pwn 0.4.865 → 0.4.867

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: da139fa7c3d5b1e27909f0b99942e9a524118f9ebe825d2716c8703b576d351a
-  data.tar.gz: '0518c9a00bc10bfdea7af3366f40a0683959405d145ab253e1102c0a475f08a5'
+  metadata.gz: 145befe33721bfed27906af44b0adecb461cc720998bb2b0e67cec388cd09337
+  data.tar.gz: d2f13d2a283176bc2f27bc7321265e60b17ee9b0e260a0e5e98409c65cefeac1
 SHA512:
-  metadata.gz: b081eaf40b453ae96682fc93d10e4f006ed7371b3c29ef10e6cb58fa12a763d74bfa491bb74a5752fef10ae4a52da6fc31b6f4fb08ebb661d9e324e754d476ed
-  data.tar.gz: 208cb6d8ec5aa41ac1370df5eb3bd29406d91e38a2949c28782ab338411249295f66e4399974f7f62732a04b8eb876daaad91cc4fbf9359fea096d8a7090ca38
+  metadata.gz: 3a300155409cc978fc05c743d8a5e91261e93d712623c36adb0236d5c7ff718c0279d63e63654b4063ebd04ee4828792b052b5e25f503963142bdb479c2fccc6
+  data.tar.gz: ddfd5e53d6879c2747e5e41b39903ec77cdf67a6d391e79ed6b7e4a59e2d42b2a6d5c28386d5a7395ee84de9cf9ee8f696d72964294d8011fd3bdb9ec99fc349

data/.rubocop_todo.yml

@@ -92,12 +92,6 @@ Style/IfUnlessModifier:
     - 'bin/pwn'
     - 'lib/pwn/plugins/baresip.rb'
 
-# Offense count: 1
-# This cop supports safe autocorrection (--autocorrect).
-Style/RedundantBegin:
-  Exclude:
-    - 'lib/pwn/www/hacker_one.rb'
-
 # Offense count: 95
 # This cop supports safe autocorrection (--autocorrect).
 Style/RedundantCondition:

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.865]:001 >>> PWN.help
+pwn[v0.4.867]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.865]:001 >>> PWN.help
+pwn[v0.4.867]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_shodan_search

@@ -84,10 +84,6 @@ begin
     end
   end
   File.write(raw_query_results_file, JSON.pretty_generate(raw_results_arr))
-rescue JSON::GeneratorError
-  # Sometimes we get source sequence is illegal/malformed utf-8
-  # errors, so we still attempt to write without pretty_generate
-  File.write(raw_query_results_file, raw_results_arr.to_json)
 rescue SystemExit, Interrupt
   puts "\nGoodbye."
 end

data/lib/pwn/plugins/burp_suite.rb

@@ -100,7 +100,7 @@ module PWN
         out_of_scope_arr = out_of_scope.select do |os|
           URI.parse(uri).scheme =~ /#{os[:protocol]}/ &&
             URI.parse(uri).host =~ /#{os[:host]}/ &&
-            URI.parse(uri).path =~ /#{os[:file]}/
+            (URI.parse(uri).path =~ /#{os[:file]}/ || URI.parse(uri).path == '')
         end
         return false unless out_of_scope_arr.empty?
 
@@ -108,7 +108,7 @@ module PWN
         in_scope_arr = in_scope.select do |is|
           URI.parse(uri).scheme =~ /#{is[:protocol]}/ &&
             URI.parse(uri).host =~ /#{is[:host]}/ &&
-            URI.parse(uri).path =~ /#{is[:file]}/
+            (URI.parse(uri).path =~ /#{is[:file]}/ || URI.parse(uri).path == '')
         end
         return false if in_scope_arr.empty?
 

data/lib/pwn/plugins/shodan.rb

@@ -104,7 +104,7 @@ module PWN
         else
           raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
         end
-        response
+        JSON.parse(response.scrub, symbolize_names: true)
       rescue RestClient::TooManyRequests
         print 'Too many requests.  Sleeping 10s...'
         sleep 10
@@ -136,7 +136,7 @@ module PWN
             rest_call: "shodan/host/#{target_ip}",
             params: params
           )
-          services_by_ips.push(JSON.parse(response, symbolize_names: true))
+          services_by_ips.push(response)
         rescue StandardError => e
           services_by_ips.push(error: e.message)
           next
@@ -172,12 +172,11 @@ module PWN
           }
         end
 
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/host/count',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -207,12 +206,11 @@ module PWN
           }
         end
 
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/host/search',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -232,12 +230,11 @@ module PWN
           query: query
         }
 
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/host/search/tokens',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -251,12 +248,11 @@ module PWN
         api_key = opts[:api_key].to_s.scrub
 
         params = { key: api_key }
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/ports',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -270,12 +266,11 @@ module PWN
         api_key = opts[:api_key].to_s.scrub
 
         params = { key: api_key }
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/protocols',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -292,14 +287,13 @@ module PWN
 
         params = { key: api_key }
         http_body = "ips=#{target_ips}"
-        response = shodan_rest_call(
+        shodan_rest_call(
           http_method: :post,
           api_key: api_key,
           rest_call: 'shodan/scan',
           params: params,
           http_body: http_body
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -318,14 +312,13 @@ module PWN
 
         params = { key: api_key }
         http_body = "port=#{port}&protocol=#{protocol}"
-        response = shodan_rest_call(
+        shodan_rest_call(
           http_method: :post,
           api_key: api_key,
           rest_call: 'shodan/scan/internet',
           params: params,
           http_body: http_body
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -344,12 +337,11 @@ module PWN
           key: api_key
         }
 
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: "shodan/scan/status/#{scan_id}",
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -363,12 +355,11 @@ module PWN
         api_key = opts[:api_key].to_s.scrub
 
         params = { key: api_key }
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/services',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -393,12 +384,12 @@ module PWN
           sort: sort.to_s,
           order: order.to_s
         }
-        response = shodan_rest_call(
+
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/query',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -422,12 +413,11 @@ module PWN
           params = { key: api_key }
         end
 
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'shodan/query/tags',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -441,12 +431,11 @@ module PWN
         api_key = opts[:api_key].to_s.scrub
 
         params = { key: api_key }
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'account/profile',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end
@@ -478,12 +467,11 @@ module PWN
         api_key = opts[:api_key].to_s.scrub
 
         params = { key: api_key }
-        response = shodan_rest_call(
+        shodan_rest_call(
           api_key: api_key,
           rest_call: 'api-info',
           params: params
         )
-        JSON.parse(response, symbolize_names: true)
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.865'
+  VERSION = '0.4.867'
 end

data/lib/pwn/www/hacker_one.rb

@@ -119,26 +119,24 @@ module PWN
           File.write(path, JSON.pretty_generate(json_resp))
         else
           programs_arr.each do |program|
-            begin
-              name = program[:name]
-              burp_download_link = program[:burp_target_config]
-              path = "./burp_target_config_file-#{name}.json" if opts[:root_dir].nil?
-              path = "#{root_dir}/burp_target_config_file-#{name}.json" unless opts[:root_dir].nil?
-
-              resp = rest_client.execute(
-                method: :get,
-                headers: { user_agent: user_agent },
-                url: burp_download_link
-              )
-              json_resp = JSON.parse(resp.body)
-
-              puts "Saving to: #{path}"
-              File.write(path, JSON.pretty_generate(json_resp))
-            rescue JSON::ParserError,
-                   RestClient::NotFound
-              puts '-'
-              next
-            end
+            name = program[:name]
+            burp_download_link = program[:burp_target_config]
+            path = "./burp_target_config_file-#{name}.json" if opts[:root_dir].nil?
+            path = "#{root_dir}/burp_target_config_file-#{name}.json" unless opts[:root_dir].nil?
+
+            resp = rest_client.execute(
+              method: :get,
+              headers: { user_agent: user_agent },
+              url: burp_download_link
+            )
+            json_resp = JSON.parse(resp.body)
+
+            puts "Saving to: #{path}"
+            File.write(path, JSON.pretty_generate(json_resp))
+          rescue JSON::ParserError,
+                 RestClient::NotFound
+            puts '-'
+            next
           end
         end
         puts 'complete.'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.865
+  version: 0.4.867
 platform: ruby
 authors:
 - 0day Inc.