pwn 0.5.199 → 0.5.201

Sign up to get free protection for your applications and to get access to all the features.
Files changed (20) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/CHANGELOG_BETWEEN_TAGS.txt +190 -176
  4. data/Gemfile +8 -8
  5. data/README.md +5 -5
  6. data/bin/pwn_sast +2 -0
  7. data/etc/pwn.yaml.EXAMPLE +3 -0
  8. data/lib/pwn/plugins/hunter.rb +160 -0
  9. data/lib/pwn/plugins/repl.rb +3 -0
  10. data/lib/pwn/plugins/transparent_browser.rb +138 -20
  11. data/lib/pwn/plugins.rb +1 -0
  12. data/lib/pwn/sast/local_storage.rb +145 -0
  13. data/lib/pwn/sast/post_message.rb +144 -0
  14. data/lib/pwn/sast.rb +2 -0
  15. data/lib/pwn/version.rb +1 -1
  16. data/lib/pwn.rb +3 -0
  17. data/spec/lib/pwn/plugins/hunter_spec.rb +15 -0
  18. data/spec/lib/pwn/sast/local_storage_spec.rb +25 -0
  19. data/spec/lib/pwn/sast/post_message_spec.rb +25 -0
  20. metadata +25 -19
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a651643008909b3dd6b654f1bbefea615460bb2b23935c198b101bf17b5cc316
4
- data.tar.gz: 1075cf93268dfccf30bf341ef49e2b208daf478bbf86a283b00496f57ff39b3e
3
+ metadata.gz: e7e829fbe8ce37f678160b676c248ef15e3c61fac6dc400d039837fa18fa3a97
4
+ data.tar.gz: ebc8bf91247d44a31df8eff747d01de03cf91eb6e7b05831f906b58c8060907b
5
5
  SHA512:
6
- metadata.gz: 2b88a620917d7ccfe4cbbd30e89040ed29980c74496eba513e2c4ca0bf8ce7932be50846d32bcc88fe9630644a2f2cdae057e0f50124c69f5228c81d60134967
7
- data.tar.gz: b86c75c34ff0e5ddd3fc65785e0f62b0c2f0afd8e8bfbefcff5dd16a430724c06606b5d0a673b2015de05edfb47feb8fcfd27c16d5ee36b31ccdd72eace0d7f0
6
+ metadata.gz: d24e5051ecdd71d9f48ce11f6e85a83387683f6be56ea03459540b1cf43ad041aec977df7ab20c35c6009a76d7b38a416eff716a872fc2ffd4a60c5aaca0eba2
7
+ data.tar.gz: 11237d2a4cd29612417626c4f5cbc5124ef1fda081244f53dadcefa0996472130c1ee2a60487bda291b1dacab5593bcc5d723874a1318b302dd3b58785ec8523
data/.ruby-version CHANGED
@@ -1 +1 @@
1
- 3.3.3
1
+ 3.3.4
data/CHANGELOG_BETWEEN_TAGS.txt CHANGED
@@ -1,176 +1,190 @@
1
- b16033a Gemfile - mqtt #better_filtering_in_stdout
2
- 592dc50 Merge pull request #572 from ninp0/master
3
- 6f29ff4 Gemfile - Bump alt comms to latest
4
- 85586bc Merge pull request #571 from ninp0/master
5
- 61e2a26 .ruby-version - Bump to 3.3.1
6
- 361d8bd Merge pull request #570 from ninp0/master
7
- c0f55a1 Gemfile - Bump alt comms to latest
8
- 095acc5 Gemfile - Bump alt comms to latest
9
- dfc9770 Merge pull request #569 from ninp0/master
10
- cc5abbd Gemfile - Bump meshtastic to 0.0.27
11
- 799ba17 Merge pull request #568 from ninp0/master
12
- bc83f38 Gemfile - Bump meshtastic to 0.0.26
13
- 0730287 Gemfile - Bump meshtastic to 0.0.24
14
- d480bf6 Merge pull request #567 from ninp0/master
15
- 5a8c3e4 Gemfile - Bump meshtastic gem to 0.0.19
16
- ee4aeb9 Merge pull request #566 from ninp0/master
17
- 1bc3861 Gemfile - Bump meshtastic gem to 0.0.12
18
- 4450e4d Merge pull request #565 from ninp0/master
19
- 35d8c74 Gemfile - Bump meshtastic gem to 0.0.10
20
- cde6443 Gemfile - Bump meshtastic gem to 0.0.2
21
- c5cd5a3 Merge pull request #564 from ninp0/master
22
- 24e084c PWN::FFI::Stdio module - #bugfix in namespace collision
23
- 9b4449c Gemfile - incorporate meshtastic gems for alt comms
24
- e51f232 PWN::FFI::Stdio module - initial commit and migrate meshtastic into its own external gem
25
- ffdcf4d Merge pull request #563 from ninp0/master
26
- 5e23c11 Gemfile - replace legacy rbvmomi gem with latest version of rbvmomi2
27
- 892f655 Merge pull request #561 from ninp0/master
28
- 8671eac pwn REPL driver - openai section in pwn.yaml can be used to dictate the model used in pwn-ai command + #rubocop_fixes
29
- de074c9 Merge pull request #560 from ninp0/master
30
- 4d107a0 PWN::Plugins::GQRX module - more accurate profiles in #list_profiles method
31
- 21064fd Merge pull request #559 from ninp0/master
32
- 2c34791 pwn_gqrx_scanner Driver - implement --assume-profiles && -list-profiles options
33
- 371e579 Merge pull request #558 from ninp0/master
34
- 7c1fbea PWN::Plugins::DefectDojo module - #bugfix in #importscan method for group_by opt
35
- 022ed74 Merge pull request #557 from ninp0/master
36
- 9b04a38 pwn_defectdojo_importscan Driver --group-by parameter #bugfix
37
- 985dd29 Merge pull request #556 from ninp0/master
38
- e74bc69 PWN::Plugins::DefectDojo module && pwn_defectdojo_importscan Driver - implement --test-title && --group-by parameters
39
- 41388aa Merge pull request #555 from ninp0/master
40
- 74d1f0b PWN::Plugins::GQRX module - decouple explicit logic from pwn_gqrx_scanner Driver
41
- 34d976e Merge pull request #554 from ninp0/master
42
- 5d26035 PWN::Plugins::Vault module - more resilient exception handling
43
- 6dc346a Merge pull request #553 from ninp0/master
44
- 906e600 PWN::Plugins::Vault module - protect sensitive artifacts when presenting
45
- 5e17984 pwn REPL Driver - Distinguish between ai_engines and their respective models within pwn-ai command
46
- e4eff9e Merge pull request #552 from ninp0/master
47
- f12a26b PWN::Plugins::OpenAI module - change default temp to 1
48
- 7b150e0 pwn REPL - simplify and speed up Pry.config.pwn_ai_key initialization when using ai_engine: "ollama"
49
- 802784f pwn REPL - implement the means to choose between using OpenAI or Ollama as ai_engine for pwn-ai command
50
- ffa3762 Merge pull request #551 from ninp0/master
51
- f3580c8 PWN::Plugins::Vault - #bugfix in file_encrypted? method when file is cleartext && namespace #bugfixes in PWN::Plugins::MonkeyPatch.pry method
52
- 4bcbb79 Merge pull request #550 from ninp0/master
53
- f7de92e pwn REPL Driver - decouple monkey patches, adding commands, and adding hooks from driver by implementing PWN::Plugins::MonkeyPatch && PWN::Plugins::REPL modules
54
- 4568689 Merge pull request #549 from ninp0/master
55
- 1a4df3e pwn REPL driver - migrate a couple methods into more appropriate modules #code_cleanup
56
- 29374f2 Merge pull request #548 from ninp0/master
57
- c8fbcde pwn REPL driver - prompt for key and/or iv when not present
58
- c5c7d40 Merge pull request #547 from ninp0/master
59
- 607b28f pwn REPL driver - implement support for encrypted pwn.yaml config file + #rubocop_fix
60
- 6c2f97b pwn REPL driver - implement support for encrypted pwn.yaml config file
61
- 68ddff7 Merge pull request #546 from ninp0/master
62
- 815997c Deprecate PWN::Plugins::AnsibleVault module in favor of ruby-native PWN::Plugins::Vault module (manage encrypted file)
63
- 1f313e2 Merge pull request #545 from ninp0/master
64
- b5fde6c pwn_gqrx_scanner Driver - Provide warning for transceivers that do not support -R -I or -B parameters instead of failing
65
- f544928 Merge pull request #544 from ninp0/master
66
- b8f1040 pwn REPL driver - change name of pwn-gpt command to pwn-ai and begin scaling out AI alternatives (e.g. local models via ollama)
67
- 672c2d9 Merge pull request #543 from ninp0/master
68
- b5e0772 pwn_gqrx_scanner Driver - #bugfix in displaying discovered signals to stdout and additional #bugfix in reverse scan
69
- bac9b8b Merge pull request #542 from ninp0/master
70
- abeb856 pwn_bdba_scan Driver - rescue RestClient::Conflict for scan re-attempt
71
- 2175a61 Merge pull request #541 from ninp0/master
72
- 41dfa24 pwn_gqrx_scanner Driver - include lock_freq_duration value in STDOUT during scan
73
- 8b12a41 pwn_gqrx_scanner Driver - signal detection default refinements
74
- 64aaa36 pwn_gqrx_scanner Driver - signal detection default refinements
75
- 1c44f05 pwn_gqrx_scanner Driver - signal detection #bugfix and implement rf, if, && bb gain parameters
76
- f0470b1 Merge pull request #540 from ninp0/master
77
- 9aba9c9 pwn_gqrx_scanner Driver - tweak default bandwidth settong to align w hrf1
78
- 4a0f273 Merge pull request #539 from ninp0/master
79
- 1940860 pwn_gqrx_scanner Driver - better error handling, increased scan speed, tweak defaults to align w/ FM radio station detection
80
- 37e9f8c pwn_gqrx_scanner Driver - implement error checks, squelch param and change sleep timing based upon measured signal strengths
81
- 4686ca4 Merge pull request #538 from ninp0/master
82
- 500c562 pwn_gqrx_scanner Driver - implement error checks and refactor redundant blocks of xode
83
- 242df8d Merge pull request #537 from ninp0/master
84
- 9619139 pwn_gqrx_scanner Driver - implement sleep between scan hops
85
- 09ecfdd pwn_gqrx_scanner Driver - implement scan precision
86
- 2a0465c pwn_gqrx_scanner Driver - gqrx_sock #bugfix
87
- 54e557a pwn_gqrx_scanner Driver - implement demodulator mode
88
- 3df14df pwn_gqrx_scanner Driver - Initial commit
89
- 60c61d0 Merge pull request #536 from ninp0/master
90
- a5e4280 pwn REPL drive - change "toggle-pwn-asm" to "pwn-asm" command, change "toggle-pwn-gpt" to "pwn-gpt" command, and implement a "back" command to go back to pwn REPL mode
91
- 04a4055 Merge pull request #535 from ninp0/master
92
- f82f349 PWN::Plugins::BlackDuckBinaryAnalysis module - add #get_group_statistics and #delette_group methods
93
- 5af6d96 Merge pull request #534 from ninp0/master
94
- e719b2b PWN::Plugins::BlackDuckBinaryAnalysis module - implement connection reattempts (3 max attempts) when arbitrary connection timeouts occur between rest client and protecode-sc.com
95
- df28c3e Merge pull request #533 from ninp0/master
96
- b17e156 pwn Driver - improve input validation in toggle-pwn-gpt command and enhance opcode detection to support 1:1 opcode format in PWN::Plugins::Assembly module when using the toggle-pwn-asm command
97
- de4e4f4 Merge pull request #532 from ninp0/master
98
- 02d0cb7 pwn Driver - toggle-pwn-asm #bugfix
99
- 9fab25a Merge pull request #531 from ninp0/master
100
- 615a48b pwn Driver - toggle-pwn-asm #bugfix
101
- 7be1d80 Merge pull request #530 from ninp0/master
102
- 16caf3b pwn Driver - implement REPL commands, toggle-pwn-gpt && toggle-pwn-asm
103
- 58e7ad8 Merge pull request #529 from ninp0/master
104
- 6bce390 PWN::Banner modules - slight tweaks
105
- fa61c8a Merge pull request #528 from ninp0/master
106
- 82392d7 PWN::Plugins::Assembly module - better support for opcode string formats
107
- a82ae21 Merge pull request #527 from ninp0/master
108
- 3009068 PWN::Plugins::Assembly module - #opcodes_to_asm back support multiple types of opcode string formats
109
- 049e8fb PWN::Plugins::Assembly module - #opcodes_to_asm back to metasm
110
- 9c0e8b4 Merge pull request #526 from ninp0/master
111
- ee2baed PWN::Plugins::Assembly module - rely upon archs native objdump bins to convert opcodes to asm within #opcodes_to_asm method #bugfix
112
- 2c273b4 Merge pull request #525 from ninp0/master
113
- ca4788f PWN::Plugins::Assembly module - rely upon archs native objdump bins to convert opcodes to asm within #opcodes_to_asm method #bugfixes
114
- b1c3563 PWN::Plugins::Assembly module - rely upon archs native objdump bins to convert opcodes to asm within #opcodes_to_asm method
115
- 2a497f0 Merge pull request #524 from ninp0/master
116
- c842b05 PWN::Plugins::Assembly module - support numerous types of hex string formats in opcodes_to_asm method #bugfix >>> invalid byte sequence in UTF-8
117
- a459bc3 Merge pull request #523 from ninp0/master
118
- 581efd9 PWN::Plugins::Assembly module - support numerous types of hex string formats in opcodes_to_asm method
119
- 2d4b622 Merge pull request #522 from ninp0/master
120
- bc5405e PWN::Plugins::Assembly module - always return hex escaped string from #asm_to_opcodes method
121
- 62e6f8f Merge pull request #521 from ninp0/master
122
- 26b5a94 Merge branch 'master' of ssh://github.com/ninp0/pwn
123
- 358b53a PWN::Plugins::Assembly module - 32 bit ARM #rubocop
124
- 866901c Merge pull request #520 from ninp0/master
125
- ad74573 PWN::Plugins::Assembly module - 32 bit ARM bugfixes
126
- 909d0fb Merge pull request #519 from ninp0/master
127
- 87c420a PWN::Plugins::Assembly module - overhaul using metasm gem - thank you Metasploit devs #bugfixes
128
- afd3e2c Merge pull request #518 from ninp0/master
129
- ef33860 PWN::Plugins::Assembly module - overhaul using metasm gem - thank you Metasploit devs #much_easier
130
- 4539281 Merge pull request #517 from ninp0/master
131
- 7046154 PWN::Plugins::Assembly module - more #bugfixes
132
- b9cbfa1 Merge pull request #516 from ninp0/master
133
- 24cc69a PWN::Plugins::Assembly module - more #bugfixes
134
- 6f6b8c7 Merge pull request #515 from ninp0/master
135
- 5e436e0 PWN::Plugins::Assembly module - more #rubocop
136
- 88935fb Merge pull request #514 from ninp0/master
137
- 1736112 PWN::Plugins::Assembly module - more #rubocop
138
- 00934b6 PWN::Plugins::Assembly module - more #bugfixes
139
- a724522 Merge pull request #513 from ninp0/master
140
- 04b6fc1 PWN::Plugins::Assembly module - Decompile all sections in #asm_to_opcodes method / minor tweaks in #help method
141
- 0133b4f Merge pull request #512 from ninp0/master
142
- dfffce8 PWN::Plugins::Assembly module - #opcodes_to_asm #bugfix
143
- b714aaa Merge pull request #511 from ninp0/master
144
- c8f56bf PWN::Plugins::Assembly module - initial commit #spec_bugfix
145
- 04a390f PWN::Plugins::Assembly module - initial commit
146
- 427d8bc Merge pull request #510 from ninp0/master
147
- e11a3a1 PWN::Plugins::DetectOS module - add #arch method
148
- aa8b59b Merge pull request #509 from ninp0/master
149
- f5ea3ff Gemfile - temporarily disable mongo gem until version conflicts are ironed out w/ bson
150
- e21f864 pwn_openvas_vulnscan Driver - replace --username / --password parameters in favor of --yaml-config
151
- 2c540d8 PWN::Plugins::Baresip module - catch all session closures
152
- d93c7f2 Merge pull request #508 from ninp0/master
153
- 46db844 PWN::Plugins::Baresip module - terminate call early if forbidden
154
- 6025d4a PWN::Plugins::Baresip module - terminate call early if forbidden
155
- ceabe44 Merge pull request #507 from ninp0/master
156
- 585f6c6 PWN::Plugins::Baresip module - add static option in #apply_src_num_rules method
157
- 5f0f65d Merge pull request #506 from ninp0/master
158
- 3f90f0d PWN::Plugins::BareSIP module - speech-to-text URI path bugfix for PWN::Reports::Phone module
159
- 9275634 Merge pull request #505 from ninp0/master
160
- 1ace8b6 PWN::Plugins::BareSIP module - require htmlentities gem #bugfix
161
- 92e1151 Merge pull request #504 from ninp0/master
162
- 1dc3aca PWN::Plugins::XXD module - #bugfix in #reverse_dump method when last line in hexdump is less than 16 bytes
163
- 277711e Merge pull request #503 from ninp0/master
164
- 4a925f6 pwn_bdba_scan Driver - URL decoding issues when searching for product and implement --binary-cleanup-age / --product-cleanup-age params in pwn_bdba_group driver #bugfix
165
- be1a6ec pwn_bdba_scan Driver - URL decoding issues when searching for product and implement --binary-cleanup-age / --product-cleanup-age params in pwn_bdba_group driver
166
- 32dd341 Merge pull request #502 from ninp0/master
167
- f38f64c pwn_bdba_scan Driver - addressing weird response encoding practices done in the synopsis API for file names (i.e. + chars are not encoded to %2B, despite spaces being encoded to + chars) \_o_/
168
- 907f6de Merge pull request #501 from ninp0/master
169
- 918998b PWN::Plugins::XXD module - update usage
170
- e171b90 Merge pull request #500 from ninp0/master
171
- c805183 PWN::Plugins::XXD module - implement code necessary to demonstrate a code cave PoC in PWN::Banner::CodeCave
172
- 3307e72 Merge pull request #499 from ninp0/master
173
- b19e2b1 PWN::Plugins::XXD module - #bugfix in format string in #reverse_dump method #bugfix
174
- b7e2250 Merge pull request #498 from ninp0/master
175
- 4889b1e Merge pull request #497 from ninp0/master
176
- f0eecc5 Merge pull request #496 from ninp0/master
1
+ 110e615 Merge pull request #658 from ninp0/master
2
+ 6258d66 PWN::Plugins::TransparentBrowser module - update #open method to default to debugger view when devtools: true and browser_type: :firefox. Implement #udpate_about_config method for Firefox as well
3
+ ad70268 Merge pull request #657 from ninp0/master
4
+ 7c25f44 PWN::Plugins::TransparentBrowser module - incognito sessions by default in #open method #no_persistent_cookies?
5
+ 418029b Merge pull request #656 from ninp0/master
6
+ fc484c1 PWN::Plugins::TransparentBrowser module - #bugfix in #open method to always start browsers maximized (when supported of course)
7
+ e1cb5b8 Merge pull request #655 from ninp0/master
8
+ 48e4735 PWN::Plugins::TransparentBrowser module - #bugfix in #toggle_devtools method
9
+ e5209a6 PWN::Plugins::TransparentBrowser module - update to #new_tab method which reduces complexity when opening tabs
10
+ 6849c76 Merge pull request #654 from ninp0/master
11
+ 49ed078 PWN::Plugins::TransparentBrowser module - #bugfixes centered around opening devtools with console drawer, switching devtools panels, toggling devtools, etc.
12
+ ba54d2f PWN::Plugins::TransparentBrowser module - #bugfixes centered around opening devtools with console drawer, switching devtools panels, toggling devtools, etc.
13
+ 30d02ff PWN::Plugins::TransparentBrowser module - #bugfixes in #open method when devtools parameter == true
14
+ b8f6d02 Merge pull request #653 from ninp0/master
15
+ 421b19d PWN::Plugins::TransparentBrowser module - #bugfixes in #close_tab method
16
+ e2aadd0 PWN::Plugins::TransparentBrowser module - #bugfix in #close_tab method
17
+ 8435896 Merge pull request #652 from ninp0/master
18
+ ac8e9b9 PWN::Plugins::TransparentBrowser module - #bugfix in #close_tab method
19
+ 7d2eaa8 Merge pull request #651 from ninp0/master
20
+ a5f79ce PWN::Plugins::TransparentBrowser module - more bugfixes
21
+ 0e4c6b3 Merge pull request #650 from ninp0/master
22
+ b5f4636 PWN::Plugins::TransparentBrowser module - if with_devtools, open console drawer by default in #open && #new_tab methods. Also switch to an inactive tab if closing a tag thats currently active.
