pwn 0.4.862 → 0.4.864

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37efabb14f36a92f80bf48c129d2c65ee53c709e96b6a6ee454f6f066c41c50c
-  data.tar.gz: 5a2b95122fa5d0ffca5685db0ce1a332d676b562d4cf3f27571533af991e28e4
+  metadata.gz: 33c1ab6f74eec4b541eda25e8c781ec5abdd91f6bf70d48a97e1dbbb00475801
+  data.tar.gz: 64b51527b2b15ea762d52c91c346dbc3c1aa6b14ee16072c5b0c09219e390dd9
 SHA512:
-  metadata.gz: a03172dd4564f9d3a67e8e498c4a4b737b08be1e974a54275d5806e6c2e4f7107db0d6f451e59a8670248e217177e984df3214954034d59b92554a4d5587865f
-  data.tar.gz: 930cd5613abe61bf8b62194f8ff006919818c4cb18266cea009acc5d9338d8db7544759dc44af3b1f1c212a700c876750017c929a5035b45e863ee35d49fbdfb
+  metadata.gz: e26153a1806be58722177c4ad4afedcd0b5bf6aee0a1a4bf715fa8291c66d1689c4c5238ac871fe8f12103f3240fbd462ab3ba33586f381a293546a0ce192187
+  data.tar.gz: 54970b745a9a4af74bd718b0d2a35c96718dbfdb35cc322c1a77ea8ae0e4b6fe099a3e8863968b7fa7b71ac1fae97d6532ce1a715d20387fb1174d661a4ac763

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.862]:001 >>> PWN.help
+pwn[v0.4.864]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.862]:001 >>> PWN.help
+pwn[v0.4.864]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/burp_suite.rb

@@ -1,7 +1,9 @@
 # frozen_string_literal: true
 
-require 'socket'
 require 'base64'
+require 'json'
+require 'socket'
+require 'uri'
 
 module PWN
   module Plugins
@@ -76,6 +78,45 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # uri_in_scope_bool = PWN::Plugins::BurpSuite.uri_in_scope(
+      #   target_config: 'required - path to burp suite pro target config JSON file',
+      #   uri: 'required - URI to determine if in scope'
+      # )
+
+      public_class_method def self.uri_in_scope(opts = {})
+        target_config = opts[:target_config]
+        raise 'ERROR: target_config does not exist' unless File.exist?(target_config)
+
+        uri = opts[:uri]
+        raise 'ERROR: uri parameter is required' if uri.nil?
+
+        target_config_json = JSON.parse(
+          File.read(target_config),
+          symbolize_names: true
+        )
+
+        out_of_scope = target_config_json[:target][:scope][:exclude]
+        out_of_scope_arr = out_of_scope.select do |os|
+          URI.parse(uri).scheme =~ /#{os[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{os[:host]}/ &&
+            URI.parse(uri).path =~ /#{os[:file]}/
+        end
+        return false unless out_of_scope_arr.empty?
+
+        in_scope = target_config_json[:target][:scope][:include]
+        in_scope_arr = in_scope.select do |is|
+          URI.parse(uri).scheme =~ /#{is[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{is[:host]}/ &&
+            URI.parse(uri).path =~ /#{is[:file]}/
+        end
+        return false if in_scope_arr.empty?
+
+        true
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.enable_proxy(
       #   burp_obj: 'required - burp_obj returned by #start method'
@@ -311,6 +352,12 @@ module PWN
             burp_jar_path: 'required - path of burp suite pro jar file',
             headless: 'optional - run headless if set to true',
             browser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types',
+            target_config: 'optional - path to burp suite pro target config JSON file'
+          )
+
+          uri_in_scope_bool = #{self}.uri_in_scope(
+            target_config: 'required - path to burp suite pro target config JSON file',
+            uri: 'required - URI to determine if in scope'
           )
 
           #{self}.enable_proxy(

data/lib/pwn/plugins/transparent_browser.rb

@@ -284,7 +284,7 @@ module PWN
         browser_obj = opts[:browser_obj]
         text = opts[:text].to_s
 
-        elements_found = browser_obj[:browser].elements.each do |element|
+        elements_found = browser_obj[:browser].elements.select do |element|
           element.text == text
         end
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.862'
+  VERSION = '0.4.864'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.862
+  version: 0.4.864
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-22 00:00:00.000000000 Z
+date: 2023-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport