pwn 0.5.189 → 0.5.190

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 23209b3ae230ac7903981327315c626571dabf4ddb74d3864ca2bd625c3651da
-  data.tar.gz: e2a378c4ed79978d0a6dd80a761d3dcedb9cbfa5926d0d926b1d248cbeebc974
+  metadata.gz: 8f5fb6d75564102eb7ed819f4c3833eefb9c8874fd78a0d0f588e07c74d00b62
+  data.tar.gz: 3fd6332778c90183ea364e2ee899a72beb79a3c8863c855ba669349fedbf2a65
 SHA512:
-  metadata.gz: dcfd61071ac2d1f858cb55c23754ba53deae089f828ce0d9f552b6a37e060e90476d5df80c88bcf32b9ecf63bf54b760fe3281cce17ed1a97545563522a21357
-  data.tar.gz: 67b6242126b03a7ea82c2e002c133b62f93a5f87561549355d27da94a9dbfca9afbec3eaf5256840215e45cdcb6c2077055fd5a4d140ed5fc99dd268f1414d3d
+  metadata.gz: 76cfc601b26f1aa5b095f7b0d12bd32186bcc7ed606738ee2b9aa5890820b254d8496c7814a6228771cd1112dc7628c2bca773438964a6ad5e7a8fe0c0efa2e1
+  data.tar.gz: 823c40899d1f2d899f21f490737138f7870348ef6d7f03e121056024a97c2059b68bb27985b01c40eb4ad89db96a8126ab3b371af34a095b855f0c60800ef28e

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.189]:001 >>> PWN.help
+pwn[v0.5.190]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.3@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.189]:001 >>> PWN.help
+pwn[v0.5.190]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.3@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.189]:001 >>> PWN.help
+pwn[v0.5.190]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -41,7 +41,8 @@ module PWN
       # browser_obj1 = PWN::Plugins::TransparentBrowser.open(
       #   browser_type: 'optional - :firefox|:chrome|:headless|:rest|:websocket (defaults to :chrome)',
       #   proxy: 'optional - scheme://proxy_host:port || tor (defaults to nil)',
-      #   with_devtools: 'optional - boolean (defaults to true)'
+      #   with_devtools: 'optional - boolean (defaults to true)',
+      #   url: 'optional - URL to navigate to after opening browser (Defaults to about:about#RANDID)'
       # )
 
       public_class_method def self.open(opts = {})
@@ -62,6 +63,8 @@ module PWN
         with_devtools = opts[:with_devtools] ||= false
         with_devtools = true if devtools_supported.include?(browser_type) && with_devtools
 
+        url = opts[:url] ||= "about:about##{SecureRandom.hex(8)}"
+
         # Let's crank up the default timeout from 30 seconds to 15 min for slow sites
         Watir.default_timeout = 900
 
@@ -286,6 +289,7 @@ module PWN
         if devtools_supported.include?(browser_type)
           rand_tab = SecureRandom.hex(8)
           browser_obj[:browser].goto("about:about##{rand_tab}")
+          browser_obj[:browser].execute_script("document.title = '#{rand_tab}'")
 
           if with_devtools
             driver = browser_obj[:browser].driver
@@ -307,7 +311,7 @@ module PWN
 
             browser_obj[:bidi] = driver.bidi
 
-            browser_obj[:browser].body.send_keys(:escape)
+            browser_obj[:browser].send_keys(:escape)
           end
         end
 
@@ -497,9 +501,9 @@ module PWN
           browser.execute_script("document.title = '#{rand_tab}'")
         end
         # Open the DevTools for Firefox, Chrome opens them automatically
-        browser.body.send_keys(:f12) if firefox_types.include?(browser_type)
+        browser.send_keys(:f12) if firefox_types.include?(browser_type)
         # Open Console drawer if DevTools are open
-        browser.body.send_keys(:escape) unless devtools.nil?
+        browser.send_keys(:escape) unless devtools.nil?
         browser.goto(url) unless url.nil?
 
         { title: browser.title, url: browser.url, state: :active }
@@ -522,11 +526,13 @@ module PWN
 
         browser = browser_obj[:browser]
         # Switch to an inactive tab before closing the active tab if it's currently active
-        active_tab = list_tabs(browser_obj: browser_obj).select { |tab| tab[:state] == :active }
-        if active_tab.last[:url] == browser.url
-          inactive_tabs = list_tabs(browser_obj: browser_obj).reject { |tab| tab[:url] == browser.url }
-          keyword = inactive_tabs.last[:url]
-          jmp_tab(browser_obj: browser_obj, keyword: keyword)
+        active_tab = list_tabs(browser_obj: browser_obj).find { |tab| tab[:state] == :active }
+        if active_tab[:url] == browser.url
+          inactive_tabs = list_tabs(browser_obj: browser_obj).reject { |tab| tab[:state] == :active }
+          if inactive_tabs.any?
+            keyword = inactive_tabs.last[:url]
+            jmp_tab(browser_obj: browser_obj, keyword: keyword)
+          end
         end
         all_tabs = browser.windows
         tab_sel = all_tabs.select { |tab| tab.close if tab.title.include?(keyword) || tab.url.include?(keyword) }
@@ -647,7 +653,7 @@ module PWN
         verify_devtools_browser(browser_obj: browser_obj)
 
         browser = browser_obj[:browser]
-        browser.body.send_keys(:f12)
+        browser.send_keys(:f12)
       rescue StandardError => e
         raise e
       end
@@ -691,8 +697,8 @@ module PWN
         end
 
         # Have to call twice for Chrome, otherwise devtools stays closed
-        browser.body.send_keys(hotkey)
-        browser.body.send_keys(hotkey) if chrome_types.include?(browser_type)
+        browser.send_keys(hotkey)
+        browser.send_keys(hotkey) if chrome_types.include?(browser_type)
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.189'
+  VERSION = '0.5.190'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.189
+  version: 0.5.190
 platform: ruby
 authors:
 - 0day Inc.