23
+ ec1f6be Merge pull request #649 from ninp0/master
24
+ bf79a6b PWN::Plugins::TransparentBrowser module - if with_devtools, open console drawer by default in #open && #new_tab methods
25
+ d475c03 PWN::Plugins::TransparentBrowser module - add #jmp_devtools_panel && #toogle_devtools. Also rename #switch_tab method to #jmp_tab
26
+ 4468437 Merge pull request #648 from ninp0/master
27
+ 3bcbb26 PWN::Plugins::TransparentBrowser module - #bugfix in #new_tab method
28
+ 57bb78f Merge pull request #647 from ninp0/master
29
+ 6436eb1 PWN::Plugins::TransparentBrowser module - #bugfix in #new_tab method
30
+ eda3c5d PWN::Plugins::TransparentBrowser module - #bugfix in #new_tab method
31
+ fc0acd2 Merge pull request #646 from ninp0/master
32
+ 0647c7f PWN::Plugins::TransparentBrowser module - update default url in #new_tab method from "about:blank" to "about:about"
33
+ 37c4252 Merge pull request #645 from ninp0/master
34
+ d5f443c PWN::Plugins::TransparentBrowser module - re-enable bidi as the tested chrome browser was running incompat chromedriver version + with_devtools #bugfix
35
+ ca98e91 Merge pull request #644 from ninp0/master
36
+ 243102f PWN::Plugins::TransparentBrowser module - comment out browser_obj[:bidi] until this error is addressed: `Failed to initialize BiDi Mapper: TypeError: Failed to set the innerHTML property on Element: This document requires TrustedHTML assignment.`
37
+ 8cee663 Merge pull request #643 from ninp0/master
38
+ 2579702 PWN::Plugins::TransparentBrowser module - change active key in all tab methods return objects to state and return same object format as other tab methods in #close_tab method
39
+ 1f6667c Merge pull request #642 from ninp0/master
40
+ b983acb PWN::Plugins::TransparentBrowser module - return hash object when calling #new_tab && #switch_tab methods + #bugfix
41
+ 75fbbcf PWN::Plugins::TransparentBrowser module - return hash object when calling #new_tab && #switch_tab methods + #bugfix
42
+ 70a452b Merge pull request #641 from ninp0/master
43
+ a8a1c56 PWN::Plugins::TransparentBrowser module - return hash object when calling #new_tab method
44
+ fba67cd Merge pull request #640 from ninp0/master
45
+ d4fcaa2 PWN::Plugins::TransparentBrowser module - include headless as a browser_type for with_devtools
46
+ 185db0d Merge pull request #639 from ninp0/master
47
+ 47f3713 PWN::Plugins::TransparentBrowser module - return a bidi object in browser_obj when with_devtools option = true
48
+ 5124563 Merge pull request #638 from ninp0/master
49
+ 464319c PWN::Plugins::TransparentBrowser module - a lot of devtools enhancements
50
+ e6c077d Merge pull request #637 from ninp0/master
51
+ e3fcb45 PWN::Plugins::TransparentBrowser module - implement #devtools_console method for browser_type == :chrome && :firefox (including headless). Overhaul #find_elements_by_text and #dump_links methods
52
+ c563239 Merge pull request #636 from ninp0/master
53
+ 4cf676c PWN::Plugins::TransparentBrowser module - implement #devtools_console method for browser_type == :chrome
54
+ 88cf250 Merge pull request #635 from ninp0/master
55
+ 4ef3e2d .ruby-version - bump to 3.3.3
56
+ 42ead41 Merge pull request #634 from ninp0/master
57
+ d584b49 PWN::AWS::IAM module - implement #decode_key method. Useful for extracting account_id from access key ids
58
+ a40a8a6 PWN::AWS::IAM module - implement #decode_key method. Useful for extracting account_id from access key ids
59
+ ead2b64 Merge pull request #633 from ninp0/master
60
+ eb4ae6f pwn_crt_sh Driver - report_path #bugfix
61
+ 05c27ae Merge pull request #632 from ninp0/master
62
+ d0251f6 pwn_crt_sh Driver - display result to STDOUT in addition to writing to JSON file
63
+ be32d05 pwn_crt_sh Driver - Initial commit w/ basic list of subdomains
64
+ f09efb9 pwn_crt_sh Driver - Initial commit w/ basic list of subdomains
65
+ 2a8ea88 Merge pull request #631 from ninp0/master
66
+ 6c74d5e PWN::Plugins::TransparentBrowser module - #bugfixes in #close method
67
+ f18f61d Merge pull request #630 from ninp0/master
68
+ a956e46 PWN::Plugins::TransparentBrowser module - #bugfixes in #close method
69
+ 4d3fe84 Merge pull request #629 from ninp0/master
70
+ 4e8a680 pwn_www_uri_buster Driver - implement --include-response-codes and --exclude-response-codes #rubocop
71
+ c9ddb07 Merge pull request #628 from ninp0/master
72
+ 8835abe pwn_www_uri_buster Driver - implement --include-response-codes and --exclude-response-codes
73
+ b6f6ce2 Merge pull request #627 from ninp0/master
74
+ 6052c71 PWN::Plugins::TransparentBrowser module - configure logger to display to STDOUT w/ log level of error
75
+ dd57a5d Merge pull request #626 from ninp0/master
76
+ dd197af PWN::Plugins::ThreadPool module - regress to previous method #faster
77
+ 1a4db55 Merge pull request #625 from ninp0/master
78
+ 4bb4dd9 PWN::Plugins::IPInfo module - #bugfixes in #bruteforce_subdomain method
79
+ dfc3e9a Merge pull request #624 from ninp0/master
80
+ 5da2e6f PWN::Plugins::IPInfo module - handle multiple ip addresses if hostname returns more than one.
81
+ f0f5d99 Merge pull request #623 from ninp0/master
82
+ 6b82bd8 PWN::Plugins::IPInfo module - #bugfixes && implement new method #check_rfc1918
83
+ e25d821 Merge pull request #622 from ninp0/master
84
+ c9a05d7 PWN::Plugins::ThreadPool module - overhaul #fill method
85
+ d2cd876 Merge pull request #621 from ninp0/master
86
+ 8a28b6b PWN::Plugins::IPInfo module - proper JSON output to results_file within #bruteforce_subdomains method
87
+ b1c7c0b Merge pull request #620 from ninp0/master
88
+ d413c23 PWN::Plugins::IPInfo module - update usage in #help method
89
+ 05603df Merge pull request #619 from ninp0/master
90
+ 5a19084 PWN::Plugins::IPInfo module - implement #bruteforce_subdomains method
91
+ 9b085a9 PWN::Plugins::IPInfo module - implement #bruteforce_subdomains method
92
+ 9449de4 Merge pull request #618 from ninp0/master
93
+ ac53e4f PWN::Plugins::OpenAI && PWN::Plugins::Ollama modules - implement spinner parameter for #chat methods when using pwn-irc command in pwn REPL
94
+ 94c5696 Merge pull request #617 from ninp0/master
95
+ 87f0763 pwn REPL - implement multiple LLM support for pwn-irc (e.g. OpenAI, Ollama via Open WebUI w/ its respective models, etc). Update PWN::Plugins::Ollama module to get working #chat method that works identically to #PWN::Plugins::OpenAI.chat method. This is to support AI agent collaboration / context switching / reduce cost of usage via pwn-irc command
96
+ 3be8b75 Merge pull request #616 from ninp0/master
97
+ aac1bee etc/pwn.yaml.EXAMPLE - share ninja w/ the tubes.
98
+ 9be17b8 Merge pull request #615 from ninp0/master
99
+ 8efad4f pwn REPL driver - prefer weechat IRC client over irssi to reduce complexity
100
+ 33900ee Merge pull request #614 from ninp0/master
101
+ b113f88 Merge branch 'master' of ssh://github.com/ninp0/pwn
102
+ 6cad32a pwn REPL driver - prefer weechat IRC client over irssi #tweaks
103
+ 867cf40 Merge pull request #613 from ninp0/master
104
+ de679e6 pwn REPL driver - prefer weechat IRC client over irssi
105
+ c01600c pwn REPL driver - prefer weechat IRC client over irssi
106
+ e6ae14a Merge pull request #612 from ninp0/master
107
+ 64ee00f pwn REPL driver - initial implementation of pwn-irc REPL command for AI agent orchestration #agi
108
+ 6e350c5 Merge pull request #611 from ninp0/master
109
+ 01081c9 pwn REPL - implement pwn-irc commmand to begin implementing AI agents #rubocop
110
+ 9c99126 Merge branch 'master' of ssh://github.com/ninp0/pwn
111
+ f23e9e5 pwn REPL - implement pwn-irc commmand to begin implementing AI agents #rubocop
112
+ eef3e5d Merge pull request #610 from ninp0/master
113
+ a93d908 pwn REPL - implement pwn-irc commmand to begin implementing AI agents
114
+ 3e42dd8 Merge pull request #609 from ninp0/master
115
+ abc0fcf PWN::Plugins::IRC module - #bugfix in #privmsg method
116
+ 26db157 Merge pull request #608 from ninp0/master
117
+ ccdcd17 PWN::Plugins::IRC module - change #send method to be privately scoped within the module.
118
+ c25b6ff Merge pull request #607 from ninp0/master
119
+ 5e452a1 PWN::Plugins::IRC module - add #ping, #pong, and #privmsg methods
120
+ 4dce789 PWN::Plugins::IRC module - decouple join command from #connect method. Implement #join, #part, and #quits methods
121
+ 61ca618 Merge pull request #606 from ninp0/master
122
+ e5bac30 PWN::Plugins::IRC module - #bugfix in #listen mehthod
123
+ e4f0961 Merge pull request #605 from ninp0/master
124
+ 9d68d14 PWN::Plugins::IRC module - simplify #send mehthod
125
+ e0cf1be Merge pull request #604 from ninp0/master
126
+ 1acc118 PWN::Plugins::IRC module - #chomp message when logging to STDOUT in #listen method.
127
+ 1e162e3 PWN::Plugins::IRC module - #chomp message when logging to STDOUT in #listen method.
128
+ 83843be Merge pull request #603 from ninp0/master
129
+ 7e440cd PWN::Plugins::IRC module - yield entire message when passing block to #listen method and replace #gets with #wait_readable method in #send method to ensure we can process a socket response in its entirety.
130
+ 46c2e49 PWN::Plugins::IRC module - yeild entire message when passing block to #listen method and replace #gets with #wait_readable method in #send method to ensure we can process a socket response in its entirety.
131
+ d2ed62e Merge pull request #602 from ninp0/master
132
+ 6dfbf89 PWN::Plugins::IRC module - #bugfix in #listen method
133
+ 4da3cb6 Merge pull request #601 from ninp0/master
134
+ 332bbcb PWN::Plugins::IRC module - #rubocop_fix
135
+ 3125829 Merge pull request #600 from ninp0/master
136
+ e70fbeb Gemfile - remove cinch gem in favor of native PWN::Plugins::IRC client module to support AI agents
137
+ 9fd5240 Merge pull request #599 from ninp0/master
138
+ 0f145f0 Gemfile - add cinch for AI agent rollout
139
+ 038de06 Merge pull request #598 from ninp0/master
140
+ 9fabf07 PWN::Plugins::REPL module - start in Pry.main instead of self (i.e. PWN::Plugins::REPL) to enable proper autocompletion, session method definitions, etc.
141
+ 8a6c57b Merge pull request #597 from ninp0/master
142
+ f5e2343 PWN::Plugins::OpenAI module - change default model to gpt-4o for #chat method
143
+ aedd2d0 Gemfile - bump altcomms
144
+ 2f171a8 Merge pull request #596 from ninp0/master
145
+ 50e8835 Gemfile - bump altcomms
146
+ 1f50cec Merge pull request #595 from ninp0/master
147
+ 7fc05e9 Gemfile - bump altcomms
148
+ 0fe7b33 Merge pull request #594 from ninp0/master
149
+ 0eca73f Gemfile - bump altcomms
150
+ 9e7fb26 Merge pull request #593 from ninp0/master
151
+ a85391b Gemfile - mqtt tx / rx support
152
+ c5e18c2 Merge pull request #592 from ninp0/master
153
+ 497c0b4 Gemfile - Bump alt comms to latest
154
+ 44e56f3 Merge pull request #591 from ninp0/master
155
+ 95a841f Gemfile - Bump alt comms to latest
156
+ 0d5a609 Merge pull request #590 from ninp0/master
157
+ 0992275 Gemfile - Bump alt comms to latest
158
+ 5a74e71 Gemfile - Bump alt comms to latest
159
+ 3b76005 Merge pull request #589 from ninp0/master
160
+ 8b7f2a5 Gemfile - Bump alt comms to latest
161
+ 26c0ca2 Merge pull request #588 from ninp0/master
162
+ 79ad44c Gemfile - Bump alt comms to latest
163
+ a8d7425 Merge pull request #587 from ninp0/master
164
+ 97a5e0e Gemfile - Bump alt comms to latest
165
+ 25980d4 Merge pull request #586 from ninp0/master
166
+ 35679cc Gemfile - Bump alt comms to latest
167
+ ab25b41 Merge pull request #585 from ninp0/master
168
+ d6c8ec9 Gemfile - Bump alt comms to latest
169
+ 72a02ca Merge pull request #584 from ninp0/master
170
+ 5ad2a4b Gemfile - Bump alt comms to latest
171
+ 79950a3 Merge pull request #583 from ninp0/master
172
+ 087ab5b Gemfile - Bump alt comms to latest
173
+ fd0be6d Merge pull request #582 from ninp0/master
174
+ 1a798d8 Gemfile - Bump alt comms to latest
175
+ 082aaf8 Merge pull request #581 from ninp0/master
176
+ ae5c290 Gemfile - Bump alt comms to latest
177
+ cdf7b22 Merge pull request #580 from ninp0/master
178
+ 0897768 Gemfile - Bump alt comms to latest
179
+ 295a0d0 Merge pull request #579 from ninp0/master
180
+ da8e763 Replace request.pentest@0dayinc.com w/ support@0dayinc.com for all #authors methods and #rubocop tweaks
181
+ f7de536 Merge pull request #578 from ninp0/master
182
+ d412c52 Gemfile - Bump alt comms to latest
183
+ c6c15f0 Merge pull request #577 from ninp0/master
184
+ 892937f Gemfile - Bump alt comms to latest
185
+ 4205355 Merge pull request #576 from ninp0/master
186
+ 0b9db19 Gemfile - Bump alt comms to latest
187
+ fdf4546 Merge pull request #575 from ninp0/master
188
+ 66268ac Gemfile - Bump alt comms to latest
189
+ 43fa953 Merge pull request #574 from ninp0/master
190
+ 3575846 Merge pull request #573 from ninp0/master
data/Gemfile CHANGED
@@ -20,9 +20,9 @@ gem 'barby', '0.6.9'
20
20
  gem 'base32', '0.3.4'
21
21
  gem 'brakeman', '6.1.2'
22
22
  gem 'bson', '5.0.0'
23
- gem 'bundler', '>=2.5.14'
23
+ gem 'bundler', '>=2.5.15'
24
24
  gem 'bundler-audit', '0.9.1'
25
- gem 'bunny', '2.22.0'
25
+ gem 'bunny', '2.23.0'
26
26
  gem 'colorize', '1.1.0'
27
27
  gem 'credit_card_validations', '6.2.0'
28
28
  gem 'eventmachine', '1.2.7'
@@ -47,9 +47,9 @@ gem 'jwt', '2.8.2'
47
47
  gem 'libusb', '0.7.1'
48
48
  gem 'luhn', '1.0.2'
49
49
  gem 'mail', '2.8.1'
50
- gem 'meshtastic', '0.0.70'
50
+ gem 'meshtastic', '0.0.72'
51
51
  gem 'metasm', '1.0.5'
52
- gem 'mongo', '2.20.0'
52
+ gem 'mongo', '2.20.1'
53
53
  gem 'msfrpc-client', '1.1.2'
54
54
  gem 'netaddr', '2.0.6'
55
55
  gem 'net-ldap', '0.19.0'
@@ -69,7 +69,7 @@ gem 'pry', '0.14.2'
69
69
  gem 'pry-doc', '1.5.0'
70
70
  gem 'rake', '13.2.1'
71
71
  gem 'rb-readline', '0.5.5'
72
- gem 'rbvmomi2', '3.7.1'
72
+ gem 'rbvmomi2', '3.8.0'
73
73
  gem 'rdoc', '6.7.0'
74
74
  gem 'rest-client', '2.1.0'
75
75
  gem 'rex', '2.0.13'
@@ -77,14 +77,14 @@ gem 'rmagick', '6.0.1'
77
77
  gem 'rqrcode', '2.2.0'
78
78
  gem 'rspec', '3.13.0'
79
79
  gem 'rtesseract', '3.1.3'
80
- gem 'rubocop', '1.64.1'
80
+ gem 'rubocop', '1.65.0'
81
81
  gem 'rubocop-rake', '0.6.0'
82
- gem 'rubocop-rspec', '3.0.1'
82
+ gem 'rubocop-rspec', '3.0.2'
83
83
  gem 'ruby-audio', '1.6.1'
84
84
  gem 'ruby-nmap', '1.0.3'
85
85
  gem 'ruby-saml', '1.16.0'
86
86
  gem 'rvm', '1.11.3.9'
87
- gem 'savon', '2.15.0'
87
+ gem 'savon', '2.15.1'
88
88
  gem 'selenium-devtools', '0.126.0'
89
89
  gem 'serialport', '1.3.2'
90
90
  # gem 'sinatra', '4.0.0'
data/README.md CHANGED
@@ -37,7 +37,7 @@ $ cd /opt/pwn
37
37
  $ ./install.sh
38
38
  $ ./install.sh ruby-gem
39
39
  $ pwn
40
- pwn[v0.5.199]:001 >>> PWN.help
40
+ pwn[v0.5.201]:001 >>> PWN.help
41
41
  ```
42
42
 
43
43
  [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -48,21 +48,21 @@ pwn[v0.5.199]:001 >>> PWN.help
48
48
  It's wise to update pwn often as numerous versions are released/week:
49
49
  ```
50
50
  $ rvm list gemsets
51
- $ rvm use ruby-3.3.3@pwn
51
+ $ rvm use ruby-3.3.4@pwn
52
52
  $ gem uninstall --all --executables pwn
53
53
  $ gem install --verbose pwn
54
54
  $ pwn
55
- pwn[v0.5.199]:001 >>> PWN.help
55
+ pwn[v0.5.201]:001 >>> PWN.help
56
56
  ```
57
57
 
58
58
  If you're using a multi-user install of RVM do:
59
59
  ```
60
60
  $ rvm list gemsets
61
- $ rvm use ruby-3.3.3@pwn
61
+ $ rvm use ruby-3.3.4@pwn
62
62
  $ rvmsudo gem uninstall --all --executables pwn
63
63
  $ rvmsudo gem install --verbose pwn
64
64
  $ pwn
65
- pwn[v0.5.199]:001 >>> PWN.help
65
+ pwn[v0.5.201]:001 >>> PWN.help
66
66
  ```
67
67
 
68
68
  PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
data/bin/pwn_sast CHANGED
@@ -92,6 +92,7 @@ begin
92
92
  HTTPAuthorizationHeader
93
93
  InnerHTML
94
94
  Keystore
95
+ LocalStorage
95
96
  LocationHash
96
97
  Log4J
97
98
  Logger
@@ -103,6 +104,7 @@ begin
103
104
  PHPTypeJuggling
104
105
  PomVersion
105
106
  Port
107
+ PostMessage
106
108
  PrivateKey
107
109
  Redirect
108
110
  ReDOS
data/etc/pwn.yaml.EXAMPLE CHANGED
@@ -36,5 +36,8 @@ meshtastic:
36
36
  LongFast: 'required - PSK for LongFast channel'
37
37
  PWN: 'required - PSK for pwn channel'
38
38
 
39
+ hunter:
40
+ api_key: 'hunter.how API Key'
41
+
39
42
  shodan:
40
43
  api_key: 'SHODAN API Key'