pwn 0.5.13 → 0.5.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +8 -8
  3. data/README.md +3 -3
  4. data/bin/pwn_openvas_vulnscan +17 -11
  5. data/lib/pwn/plugins/dao_mongo.rb +1 -1
  6. data/lib/pwn/plugins/detect_os.rb +9 -0
  7. data/lib/pwn/version.rb +1 -1
  8. metadata +16 -30
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 077f484f2b9500cfa05ca631d5cf9d3b733e22bb098ab496040b6547eb250efc
4
- data.tar.gz: 4cb5019625d4760c5a88df2787d0c64e2f9c8cd7b7ba207538674bb814ccd0c6
3
+ metadata.gz: ca005bf83f64e7926d3e22c14ce0a0b742ef1853c5ea6da768a324ab0504ac3d
4
+ data.tar.gz: 29b3ee47db3700a71b3f06a53337d8b225e6c5c43bb8fb88eb824d5e212c1988
5
5
  SHA512:
6
- metadata.gz: a09a9d8f7eee168d9dbef8d90c52b8c7cfcc0bd3740c89e11d8d801cf81934e3e4dcc8d1a72c8d02aa565883580b44039e75a0fb0b23f1d32a2eaec5367170d3
7
- data.tar.gz: 22129979d248c5027eece2188d42b7f693183b31e7c0a9b0fa9935bf340edc425110034ed4be2d84d857b3d231ad6b56b9fcba9ba5f38dee03605dad9e18aede
6
+ metadata.gz: 532f192473d0b71ded741f93a1eae042d8ad0a3c7ab833b676011d7e22ea8da43763f4d1b8c3c30f946eec467b9ba2e2e435e13554ee67d86786e5fd8025b83a
7
+ data.tar.gz: 9dd7580d09ed7215c5fe35f0658250b3face53484d2a87dd90719d0e1b3bc1e1857992ff1a210761009a41c688c3b99af2c7ed4df77841395a6950bd6de48c58
data/Gemfile CHANGED
@@ -11,14 +11,14 @@ gemspec
11
11
  # In some circumstances custom flags are passed to gems in order
12
12
  # to build appropriately. Defer to ./reinstall_pwn_gemset.sh
13
13
  # to review these custom flags (e.g. pg, serialport, etc).
14
- gem 'activesupport', '7.1.3'
14
+ gem 'activesupport', '7.1.3.2'
15
15
  gem 'anemone', '0.7.2'
16
16
  gem 'authy', '3.0.1'
17
17
  gem 'aws-sdk', '3.2.0'
18
18
  # gem 'bettercap', '1.6.2'
19
19
  gem 'barby', '0.6.9'
20
20
  gem 'brakeman', '6.1.2'
21
- gem 'bson', '4.15.0'
21
+ gem 'bson', '5.0.0'
22
22
  gem 'bundler', '>=2.5.6'
23
23
  gem 'bundler-audit', '0.9.1'
24
24
  gem 'bunny', '2.22.0'
@@ -40,11 +40,11 @@ gem 'jenkins_api_client2', '1.9.0'
40
40
  gem 'js-beautify', '0.1.8'
41
41
  gem 'json', '2.7.1'
42
42
  gem 'jsonpath', '1.1.5'
43
- gem 'jwt', '2.7.1'
43
+ gem 'jwt', '2.8.0'
44
44
  gem 'libusb', '0.6.4'
45
45
  gem 'luhn', '1.0.2'
46
46
  gem 'mail', '2.8.1'
47
- gem 'mongo', '2.19.3'
47
+ # gem 'mongo', '2.19.3'
48
48
  gem 'msfrpc-client', '1.1.2'
49
49
  gem 'netaddr', '2.0.6'
50
50
  gem 'net-ldap', '0.19.0'
@@ -59,7 +59,7 @@ gem 'os', '1.1.4'
59
59
  gem 'packetfu', '2.0.0'
60
60
  gem 'packetgen', '3.3.1'
61
61
  gem 'pdf-reader', '2.12.0'
62
- gem 'pg', '1.5.4'
62
+ gem 'pg', '1.5.5'
63
63
  gem 'pry', '0.14.2'
64
64
  gem 'pry-doc', '1.5.0'
65
65
  gem 'rake', '13.1.0'
@@ -68,7 +68,7 @@ gem 'rbvmomi', '3.0.0'
68
68
  gem 'rdoc', '6.6.2'
69
69
  gem 'rest-client', '2.1.0'
70
70
  gem 'rex', '2.0.13'
71
- gem 'rmagick', '5.4.2'
71
+ gem 'rmagick', '5.4.4'
72
72
  gem 'rqrcode', '2.2.0'
73
73
  gem 'rspec', '3.13.0'
74
74
  gem 'rtesseract', '3.1.3'
@@ -79,8 +79,8 @@ gem 'ruby-audio', '1.6.1'
79
79
  gem 'ruby-nmap', '1.0.3'
80
80
  gem 'ruby-saml', '1.16.0'
81
81
  gem 'rvm', '1.11.3.9'
82
- gem 'savon', '2.14.0'
83
- gem 'selenium-devtools', '0.121.0'
82
+ gem 'savon', '2.15.0'
83
+ gem 'selenium-devtools', '0.122.0'
84
84
  gem 'serialport', '1.3.2'
85
85
  # gem 'sinatra', '4.0.0'
86
86
  gem 'slack-ruby-client', '2.3.0'
data/README.md CHANGED
@@ -37,7 +37,7 @@ $ cd /opt/pwn
37
37
  $ ./install.sh
38
38
  $ ./install.sh ruby-gem
39
39
  $ pwn
40
- pwn[v0.5.13]:001 >>> PWN.help
40
+ pwn[v0.5.15]:001 >>> PWN.help
41
41
  ```
42
42
 
43
43
  [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
52
52
  $ gem uninstall --all --executables pwn
53
53
  $ gem install --verbose pwn
54
54
  $ pwn
55
- pwn[v0.5.13]:001 >>> PWN.help
55
+ pwn[v0.5.15]:001 >>> PWN.help
56
56
  ```
57
57
 
58
58
  If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
62
62
  $ rvmsudo gem uninstall --all --executables pwn
63
63
  $ rvmsudo gem install --verbose pwn
64
64
  $ pwn
65
- pwn[v0.5.13]:001 >>> PWN.help
65
+ pwn[v0.5.15]:001 >>> PWN.help
66
66
  ```
67
67
 
68
68
  PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
data/bin/pwn_openvas_vulnscan CHANGED
@@ -3,6 +3,7 @@
3
3
 
4
4
  require 'pwn'
5
5
  require 'optparse'
6
+ require 'yaml'
6
7
 
7
8
  opts = {}
8
9
  OptionParser.new do |options|
@@ -10,6 +11,10 @@ OptionParser.new do |options|
10
11
  #{$PROGRAM_NAME} [opts]
11
12
  "
12
13
 
14
+ options.on('-cYPATH', '--yaml-config=YPATH', '<Required - YAML Config Containing Username & Password for Authentication>') do |c|
15
+ opts[:yaml_config] = c
16
+ end
17
+
13
18
  options.on('-tTASK_NAME', '--task-name=TASK_NAME', '<Required - Task Name to Start>') do |t|
14
19
  opts[:task_name] = t
15
20
  end
@@ -18,14 +23,6 @@ OptionParser.new do |options|
18
23
  opts[:report_dir] = d
19
24
  end
20
25
 
21
- options.on('-uUSERNAME', '--username=USERNAME', '<Required - Username to AuthN>') do |u|
22
- opts[:username] = u
23
- end
24
-
25
- options.on('-pPASSWORD', '--password=PASSWORD', '<Optional - Password to AuthN (Will Prompt if nil)>') do |p|
26
- opts[:password] = p
27
- end
28
-
29
26
  options.on('-fFILTER', '--report-filter=FILTER', '<Optional - GVM Results Filter (Default: "apply_overrides=0 levels=hml rows=1000 min_qod=70 first=1 sort-reverse=severity")>') do |p|
30
27
  opts[:password] = p
31
28
  end
@@ -43,11 +40,20 @@ raise "#{report_dir} Does Not Exist." unless Dir.exist?(
43
40
  report_dir
44
41
  )
45
42
 
46
- username = opts[:username]
47
- password = if opts[:password].nil?
43
+ yaml_config = opts[:yaml_config]
44
+
45
+ raise "YAML Config Not Found: #{yaml_config}" unless File.exist?(yaml_config)
46
+
47
+ yaml = YAML.load_file(
48
+ yaml_config,
49
+ symbolize_names: true
50
+ )
51
+
52
+ username = yaml[:username]
53
+ password = if yaml[:password].nil?
48
54
  PWN::Plugins::AuthenticationHelper.mask_password
49
55
  else
50
- opts[:password].to_s.scrub
56
+ yaml[:password].to_s.scrub
51
57
  end
52
58
 
53
59
  report_filter = opts[:report_filter]
data/lib/pwn/plugins/dao_mongo.rb CHANGED
@@ -1,6 +1,6 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- require 'mongo'
3
+ # require 'mongo'
4
4
 
5
5
  module PWN
6
6
  module Plugins
data/lib/pwn/plugins/detect_os.rb CHANGED
@@ -23,6 +23,15 @@ module PWN
23
23
  raise e
24
24
  end
25
25
 
26
+ # Supported Method Parameters::
27
+ # PWN::Plugins::DetectOS.arch
28
+
29
+ public_class_method def self.arch
30
+ RUBY_PLATFORM.split('-').first
31
+ rescue StandardError => e
32
+ raise e
33
+ end
34
+
26
35
  # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
27
36
 
28
37
  public_class_method def self.authors
data/lib/pwn/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module PWN
4
- VERSION = '0.5.13'
4
+ VERSION = '0.5.15'
5
5
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pwn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.13
4
+ version: 0.5.15
5
5
  platform: ruby
6
6
  authors:
7
7
  - 0day Inc.
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-02-12 00:00:00.000000000 Z
11
+ date: 2024-02-24 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 7.1.3
19
+ version: 7.1.3.2
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 7.1.3
26
+ version: 7.1.3.2
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: anemone
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
100
100
  requirements:
101
101
  - - '='
102
102
  - !ruby/object:Gem::Version
103
- version: 4.15.0
103
+ version: 5.0.0
104
104
  type: :runtime
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - '='
109
109
  - !ruby/object:Gem::Version
110
- version: 4.15.0
110
+ version: 5.0.0
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: bundler
113
113
  requirement: !ruby/object:Gem::Requirement
@@ -408,14 +408,14 @@ dependencies:
408
408
  requirements:
409
409
  - - '='
410
410
  - !ruby/object:Gem::Version
411
- version: 2.7.1
411
+ version: 2.8.0
412
412
  type: :runtime
413
413
  prerelease: false
414
414
  version_requirements: !ruby/object:Gem::Requirement
415
415
  requirements:
416
416
  - - '='
417
417
  - !ruby/object:Gem::Version
418
- version: 2.7.1
418
+ version: 2.8.0
419
419
  - !ruby/object:Gem::Dependency
420
420
  name: libusb
421
421
  requirement: !ruby/object:Gem::Requirement
@@ -458,20 +458,6 @@ dependencies:
458
458
  - - '='
459
459
  - !ruby/object:Gem::Version
460
460
  version: 2.8.1
461
- - !ruby/object:Gem::Dependency
462
- name: mongo
463
- requirement: !ruby/object:Gem::Requirement
464
- requirements:
465
- - - '='
466
- - !ruby/object:Gem::Version
467
- version: 2.19.3
468
- type: :runtime
469
- prerelease: false
470
- version_requirements: !ruby/object:Gem::Requirement
471
- requirements:
472
- - - '='
473
- - !ruby/object:Gem::Version
474
- version: 2.19.3
475
461
  - !ruby/object:Gem::Dependency
476
462
  name: msfrpc-client
477
463
  requirement: !ruby/object:Gem::Requirement
@@ -674,14 +660,14 @@ dependencies:
674
660
  requirements:
675
661
  - - '='
676
662
  - !ruby/object:Gem::Version
677
- version: 1.5.4
663
+ version: 1.5.5
678
664
  type: :runtime
679
665
  prerelease: false
680
666
  version_requirements: !ruby/object:Gem::Requirement
681
667
  requirements:
682
668
  - - '='
683
669
  - !ruby/object:Gem::Version
684
- version: 1.5.4
670
+ version: 1.5.5
685
671
  - !ruby/object:Gem::Dependency
686
672
  name: pry
687
673
  requirement: !ruby/object:Gem::Requirement
@@ -800,14 +786,14 @@ dependencies:
800
786
  requirements:
801
787
  - - '='
802
788
  - !ruby/object:Gem::Version
803
- version: 5.4.2
789
+ version: 5.4.4
804
790
  type: :runtime
805
791
  prerelease: false
806
792
  version_requirements: !ruby/object:Gem::Requirement
807
793
  requirements:
808
794
  - - '='
809
795
  - !ruby/object:Gem::Version
810
- version: 5.4.2
796
+ version: 5.4.4
811
797
  - !ruby/object:Gem::Dependency
812
798
  name: rqrcode
813
799
  requirement: !ruby/object:Gem::Requirement
@@ -954,28 +940,28 @@ dependencies:
954
940
  requirements:
955
941
  - - '='
956
942
  - !ruby/object:Gem::Version
957
- version: 2.14.0
943
+ version: 2.15.0
958
944
  type: :runtime
959
945
  prerelease: false
960
946
  version_requirements: !ruby/object:Gem::Requirement
961
947
  requirements:
962
948
  - - '='
963
949
  - !ruby/object:Gem::Version
964
- version: 2.14.0
950
+ version: 2.15.0
965
951
  - !ruby/object:Gem::Dependency
966
952
  name: selenium-devtools
967
953
  requirement: !ruby/object:Gem::Requirement
968
954
  requirements:
969
955
  - - '='
970
956
  - !ruby/object:Gem::Version
971
- version: 0.121.0
957
+ version: 0.122.0
972
958
  type: :runtime
973
959
  prerelease: false
974
960
  version_requirements: !ruby/object:Gem::Requirement
975
961
  requirements:
976
962
  - - '='
977
963
  - !ruby/object:Gem::Version
978
- version: 0.121.0
964
+ version: 0.122.0
979
965
  - !ruby/object:Gem::Dependency
980
966
  name: serialport
981
967
  requirement: !ruby/object:Gem::Requirement