pwn 0.4.721 → 0.4.723

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c955683b5eaf02952a897892a4ffb163e8e3d37e189774f8b6b947e9b0719091
-  data.tar.gz: 4d14d45e6e693a8264e817ae908dbee175aefe65808b616701bee56d8ee886ba
+  metadata.gz: d8136928e086e6f9a41b4d5e489143b2f150fc2d84c2f714279ca568f4669752
+  data.tar.gz: b640f489a86f13d733e616ad8c5d96bff17d89ca2b20d2bdd6fa87eb3f82cd47
 SHA512:
-  metadata.gz: c6b4f75c5a4f54a1ffc0b152ae2b3ef59f57f1a4e9cb3d4e4b0383ebb9cfd41fd4f1e9254c0c3d2129e43dbab7dca613b52421fec88ab5ed85cf091ab86b61a3
-  data.tar.gz: 5773b15cebf70e751af66483d374b9b50cfb819239492588059f40b1e9ff56a9631e8c370971bbd62714ed3c08d6927a862b6c22b3fbaafc428e7e19297e2055
+  metadata.gz: b66071a066d5abeeb3b5e4361fcffdc7436001ede84be218e779b66e45bfb48cfd8b92401e09b6accc92d0cca379ef1c4f9c486eca6a52b9a84057bab4696896
+  data.tar.gz: 180e9a3d2df927b4c82f6a14aed00a9a7721d1c33917fa1f080e86acc05fc0f01cb7a0f38eea19d8ac637fb978fe013a6dda186c70a5f22844475a59e01b030b

data/Gemfile

@@ -18,9 +18,9 @@ gem 'aws-sdk', '3.1.0'
 gem 'bettercap', '1.6.2'
 gem 'brakeman', '6.0.0'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.4.13'
+gem 'bundler', '>=2.4.14'
 gem 'bundler-audit', '0.9.1'
-gem 'bunny', '2.20.3'
+gem 'bunny', '2.22.0'
 gem 'colorize', '0.8.1'
 gem 'credit_card_validations', '6.0.0'
 gem 'eventmachine', '1.2.7'
@@ -37,7 +37,7 @@ gem 'jenkins_api_client2', '1.9.0'
 gem 'js-beautify', '0.1.8'
 gem 'json', '2.6.3'
 gem 'jsonpath', '1.1.3'
-gem 'jwt', '2.7.0'
+gem 'jwt', '2.7.1'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.8.1'
 gem 'mongo', '2.18.2'
@@ -67,7 +67,7 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.2.0'
 gem 'rspec', '3.12.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.52.0'
+gem 'rubocop', '1.52.1'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.22.0'
 gem 'ruby-audio', '1.6.1'
@@ -75,7 +75,7 @@ gem 'ruby-nmap', '1.0.1'
 gem 'ruby-saml', '1.15.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.14.0'
-gem 'selenium-devtools', '0.113.0'
+gem 'selenium-devtools', '0.114.0'
 gem 'serialport', '1.3.2'
 gem 'sinatra', '3.0.6'
 gem 'slack-ruby-client', '2.1.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.721]:001 >>> PWN.help
+pwn[v0.4.723]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.721]:001 >>> PWN.help
+pwn[v0.4.723]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_defectdojo_importscan

@@ -26,7 +26,7 @@ OptionParser.new do |options|
     opts[:api_key] = a
   end
 
-  options.on('-nNAME', '--enagagement-name=NAME', '<Required - name of engagement to associate w/ scan>') do |n|
+  options.on('-nNAME', '--engagement-name=NAME', '<Required - name of engagement to associate w/ scan>') do |n|
     opts[:engagement_name] = n
   end
 

data/bin/pwn_diff_csv_files_w_column_exclude

@@ -134,7 +134,8 @@ def csv_diff(opts = {})
   CSV.open(diff_path, 'w', col_sep: ',', quote_char: '"', force_quotes: true) do |csv|
     larger_csv.each do |line_arr|
       line = line_arr.join(',')
-      csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
+      # csv.puts line_arr if smaller_csv.select { |sc| sc.join(',') == line }.empty?
+      csv.puts line_arr if smaller_csv.none? { |sc| sc.join(',') == line }
     end
   end
   diff_csv = CSV.open(
@@ -151,7 +152,8 @@ def csv_diff(opts = {})
     larger_csv_orig.each_with_index do |line_arr, index|
       # Use larger_csv instead of orig to compare column redaction to diff_csv
       line = larger_csv[index].join(',')
-      csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
+      # csv.puts line_arr if diff_csv.select { |dc| dc.join(',') == line }.any?
+      csv.puts line_arr if diff_csv.any? { |dc| dc.join(',') == line }
     end
   end
 end

data/bin/pwn_fuzz_net_app_proto

@@ -78,7 +78,16 @@ if opts.empty?
 end
 
 pwn_provider = 'ruby-gem'
-pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+# pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
+
+if pwn_provider == 'ruby-gem'
+  require 'pwn'
+elsif pwn_provider == 'docker'
+  require '/opt/pwn/lib/pwn'
+else
+  raise "PWN_PROVIDER env variable is not set to 'ruby-gem' or 'docker'"
+end
 
 dir_path = opts[:dir_path].to_s.scrub
 target = opts[:target]

data/bin/pwn_phone

@@ -66,7 +66,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
   $stdout.sync = true
 
   # Required Flag Variables

data/bin/pwn_sast

@@ -47,7 +47,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
 
   green = "\e[32m"
   end_of_color = "\e[0m"

data/bin/pwn_www_uri_buster

@@ -140,7 +140,8 @@ end
 
 begin
   pwn_provider = 'ruby-gem'
-  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  # pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.select { |s| s == 'PWN_PROVIDER' }.any?
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
   $stdout.sync = true
 
   target_url = opts[:target_url]

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.721'
+  VERSION = '0.4.723'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.721
+  version: 0.4.723
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-06-02 00:00:00.000000000 Z
+date: 2023-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.4.13
+        version: 2.4.14
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.4.13
+        version: 2.4.14
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -142,14 +142,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.20.3
+        version: 2.22.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.20.3
+        version: 2.22.0
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
@@ -380,14 +380,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 2.7.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 2.7.1
 - !ruby/object:Gem::Dependency
   name: luhn
   requirement: !ruby/object:Gem::Requirement
@@ -800,14 +800,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.52.0
+        version: 1.52.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.52.0
+        version: 1.52.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -912,14 +912,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.0
+        version: 0.114.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.0
+        version: 0.114.0
 - !ruby/object:Gem::Dependency
   name: serialport
   requirement: !ruby/object:Gem::Requirement
@@ -2164,7 +2164,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.13
+rubygems_version: 3.4.14
 signing_key:
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond