pwn 0.4.887 → 0.4.889

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eba0652465ac3cb7e848a84e78412952875ab79a2c47dbcda39068a65e9f5c5b
-  data.tar.gz: 2c03fbba16c08c1820d483e744e5e1dd70812081aff632a9f71f0227f582d2a7
+  metadata.gz: 69484c812ad4eca31e6d5adbed96aabfb49561bd60488fbac1a3ea0bb78fd49f
+  data.tar.gz: ea49ea2042bffe392f99ac3a7af4be3823db59ad502c1f8a42d885ce3e4b743a
 SHA512:
-  metadata.gz: c9912c9c682b57c711c1a57e09e7ffad70c7018cf8e2689ecf7ff3a0f8fe3e5de9638588fd85c3475f58aaeb51a4892061e9cd4ceca6d1d3a40e5a2be8e88d31
-  data.tar.gz: c26189e41c966c8d3ca0e3988d9d901461b420a85e6d49123814b7e9331e8bcb6a7fe2dd2b3fa0d058f8b2b4f3948e3b5131a4ecb21854dc0a018e03f42d9b58
+  metadata.gz: e3732f05721c2f8cddf8ffc87f2fdd07106a6cec70bbb721a53e41ae7485efd13598f21f2e77eb70184dea52e8101676da6a406652eb58e6f6bde15c9d3e0f8a
+  data.tar.gz: 1f0a843073ada056e110c321747a684269b830823f20586719995f978f5895d8310802c06a2b9e2b68d86ef98e3fda481ba13d42389cc2c31875043da30dd550

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.887]:001 >>> PWN.help
+pwn[v0.4.889]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.887]:001 >>> PWN.help
+pwn[v0.4.889]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/sock.rb

@@ -26,8 +26,12 @@ module PWN
 
         # TODO: Add proxy support
 
-        tls = true if opts[:tls]
-        tls ||= false
+        if opts[:tls]
+          tls = true
+          tls_attempt = 1 unless tls_attempt > 1
+          tls_min_version = OpenSSL::SSL::TLS1_VERSION
+        end
+        tls = false unless opts[:tls]
 
         case protocol
         when :tcp
@@ -35,6 +39,8 @@ module PWN
             sock = TCPSocket.open(target, port)
             tls_context = OpenSSL::SSL::SSLContext.new
             tls_context.set_params(verify_mode: OpenSSL::SSL::VERIFY_NONE)
+            tls_context.verify_hostname = false
+            tls_context.min_proto_version = tls_min_version
             tls_sock = OpenSSL::SSL::SSLSocket.new(sock, tls_context)
             sock_obj = tls_sock.connect
           else
@@ -48,6 +54,15 @@ module PWN
         end
 
         sock_obj
+      rescue OpenSSL::SSL::SSLError
+        tls_attempt += 1
+
+        tls_min_version = OpenSSL::SSL::TLS1_1_VERSION if tls_attempt == 2
+        tls_min_version = OpenSSL::SSL::TLS1_2_VERSION if tls_attempt == 3
+        tls_min_version = OpenSSL::SSL::TLS1_3_VERSION if tls_attempt == 4
+
+        retry if tls_attempt < 5
+        raise e if tls_attempt > 4
       rescue StandardError => e
         sock_obj = disconnect(sock_obj: sock_obj) unless sock_obj.nil?
         raise e
@@ -188,8 +203,6 @@ module PWN
         )
         tls_sock_obj.sync_close = true
         tls_sock_obj.peer_cert
-      rescue OpenSSL::SSL::SSLError
-        false
       rescue StandardError => e
         raise e
       ensure

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.887'
+  VERSION = '0.4.889'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.887
+  version: 0.4.889
 platform: ruby
 authors:
 - 0day Inc.
@@ -1167,7 +1167,6 @@ executables:
 - pwn_diff_csv_files_w_column_exclude
 - pwn_domain_reversewhois
 - pwn_fuzz_net_app_proto
-- pwn_graphql_introspection_detector
 - pwn_ibm_appscan_enterprise
 - pwn_jenkins_create_job
 - pwn_jenkins_create_view
@@ -1190,6 +1189,7 @@ executables:
 - pwn_serial_msr206
 - pwn_serial_qualcomm_commands
 - pwn_serial_son_micro_sm132_rfid
+- pwn_shodan_graphql_introspection
 - pwn_shodan_search
 - pwn_simple_http_server
 - pwn_web_cache_deception
@@ -1234,7 +1234,6 @@ files:
 - bin/pwn_diff_csv_files_w_column_exclude
 - bin/pwn_domain_reversewhois
 - bin/pwn_fuzz_net_app_proto
-- bin/pwn_graphql_introspection_detector
 - bin/pwn_ibm_appscan_enterprise
 - bin/pwn_jenkins_create_job
 - bin/pwn_jenkins_create_view
@@ -1257,6 +1256,7 @@ files:
 - bin/pwn_serial_msr206
 - bin/pwn_serial_qualcomm_commands
 - bin/pwn_serial_son_micro_sm132_rfid
+- bin/pwn_shodan_graphql_introspection
 - bin/pwn_shodan_search
 - bin/pwn_simple_http_server
 - bin/pwn_web_cache_deception