pwn 0.4.863 → 0.4.865

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a28a1b0e7b97ef6739326da0d162f8e73405313eb847f76cb0b43416ad440d77
-  data.tar.gz: 97cbcfd6fe13f9f53a28c0528fe2d76c84826fabc0eb9db682f4aeb8cd9e2b8e
+  metadata.gz: da139fa7c3d5b1e27909f0b99942e9a524118f9ebe825d2716c8703b576d351a
+  data.tar.gz: '0518c9a00bc10bfdea7af3366f40a0683959405d145ab253e1102c0a475f08a5'
 SHA512:
-  metadata.gz: c58e456fe963d1f42bdf1cc25343c472a09dd083440f0b22e23099b9960724251b16567c1c7645e8299d3fea4b5c50b46a98bbe271f862387686f152ca87f057
-  data.tar.gz: 36cf6c132c3381386842f3e631040e6936a2812f450614d2149a5892f33028311748e2ee9ceee3e969b3629bcd316055d62f5eca949f86b7aaf00e69bf2fc87c
+  metadata.gz: b081eaf40b453ae96682fc93d10e4f006ed7371b3c29ef10e6cb58fa12a763d74bfa491bb74a5752fef10ae4a52da6fc31b6f4fb08ebb661d9e324e754d476ed
+  data.tar.gz: 208cb6d8ec5aa41ac1370df5eb3bd29406d91e38a2949c28782ab338411249295f66e4399974f7f62732a04b8eb876daaad91cc4fbf9359fea096d8a7090ca38

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.863]:001 >>> PWN.help
+pwn[v0.4.865]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.863]:001 >>> PWN.help
+pwn[v0.4.865]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_shodan_search

@@ -84,6 +84,10 @@ begin
     end
   end
   File.write(raw_query_results_file, JSON.pretty_generate(raw_results_arr))
+rescue JSON::GeneratorError
+  # Sometimes we get source sequence is illegal/malformed utf-8
+  # errors, so we still attempt to write without pretty_generate
+  File.write(raw_query_results_file, raw_results_arr.to_json)
 rescue SystemExit, Interrupt
   puts "\nGoodbye."
 end

data/lib/pwn/plugins/burp_suite.rb

@@ -1,7 +1,9 @@
 # frozen_string_literal: true
 
-require 'socket'
 require 'base64'
+require 'json'
+require 'socket'
+require 'uri'
 
 module PWN
   module Plugins
@@ -76,6 +78,45 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # uri_in_scope_bool = PWN::Plugins::BurpSuite.uri_in_scope(
+      #   target_config: 'required - path to burp suite pro target config JSON file',
+      #   uri: 'required - URI to determine if in scope'
+      # )
+
+      public_class_method def self.uri_in_scope(opts = {})
+        target_config = opts[:target_config]
+        raise 'ERROR: target_config does not exist' unless File.exist?(target_config)
+
+        uri = opts[:uri]
+        raise 'ERROR: uri parameter is required' if uri.nil?
+
+        target_config_json = JSON.parse(
+          File.read(target_config),
+          symbolize_names: true
+        )
+
+        out_of_scope = target_config_json[:target][:scope][:exclude]
+        out_of_scope_arr = out_of_scope.select do |os|
+          URI.parse(uri).scheme =~ /#{os[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{os[:host]}/ &&
+            URI.parse(uri).path =~ /#{os[:file]}/
+        end
+        return false unless out_of_scope_arr.empty?
+
+        in_scope = target_config_json[:target][:scope][:include]
+        in_scope_arr = in_scope.select do |is|
+          URI.parse(uri).scheme =~ /#{is[:protocol]}/ &&
+            URI.parse(uri).host =~ /#{is[:host]}/ &&
+            URI.parse(uri).path =~ /#{is[:file]}/
+        end
+        return false if in_scope_arr.empty?
+
+        true
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.enable_proxy(
       #   burp_obj: 'required - burp_obj returned by #start method'
@@ -311,6 +352,12 @@ module PWN
             burp_jar_path: 'required - path of burp suite pro jar file',
             headless: 'optional - run headless if set to true',
             browser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types',
+            target_config: 'optional - path to burp suite pro target config JSON file'
+          )
+
+          uri_in_scope_bool = #{self}.uri_in_scope(
+            target_config: 'required - path to burp suite pro target config JSON file',
+            uri: 'required - URI to determine if in scope'
           )
 
           #{self}.enable_proxy(

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.863'
+  VERSION = '0.4.865'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.863
+  version: 0.4.865
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-22 00:00:00.000000000 Z
+date: 2023-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport