pwn 0.5.171 → 0.5.173

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a0ba45977e6b882046ff2e106aac51f68b2a3b02ca5a7b1f456ca4dba60c700f
-  data.tar.gz: d2403e95658aa3a25042090535b37078a8d73e9d856c58328b57607627009c53
+  metadata.gz: 4896cb625aad3bcb7fcc5ecc506851860530486d84a9fa956e5cc526f15c2437
+  data.tar.gz: 131b84769166bc8cceaabc66263a8ed70370eb9a996c94c4f326c3027ca62bc1
 SHA512:
-  metadata.gz: 1f431eeb61b4fa7e462b800c8a540ecf7aeec0b1174773953d0125477d7fe402da5f4a4ec0166f338fe0678ed04e6e0d12351522c5b8fe31fb4a7ecbf49018cd
-  data.tar.gz: ce1bff0fae0ad0aa18d2a3f4a5df1d085c248301a5a1fb661818197f175dc42575f87fef6c4dead341c94039002d0f4ec71fac9021c4198c81bc610b4c828e3a
+  metadata.gz: '06832bdbed010c3629c262193b6e102db2da103d3ca6edeb3923039a4bf5f111cab556abc038c45d4aa522024ebbe5b312352ba94ecf0db703738280dd43b3cc'
+  data.tar.gz: 53cb1a3b9069c3dfa9025d45fb7fdf5eccabcb7517e5aa27c23cd359403d762d5737310b24fca7a238f3e542bc13d177469e49f5718d8a8cf5a240bce75abd7a

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2024-06-17 17:41:04 UTC using RuboCop version 1.64.1.
+# on 2024-06-20 17:51:21 UTC using RuboCop version 1.64.1.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -41,7 +41,7 @@ Lint/NestedMethodDefinition:
   Exclude:
     - 'lib/pwn/plugins/repl.rb'
 
-# Offense count: 307
+# Offense count: 311
 # This cop supports unsafe autocorrection (--autocorrect-all).
 # Configuration parameters: AutoCorrect.
 Lint/UselessAssignment:
@@ -81,7 +81,7 @@ Metrics/MethodLength:
   Exclude:
     - 'lib/pwn/banner/code_cave.rb'
 
-# Offense count: 9
+# Offense count: 10
 # Configuration parameters: CountComments, Max, CountAsOne.
 Metrics/ModuleLength:
   Exclude:
@@ -94,6 +94,7 @@ Metrics/ModuleLength:
     - 'lib/pwn/plugins/open_ai.rb'
     - 'lib/pwn/plugins/packet.rb'
     - 'lib/pwn/plugins/repl.rb'
+    - 'lib/pwn/plugins/transparent_browser.rb'
 
 # Offense count: 1
 # This cop supports safe autocorrection (--autocorrect).

data/Gemfile

@@ -20,7 +20,7 @@ gem 'barby', '0.6.9'
 gem 'base32', '0.3.4'
 gem 'brakeman', '6.1.2'
 gem 'bson', '5.0.0'
-gem 'bundler', '>=2.5.13'
+gem 'bundler', '>=2.5.14'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.22.0'
 gem 'colorize', '1.1.0'
@@ -43,7 +43,7 @@ gem 'jenkins_api_client2', '1.9.0'
 gem 'js-beautify', '0.1.8'
 gem 'json', '2.7.2'
 gem 'jsonpath', '1.1.5'
-gem 'jwt', '2.8.1'
+gem 'jwt', '2.8.2'
 gem 'libusb', '0.7.1'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.8.1'
@@ -85,7 +85,7 @@ gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.16.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.15.0'
-gem 'selenium-devtools', '0.125.0'
+gem 'selenium-devtools', '0.126.0'
 gem 'serialport', '1.3.2'
 # gem 'sinatra', '4.0.0'
 gem 'slack-ruby-client', '2.3.0'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.171]:001 >>> PWN.help
+pwn[v0.5.173]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.3@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.171]:001 >>> PWN.help
+pwn[v0.5.173]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.3@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.171]:001 >>> PWN.help
+pwn[v0.5.173]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -2,11 +2,13 @@
 
 require 'em/pure_ruby'
 require 'faye/websocket'
+require 'openssl'
 require 'rest-client'
+require 'securerandom'
 require 'selenium/webdriver'
 require 'selenium/devtools'
 require 'socksify'
-require 'openssl'
+require 'timeout'
 require 'watir'
 
 module PWN
@@ -20,6 +22,21 @@ module PWN
     module TransparentBrowser
       @@logger = PWN::Plugins::PWNLogger.create
 
+      # Supported Method Parameters::
+      # verify_devtools_browser(
+      #   browser_obj: 'required - browser_obj returned from #open method',
+      #   supported: 'optional - array of supported browser types (defaults to [:chrome, :headless_chrome, :firefox, :headless_firefox])'
+      # )
+      private_class_method def self.verify_devtools_browser(opts = {})
+        browser_obj = opts[:browser_obj]
+        supported = opts[:supported] ||= %i[chrome headless_chrome firefox headless_firefox]
+
+        browser_type = browser_obj[:type]
+        raise "ERROR: browser_type must be #{supported}" unless supported.include?(browser_type)
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # browser_obj1 = PWN::Plugins::TransparentBrowser.open(
       #   browser_type: 'optional - :firefox|:chrome|:headless|:rest|:websocket (defaults to :chrome)',
@@ -113,8 +130,9 @@ module PWN
             args: args,
             accept_insecure_certs: true
           )
+
+          options.web_socket_url = true
           options.profile = this_profile
-          # driver = Selenium::WebDriver.for(:firefox, capabilities: options)
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
 
@@ -138,8 +156,8 @@ module PWN
             accept_insecure_certs: true
           )
 
+          options.web_socket_url = true
           options.profile = this_profile
-          # driver = Selenium::WebDriver.for(:chrome, capabilities: options)
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
 
@@ -201,6 +219,7 @@ module PWN
             accept_insecure_certs: true
           )
 
+          options.web_socket_url = true
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -222,6 +241,7 @@ module PWN
             accept_insecure_certs: true
           )
 
+          options.web_socket_url = true
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -261,41 +281,31 @@ module PWN
           return nil
         end
 
-        browser_obj[:devtools] = browser_obj[:browser].driver.devtools if with_devtools && (browser_obj[:type] == :chrome || browser_obj[:type] == :headless_chrome || browser_obj[:type] == :firefox || browser_obj[:type] == :headless_firefox)
-
-        browser_obj
-      rescue StandardError => e
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # console_resp = PWN::Plugins::TransparentBrowser.devtools_console(
-      #   browser_obj: browser_obj1,
-      #   js: 'required - JavaScript expression to evaluate'
-      # )
-
-      public_class_method def self.devtools_console(opts = {})
-        browser_obj = opts[:browser_obj]
         browser_type = browser_obj[:type]
+        supported = %i[chrome headless_chrome firefox headless_firefox]
+        if with_devtools && supported.include?(browser_type)
+          browser_obj[:browser].goto('about:blank')
+          rand_tab = SecureRandom.hex(8)
+          browser_obj[:browser].execute_script("document.title = '#{rand_tab}'")
+
+          browser_obj[:devtools] = browser_obj[:browser].driver.devtools
+          browser_obj[:bidi] = browser_obj[:browser].driver.bidi
+
+          # browser_obj[:devtools].send_cmd('DOM.enable')
+          # browser_obj[:devtools].send_cmd('Log.enable')
+          # browser_obj[:devtools].send_cmd('Network.enable')
+          # browser_obj[:devtools].send_cmd('Page.enable')
+          # browser_obj[:devtools].send_cmd('Runtime.enable')
+          # browser_obj[:devtools].send_cmd('Security.enable')
+
+          # if browser_type == :chrome || browser_type == :headless_chrome
+          #   browser_obj[:devtools].send_cmd('Debugger.enable')
+          #   browser_obj[:devtools].send_cmd('DOMStorage.enable')
+          #   browser_obj[:devtools].send_cmd('DOMSnapshot.enable')
+          # end
+        end
 
-        valid_browser_types = %i[chrome headless_chrome firefox headless_firefox]
-        raise 'ERROR: browser_type must be :chrome, :headless_chrome, :firefox, or :headless_firefox' unless valid_browser_types.include?(browser_type)
-
-        js = opts[:js] ||= "alert('ACK from => #{self}')"
-
-        devtools = browser_obj[:devtools]
-        devtools.send_cmd('Runtime.enable')
-        devtools.send_cmd('Console.enable')
-        devtools.send_cmd('DOM.enable')
-        devtools.send_cmd('Page.enable')
-        devtools.send_cmd('Log.enable')
-        devtools.send_cmd('Debugger.enable')
-
-        js_exp = {
-          expression: js
-        }
-
-        devtools.send_cmd('Runtime.evaluate', **js_exp)
+        browser_obj
       rescue StandardError => e
         raise e
       end
@@ -388,6 +398,218 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # console_resp = PWN::Plugins::TransparentBrowser.console(
+      #   browser_obj: browser_obj1,
+      #   js: 'required - JavaScript expression to evaluate'
+      # )
+
+      public_class_method def self.console(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        js = opts[:js] ||= "alert('ACK from => #{self}')"
+
+        browser = browser_obj[:browser]
+        case js
+        when 'debugger', 'debugger;', 'debugger()', 'debugger();'
+          Timeout.timeout(1) { console_resp = browser.execute_script('debugger') }
+        when 'clear', 'clear;', 'clear()', 'clear();'
+          console_resp = browser.execute_script('console.clear()')
+        else
+          console_resp = browser.execute_script("console.log(#{js})")
+        end
+
+        console_resp
+      rescue Timeout::Error, Timeout::ExitException
+        console_resp
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # tabs = PWN::Plugins::TransparentBrowser.list_tabs(
+      #   browser_obj: 'required - browser_obj returned from #open method)'
+      # )
+
+      public_class_method def self.list_tabs(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        browser = browser_obj[:browser]
+        browser.windows.map do |tab|
+          active = false
+          active = true if browser.title == tab.title && browser.url == tab.url
+          { title: tab.title, url: tab.url, active: active }
+        end
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.switch_tab(
+      #   browser_obj: 'required - browser_obj returned from #open method)',
+      #   keyword: 'required - keyword in title or url used to switch tabs'
+      # )
+
+      public_class_method def self.switch_tab(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        keyword = opts[:keyword]
+        raise 'ERROR: keyword parameter is required' if keyword.nil?
+
+        browser = browser_obj[:browser]
+        all_tabs = browser.windows
+        all_tabs.select { |tab| tab.use if tab.title.include?(keyword) || tab.url.include?(keyword) }
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.new_tab(
+      #   browser_obj: 'required - browser_obj returned from #open method)',
+      #   url: 'optional - URL to navigate to after opening new tab (Defaults to nil)'
+      # )
+
+      public_class_method def self.new_tab(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        url = opts[:url]
+
+        browser = browser_obj[:browser]
+        browser.execute_script('window.open()')
+        switch_tab(browser_obj: browser_obj, keyword: 'about:blank')
+        rand_tab = SecureRandom.hex(8)
+        browser.execute_script("document.title = '#{rand_tab}'")
+        browser.goto(url) unless url.nil?
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.close_tab(
+      #   browser_obj: 'required - browser_obj returned from #open method)'
+      #   keyword: 'required - keyword in title or url used to close tabs'
+      # )
+
+      public_class_method def self.close_tab(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        keyword = opts[:keyword]
+        raise 'ERROR: keyword parameter is required' if keyword.nil?
+
+        browser = browser_obj[:browser]
+        all_tabs = browser.windows
+        all_tabs.select { |tab| tab.close if tab.title.include?(keyword) || tab.url.include?(keyword) }
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.debugger(
+      #   browser_obj: 'required - browser_obj returned from #open method)',
+      #   action: 'optional - action to take :pause|:resume (Defaults to :pause)',
+      #   url: 'optional - URL to navigate to after pausing debugger (Defaults to nil)'
+      # )
+
+      public_class_method def self.debugger(opts = {})
+        browser_obj = opts[:browser_obj]
+        supported = %i[chrome headless_chrome]
+        verify_devtools_browser(browser_obj: browser_obj, supported: supported)
+        browser = browser_obj[:browser]
+        action = opts[:action] ||= :pause
+        url = opts[:url]
+
+        devtools = browser_obj[:devtools]
+
+        case action.to_s.downcase.to_sym
+        when :pause
+          console(browser_obj: browser_obj, js: 'debugger')
+
+          # devtools.send_cmd('Debugger.enable')
+          # devtools.send_cmd(
+          #   'Debugger.setInstrumentationBreakpoint',
+          #   instrumentation: 'beforeScriptExecution'
+          # )
+
+          # devtools.send_cmd(
+          #   'EventBreakpoints.setInstrumentationBreakpoint',
+          #   eventName: 'load'
+          # )
+
+          # devtools.send_cmd(
+          #   'Debugger.setPauseOnExceptions',
+          #   state: 'all'
+          # )
+
+          begin
+            Timeout.timeout(1) do
+              browser.refresh if url.nil?
+              browser.goto(url) unless url.nil?
+            end
+          rescue Timeout::Error
+            url
+          end
+        when :resume
+          devtools.send_cmd('Debugger.resume')
+        else
+          raise 'ERROR: action parameter must be :pause or :resume'
+        end
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.step_into(
+      #   browser_obj: 'required - browser_obj returned from #open method)'
+      # )
+
+      public_class_method def self.step_into(opts = {})
+        browser_obj = opts[:browser_obj]
+        supported = %i[chrome headless_chrome]
+        verify_devtools_browser(browser_obj: browser_obj, supported: supported)
+
+        devtools = browser_obj[:devtools]
+        devtools.send_cmd('Debugger.stepInto')
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.step_out(
+      #   browser_obj: 'required - browser_obj returned from #open method)'
+      # )
+
+      public_class_method def self.step_out(opts = {})
+        browser_obj = opts[:browser_obj]
+        supported = %i[chrome headless_chrome]
+        verify_devtools_browser(browser_obj: browser_obj, supported: supported)
+
+        devtools = browser_obj[:devtools]
+        devtools.send_cmd('Debugger.stepOut')
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj1 = PWN::Plugins::TransparentBrowser.step_over(
+      #   browser_obj: 'required - browser_obj returned from #open method)'
+      # )
+
+      public_class_method def self.step_over(opts = {})
+        browser_obj = opts[:browser_obj]
+        supported = %i[chrome headless_chrome]
+        verify_devtools_browser(browser_obj: browser_obj, supported: supported)
+
+        devtools = browser_obj[:devtools]
+        devtools.send_cmd('Debugger.stepOver')
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # browser_obj1 = PWN::Plugins::TransparentBrowser.close(
       #   browser_obj: 'required - browser_obj returned from #open method)'
@@ -513,11 +735,6 @@ module PWN
           * End of DevTools Examples
           ********************************************************
 
-          console_resp = #{self}.devtools_console(
-            browser_obj: 'required - browser_obj returned from #open method)',
-            js: 'required - JavaScript expression to evaluate'
-          )
-
           browser_obj1 = #{self}.dump_links(
             browser_obj: 'required - browser_obj returned from #open method)'
           )
@@ -532,6 +749,47 @@ module PWN
             rand_sleep_float: 'optional - float timing in between keypress (defaults to 0.09)'
           ) {|char| browser_obj1.text_field(name: \"search\").send_keys(char) }
 
+          console_resp = #{self}.console(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            js: 'required - JavaScript expression to evaluate'
+          )
+
+          tabs = #{self}.list_tabs(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          browser_obj1 = #{self}.switch_tab(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            keyword: 'required - keyword in title or url used to switch tabs'
+          )
+
+          browser_obj1 = #{self}.new_tab(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          browser_obj1 = #{self}.close_tab(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            keyword: 'required - keyword in title or url used to close tabs'
+          )
+
+          browser_obj1 = #{self}.debugger(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            action: 'optional - action to take :pause|:resume (Defaults to :pause)',
+            url: 'optional - URL to navigate to after pausing debugger (Defaults to nil)'
+          )
+
+          browser_obj1 = #{self}.step_into(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          browser_obj1 = #{self}.step_out(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          browser_obj1 = #{self}.step_over(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
           browser_obj1 = #{self}.close(
             browser_obj: 'required - browser_obj returned from #open method)'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.171'
+  VERSION = '0.5.173'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.171
+  version: 0.5.173
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-17 00:00:00.000000000 Z
+date: 2024-06-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.5.13
+        version: 2.5.14
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.5.13
+        version: 2.5.14
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -436,14 +436,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.8.1
+        version: 2.8.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.8.1
+        version: 2.8.2
 - !ruby/object:Gem::Dependency
   name: libusb
   requirement: !ruby/object:Gem::Requirement
@@ -1024,14 +1024,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.125.0
+        version: 0.126.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.125.0
+        version: 0.126.0
 - !ruby/object:Gem::Dependency
   name: serialport
   requirement: !ruby/object:Gem::Requirement
@@ -2320,7 +2320,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.13
+rubygems_version: 3.5.14
 signing_key:
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond