for CI/CD Pipelines & Beyond
|