pwn 0.4.893 → 0.4.894
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +2 -2
- data/lib/pwn/plugins/sock.rb +18 -13
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f02ef3ca0c6df8b111e8a7d8f33f6a7c023bbc7a934877a6ce4f08d3b3cfa520
|
4
|
+
data.tar.gz: 2b36ab4dd8e47d49cb5379c05a6575d6c478dcdd996b1d8601285b562935a8d6
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 9e9ea7457b5eb843ce8bfb8b57f8242e9b46fb0339ef79d68fb0e6ac9c78b6772af953375c1b02c9b4a5faa216475627cf01d1c713b93632a98dcc0e6db5ebd0
|
7
|
+
data.tar.gz: 0e0ea56c40f621c6a7b886d9419c9cca250af691cb34c872d0938a4fb5e1d2886cbb5fe2db64af85ddefd239fcd803e9b5d62b08c5c9dc399953a1e7bfd42266
|
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
37
37
|
$ rvm list gemsets
|
38
38
|
$ gem install --verbose pwn
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.894]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.894]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
|
data/lib/pwn/plugins/sock.rb
CHANGED
@@ -30,6 +30,7 @@ module PWN
|
|
30
30
|
tls ||= false
|
31
31
|
|
32
32
|
tls_min_version = OpenSSL::SSL::TLS1_VERSION if tls_min_version.nil?
|
33
|
+
tls_version = :TLSv1 if tls_version.nil?
|
33
34
|
|
34
35
|
case protocol
|
35
36
|
when :tcp
|
@@ -38,6 +39,7 @@ module PWN
|
|
38
39
|
tls_context = OpenSSL::SSL::SSLContext.new
|
39
40
|
tls_context.set_params(verify_mode: OpenSSL::SSL::VERIFY_NONE)
|
40
41
|
tls_context.verify_hostname = false
|
42
|
+
tls_context.ssl_version = tls_version
|
41
43
|
tls_context.min_version = tls_min_version
|
42
44
|
tls_sock = OpenSSL::SSL::SSLSocket.new(sock, tls_context)
|
43
45
|
sock_obj = tls_sock.connect
|
@@ -53,19 +55,22 @@ module PWN
|
|
53
55
|
|
54
56
|
sock_obj
|
55
57
|
rescue OpenSSL::SSL::SSLError => e
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
|
68
|
-
|
58
|
+
case tls_min_version
|
59
|
+
when OpenSSL::SSL::TLS1_VERSION
|
60
|
+
puts 'Attempting OpenSSL::SSL::TLS1_1_VERSION...'
|
61
|
+
tls_version = :TLSv1_1
|
62
|
+
tls_min_version = OpenSSL::SSL::TLS1_1_VERSION
|
63
|
+
when OpenSSL::SSL::TLS1_1_VERSION
|
64
|
+
puts 'Attempting OpenSSL::SSL::TLS1_2_VERSION...'
|
65
|
+
tls_version = :TLSv1_2
|
66
|
+
tls_min_version = OpenSSL::SSL::TLS1_2_VERSION
|
67
|
+
when OpenSSL::SSL::TLS1_2_VERSION
|
68
|
+
puts 'Attempting OpenSSL::SSL::TLS1_3_VERSION...'
|
69
|
+
tls_version = :TLSv1_3
|
70
|
+
tls_min_version = OpenSSL::SSL::TLS1_3_VERSION
|
71
|
+
else
|
72
|
+
:abort
|
73
|
+
end
|
69
74
|
|
70
75
|
retry unless tls_min_version == :abort
|
71
76
|
raise "\n#{e}" if tls_min_version == :abort
|
data/lib/pwn/version.rb
CHANGED