pwn 0.4.863 → 0.4.864

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a28a1b0e7b97ef6739326da0d162f8e73405313eb847f76cb0b43416ad440d77
-  data.tar.gz: 97cbcfd6fe13f9f53a28c0528fe2d76c84826fabc0eb9db682f4aeb8cd9e2b8e
+  metadata.gz: 33c1ab6f74eec4b541eda25e8c781ec5abdd91f6bf70d48a97e1dbbb00475801
+  data.tar.gz: 64b51527b2b15ea762d52c91c346dbc3c1aa6b14ee16072c5b0c09219e390dd9
 SHA512:
-  metadata.gz: c58e456fe963d1f42bdf1cc25343c472a09dd083440f0b22e23099b9960724251b16567c1c7645e8299d3fea4b5c50b46a98bbe271f862387686f152ca87f057
-  data.tar.gz: 36cf6c132c3381386842f3e631040e6936a2812f450614d2149a5892f33028311748e2ee9ceee3e969b3629bcd316055d62f5eca949f86b7aaf00e69bf2fc87c
+  metadata.gz: e26153a1806be58722177c4ad4afedcd0b5bf6aee0a1a4bf715fa8291c66d1689c4c5238ac871fe8f12103f3240fbd462ab3ba33586f381a293546a0ce192187
+  data.tar.gz: 54970b745a9a4af74bd718b0d2a35c96718dbfdb35cc322c1a77ea8ae0e4b6fe099a3e8863968b7fa7b71ac1fae97d6532ce1a715d20387fb1174d661a4ac763

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.863]:001 >>> PWN.help
+pwn[v0.4.864]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.863]:001 >>> PWN.help
+pwn[v0.4.864]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/burp_suite.rb

@@ -1,7 +1,9 @@
 # frozen_string_literal: true
 
-require 'socket'
 require 'base64'
+require 'json'
+require 'socket'
+require 'uri'
 
 module PWN
   module Plugins
@@ -76,6 +78,45 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # uri_in_scope_bool = PWN::Plugins::BurpSuite.uri_in_scope(
+      #   target_config: 'required - path to burp suite pro target config JSON file',
+      #   uri: 'required - URI to determine if in scope'
+      # )
+
+      public_class_method def self.uri_in_scope(opts = {})
+        target_config = opts[:target_config]
+        raise 'ERROR: target_config does not exist' unless File.exist?(target_config)
+
+        uri = opts[:uri]
+        raise 'ERROR: uri parameter is required' if uri.nil?
+
+        target_config_json = JSON.parse(
+          File.read(target_config),
+          symbolize_names: true
+        )
+
+        out_of_scope = target_config_json[:target][:scope][:exclude]
+        out_of_scope_arr = out_of_scope.select do |os|
+          URI.parse(uri).scheme =~ /#{os[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{os[:host]}/ &&
+            URI.parse(uri).path =~ /#{os[:file]}/
+        end
+        return false unless out_of_scope_arr.empty?
+
+        in_scope = target_config_json[:target][:scope][:include]
+        in_scope_arr = in_scope.select do |is|
+          URI.parse(uri).scheme =~ /#{is[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{is[:host]}/ &&
+            URI.parse(uri).path =~ /#{is[:file]}/
+        end
+        return false if in_scope_arr.empty?
+
+        true
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.enable_proxy(
       #   burp_obj: 'required - burp_obj returned by #start method'
@@ -311,6 +352,12 @@ module PWN
             burp_jar_path: 'required - path of burp suite pro jar file',
             headless: 'optional - run headless if set to true',
             browser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types',
+            target_config: 'optional - path to burp suite pro target config JSON file'
+          )
+
+          uri_in_scope_bool = #{self}.uri_in_scope(
+            target_config: 'required - path to burp suite pro target config JSON file',
+            uri: 'required - URI to determine if in scope'
           )
 
           #{self}.enable_proxy(

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.863'
+  VERSION = '0.4.864'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.863
+  version: 0.4.864
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-22 00:00:00.000000000 Z
+date: 2023-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport