pwn 0.4.957 → 0.4.959
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +6 -6
- data/README.md +3 -3
- data/bin/pwn_defectdojo_importscan +2 -2
- data/bin/pwn_defectdojo_reimportscan +2 -2
- data/lib/pwn/plugins/credit_card.rb +3 -2
- data/lib/pwn/plugins/defect_dojo.rb +4 -0
- data/lib/pwn/version.rb +1 -1
- metadata +13 -27
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6a6db9fa965b43e1da54d41ffd936d510bd9cda4878a2a5ae50b7228dc18fee1
|
4
|
+
data.tar.gz: ed6c13772d8a3d85984239bb80f6ee45525c13c65054a057c9cabb2aa10bc5e7
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 743ef3e9403b79c0d12054c6f77cd51f37a022b7654a4116a8c552ce54a8701a388d02127a58cd99d9806839840c3b1a3332a022d77901e9de9189a7d1674cba
|
7
|
+
data.tar.gz: cb589e54c538ffdc69edc33287d49846d6c1b6d0646873627754b5d3ab7bb287473682192e6a41875f224fc75dafd9f8e9158176d9a2ee81e59e5321d877c1a3
|
data/Gemfile
CHANGED
@@ -11,7 +11,7 @@ gemspec
|
|
11
11
|
# In some circumstances custom flags are passed to gems in order
|
12
12
|
# to build appropriately. Defer to ./reinstall_pwn_gemset.sh
|
13
13
|
# to review these custom flags (e.g. pg, serialport, etc).
|
14
|
-
gem 'activesupport', '7.1.
|
14
|
+
gem 'activesupport', '7.1.3'
|
15
15
|
gem 'anemone', '0.7.2'
|
16
16
|
gem 'authy', '3.0.1'
|
17
17
|
gem 'aws-sdk', '3.2.0'
|
@@ -19,14 +19,14 @@ gem 'aws-sdk', '3.2.0'
|
|
19
19
|
gem 'barby', '0.6.9'
|
20
20
|
gem 'brakeman', '6.1.1'
|
21
21
|
gem 'bson', '4.15.0'
|
22
|
-
gem 'bundler', '>=2.5.
|
22
|
+
gem 'bundler', '>=2.5.5'
|
23
23
|
gem 'bundler-audit', '0.9.1'
|
24
24
|
gem 'bunny', '2.22.0'
|
25
25
|
gem 'colorize', '1.1.0'
|
26
26
|
gem 'credit_card_validations', '6.1.0'
|
27
27
|
gem 'eventmachine', '1.2.7'
|
28
28
|
gem 'executable-hooks', '1.7.1'
|
29
|
-
gem 'faker', '3.2.
|
29
|
+
gem 'faker', '3.2.3'
|
30
30
|
gem 'faye-websocket', '0.11.3'
|
31
31
|
gem 'ffi', '1.16.3'
|
32
32
|
gem 'fftw3', '0.3'
|
@@ -72,7 +72,7 @@ gem 'rmagick', '5.3.0'
|
|
72
72
|
gem 'rqrcode', '2.2.0'
|
73
73
|
gem 'rspec', '3.12.0'
|
74
74
|
gem 'rtesseract', '3.1.3'
|
75
|
-
gem 'rubocop', '1.
|
75
|
+
gem 'rubocop', '1.60.1'
|
76
76
|
gem 'rubocop-rake', '0.6.0'
|
77
77
|
gem 'rubocop-rspec', '2.26.1'
|
78
78
|
gem 'ruby-audio', '1.6.1'
|
@@ -82,10 +82,10 @@ gem 'rvm', '1.11.3.9'
|
|
82
82
|
gem 'savon', '2.14.0'
|
83
83
|
gem 'selenium-devtools', '0.120.0'
|
84
84
|
gem 'serialport', '1.3.2'
|
85
|
-
gem 'sinatra', '
|
85
|
+
# gem 'sinatra', '4.0.0'
|
86
86
|
gem 'slack-ruby-client', '2.2.0'
|
87
87
|
gem 'socksify', '1.7.1'
|
88
|
-
gem 'spreadsheet', '1.3.
|
88
|
+
gem 'spreadsheet', '1.3.1'
|
89
89
|
gem 'sqlite3', '1.7.0'
|
90
90
|
gem 'thin', '1.8.2'
|
91
91
|
gem 'tty-prompt', '0.23.1'
|
data/README.md
CHANGED
@@ -37,7 +37,7 @@ $ cd /opt/pwn
|
|
37
37
|
$ ./install.sh
|
38
38
|
$ ./install.sh ruby-gem
|
39
39
|
$ pwn
|
40
|
-
pwn[v0.4.
|
40
|
+
pwn[v0.4.959]:001 >>> PWN.help
|
41
41
|
```
|
42
42
|
|
43
43
|
[![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
53
53
|
$ gem install --verbose pwn
|
54
54
|
$ pwn
|
55
|
-
pwn[v0.4.
|
55
|
+
pwn[v0.4.959]:001 >>> PWN.help
|
56
56
|
```
|
57
57
|
|
58
58
|
If you're using a multi-user install of RVM do:
|
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
|
|
62
62
|
$ rvmsudo gem uninstall --all --executables pwn
|
63
63
|
$ rvmsudo gem install --verbose pwn
|
64
64
|
$ pwn
|
65
|
-
pwn[v0.4.
|
65
|
+
pwn[v0.4.959]:001 >>> PWN.help
|
66
66
|
```
|
67
67
|
|
68
68
|
PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
|
@@ -62,11 +62,11 @@ OptionParser.new do |options|
|
|
62
62
|
opts[:create_finding_groups] = g
|
63
63
|
end
|
64
64
|
|
65
|
-
options.on('-c', '--close-old-findings-product-scope', '<Optional -
|
65
|
+
options.on('-c', '--close-old-findings-product-scope', '<Optional - Select if close_old_findings applies to all findings of the same type in the product (defaults to false)') do |c|
|
66
66
|
opts[:close_old_findings_product_scope] = c
|
67
67
|
end
|
68
68
|
|
69
|
-
options.on('-C', '--close-old-findings', '<Optional -
|
69
|
+
options.on('-C', '--close-old-findings', '<Optional - old findings no longer present in the report get closed as mitigated when importing (defaults to false)') do |c|
|
70
70
|
opts[:close_old_findings] = c
|
71
71
|
end
|
72
72
|
|
@@ -62,11 +62,11 @@ OptionParser.new do |options|
|
|
62
62
|
opts[:create_finding_groups] = g
|
63
63
|
end
|
64
64
|
|
65
|
-
options.on('-c', '--close-old-findings-product-scope', '<Optional -
|
65
|
+
options.on('-c', '--close-old-findings-product-scope', '<Optional - Select if close_old_findings applies to all findings of the same type in the product (defaults to false)') do |c|
|
66
66
|
opts[:close_old_findings_product_scope] = c
|
67
67
|
end
|
68
68
|
|
69
|
-
options.on('-C', '--close-old-findings', '<Optional -
|
69
|
+
options.on('-C', '--close-old-findings', '<Optional - old findings no longer present in the report get closed as mitigated when importing (defaults to false)') do |c|
|
70
70
|
opts[:close_old_findings] = c
|
71
71
|
end
|
72
72
|
|
@@ -10,12 +10,13 @@ module PWN
|
|
10
10
|
# Supported Method Parameters::
|
11
11
|
# PWN::Plugins::CreditCard.generate(
|
12
12
|
# type: 'required - card to generate :amex|:unionpay|:dankort|:diners|:elo|:discover|:hipercard|:jcb|:maestro|:mastercard|:mir|:rupay|:solo|:switch|:visa',
|
13
|
-
# count: '
|
13
|
+
# count: 'optional - number of numbers to generate (defaults to 1)'
|
14
14
|
# )
|
15
15
|
|
16
16
|
public_class_method def self.generate(opts = {})
|
17
17
|
type = opts[:type].to_s.scrub.strip.chomp.to_sym
|
18
18
|
count = opts[:count].to_i
|
19
|
+
count = 1 if count.zero?
|
19
20
|
|
20
21
|
cc_result_arr = []
|
21
22
|
(1..count).each do
|
@@ -53,7 +54,7 @@ module PWN
|
|
53
54
|
puts "USAGE:
|
54
55
|
#{self}.generate(
|
55
56
|
type: 'required - card to generate :amex|:unionpay|:dankort|:diners|:elo|:discover|:hipercard|:jcb|:maestro|:mastercard|:mir|:rupay|:solo|:switch|:visa',
|
56
|
-
count: '
|
57
|
+
count: 'optional - number of numbers to generate (defaults to 1)'
|
57
58
|
)
|
58
59
|
|
59
60
|
#{self}.type(
|
@@ -473,6 +473,8 @@ module PWN
|
|
473
473
|
|
474
474
|
opts[:close_old_findings_product_scope] ? (http_body[:close_old_findings_product_scope] = true) : (http_body[:close_old_findings_product_scope] = false)
|
475
475
|
|
476
|
+
opts[:close_old_findings] = true if opts[:close_old_findings_product_scope]
|
477
|
+
|
476
478
|
opts[:close_old_findings] ? (http_body[:close_old_findings] = true) : (http_body[:close_old_findings] = false)
|
477
479
|
|
478
480
|
opts[:push_to_jira] ? (http_body[:push_to_jira] = true) : (http_body[:push_to_jira] = false)
|
@@ -581,6 +583,8 @@ module PWN
|
|
581
583
|
|
582
584
|
opts[:close_old_findings_product_scope] ? (http_body[:close_old_findings_product_scope] = true) : (http_body[:close_old_findings_product_scope] = false)
|
583
585
|
|
586
|
+
opts[:close_old_findings] = true if opts[:close_old_findings_product_scope]
|
587
|
+
|
584
588
|
opts[:close_old_findings] ? (http_body[:close_old_findings] = true) : (http_body[:close_old_findings] = false)
|
585
589
|
|
586
590
|
opts[:push_to_jira] ? (http_body[:push_to_jira] = true) : (http_body[:push_to_jira] = false)
|
data/lib/pwn/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: pwn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.4.
|
4
|
+
version: 0.4.959
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- 0day Inc.
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-01-
|
11
|
+
date: 2024-01-19 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 7.1.
|
19
|
+
version: 7.1.3
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 7.1.
|
26
|
+
version: 7.1.3
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: anemone
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -114,14 +114,14 @@ dependencies:
|
|
114
114
|
requirements:
|
115
115
|
- - ">="
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: 2.5.
|
117
|
+
version: 2.5.5
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
122
|
- - ">="
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: 2.5.
|
124
|
+
version: 2.5.5
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: bundler-audit
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|
@@ -212,14 +212,14 @@ dependencies:
|
|
212
212
|
requirements:
|
213
213
|
- - '='
|
214
214
|
- !ruby/object:Gem::Version
|
215
|
-
version: 3.2.
|
215
|
+
version: 3.2.3
|
216
216
|
type: :runtime
|
217
217
|
prerelease: false
|
218
218
|
version_requirements: !ruby/object:Gem::Requirement
|
219
219
|
requirements:
|
220
220
|
- - '='
|
221
221
|
- !ruby/object:Gem::Version
|
222
|
-
version: 3.2.
|
222
|
+
version: 3.2.3
|
223
223
|
- !ruby/object:Gem::Dependency
|
224
224
|
name: faye-websocket
|
225
225
|
requirement: !ruby/object:Gem::Requirement
|
@@ -856,14 +856,14 @@ dependencies:
|
|
856
856
|
requirements:
|
857
857
|
- - '='
|
858
858
|
- !ruby/object:Gem::Version
|
859
|
-
version: 1.
|
859
|
+
version: 1.60.1
|
860
860
|
type: :runtime
|
861
861
|
prerelease: false
|
862
862
|
version_requirements: !ruby/object:Gem::Requirement
|
863
863
|
requirements:
|
864
864
|
- - '='
|
865
865
|
- !ruby/object:Gem::Version
|
866
|
-
version: 1.
|
866
|
+
version: 1.60.1
|
867
867
|
- !ruby/object:Gem::Dependency
|
868
868
|
name: rubocop-rake
|
869
869
|
requirement: !ruby/object:Gem::Requirement
|
@@ -990,20 +990,6 @@ dependencies:
|
|
990
990
|
- - '='
|
991
991
|
- !ruby/object:Gem::Version
|
992
992
|
version: 1.3.2
|
993
|
-
- !ruby/object:Gem::Dependency
|
994
|
-
name: sinatra
|
995
|
-
requirement: !ruby/object:Gem::Requirement
|
996
|
-
requirements:
|
997
|
-
- - '='
|
998
|
-
- !ruby/object:Gem::Version
|
999
|
-
version: 3.2.0
|
1000
|
-
type: :runtime
|
1001
|
-
prerelease: false
|
1002
|
-
version_requirements: !ruby/object:Gem::Requirement
|
1003
|
-
requirements:
|
1004
|
-
- - '='
|
1005
|
-
- !ruby/object:Gem::Version
|
1006
|
-
version: 3.2.0
|
1007
993
|
- !ruby/object:Gem::Dependency
|
1008
994
|
name: slack-ruby-client
|
1009
995
|
requirement: !ruby/object:Gem::Requirement
|
@@ -1038,14 +1024,14 @@ dependencies:
|
|
1038
1024
|
requirements:
|
1039
1025
|
- - '='
|
1040
1026
|
- !ruby/object:Gem::Version
|
1041
|
-
version: 1.3.
|
1027
|
+
version: 1.3.1
|
1042
1028
|
type: :runtime
|
1043
1029
|
prerelease: false
|
1044
1030
|
version_requirements: !ruby/object:Gem::Requirement
|
1045
1031
|
requirements:
|
1046
1032
|
- - '='
|
1047
1033
|
- !ruby/object:Gem::Version
|
1048
|
-
version: 1.3.
|
1034
|
+
version: 1.3.1
|
1049
1035
|
- !ruby/object:Gem::Dependency
|
1050
1036
|
name: sqlite3
|
1051
1037
|
requirement: !ruby/object:Gem::Requirement
|
@@ -2228,7 +2214,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
2228
2214
|
- !ruby/object:Gem::Version
|
2229
2215
|
version: '0'
|
2230
2216
|
requirements: []
|
2231
|
-
rubygems_version: 3.5.
|
2217
|
+
rubygems_version: 3.5.5
|
2232
2218
|
signing_key:
|
2233
2219
|
specification_version: 4
|
2234
2220
|
summary: Automated Security Testing for CI/CD Pipelines & Beyond
|