pwn 0.5.241 → 0.5.243

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87a70683f83a05ea447fa1b9826119ddf9f600b0ecd8c726cfd5e2abc1fb92b3
-  data.tar.gz: 24cc11b5d23b224eb2bde85d3334d30675b7b5e52b91573f5fb0bd744d6a7df5
+  metadata.gz: f239e28f735812c0f63200b5c74a8ce632aa3ff96e946d07ad923f2711349fc5
+  data.tar.gz: '0381d788f3cf522a0a0bcab0ea5ff7256b1cd74d3fc000de667b1a8cdb647533'
 SHA512:
-  metadata.gz: b82a1df9cb4b5728dc95888e48e2ce0d95293bc0973b8bd2cf0a8126b6f1396f133009d7596ec7d285d1cdc9e513e1ce89c9b43e936a98bac4ff5866f8bd865c
-  data.tar.gz: 0dc2535ddccb00073480f7a70a30a3ffe916e574b6221ead32b4ff3ab7ae2f1d4da8c6d015309f94b66a943599d9fef77911a4ef1844328ea3ada4a0c8dd6201
+  metadata.gz: 84d0b6109b724a7cbbfafe9cef68ba45aa3c7832d327bc78bd6795f801399b7d2593a8ebf86be7723e7778e0bff79fcf820600a8df30bdd8ddd05b50eb6f1d4b
+  data.tar.gz: af6312bc650ecd3ace7948ecc67eaf5121452f3bd7e435ce12d0be8828f08205ea945bce8d08dc44c02c5780241fe56fd3903b2261be55583ae9d2143aa6641c

data/Gemfile

@@ -54,7 +54,7 @@ gem 'msfrpc-client', '1.1.2'
 gem 'netaddr', '2.0.6'
 gem 'net-ldap', '0.19.0'
 gem 'net-openvpn', '0.8.7'
-gem 'net-smtp', '0.5.0'
+gem 'net-smtp', '0.5.1'
 gem 'nexpose', '7.3.0'
 gem 'nokogiri', '1.18.2'
 gem 'nokogiri-diff', '0.3.0'
@@ -65,21 +65,21 @@ gem 'os', '1.1.4'
 gem 'ostruct', '0.6.1'
 gem 'packetfu', '2.0.0'
 gem 'packetgen', '4.0.0'
-gem 'pdf-reader', '2.14.0'
+gem 'pdf-reader', '2.14.1'
 gem 'pg', '1.5.9'
 gem 'pry', '0.15.2'
 gem 'pry-doc', '1.5.0'
 gem 'rake', '13.2.1'
 gem 'rb-readline', '0.5.5'
 gem 'rbvmomi2', '3.8.0'
-gem 'rdoc', '6.11.0'
+gem 'rdoc', '6.12.0'
 gem 'rest-client', '2.1.0'
 gem 'rex', '2.0.13'
 gem 'rmagick', '6.1.1'
 gem 'rqrcode', '2.2.0'
 gem 'rspec', '3.13.0'
 gem 'rtesseract', '3.1.3'
-gem 'rubocop', '1.71.1'
+gem 'rubocop', '1.71.2'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '3.4.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.241]:001 >>> PWN.help
+pwn[v0.5.243]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.241]:001 >>> PWN.help
+pwn[v0.5.243]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.241]:001 >>> PWN.help
+pwn[v0.5.243]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.241'
+  VERSION = '0.5.243'
 end

data/lib/pwn/www/hacker_one.rb

@@ -195,7 +195,7 @@ module PWN
 
         json_resp = {
           name: program_name,
-          scope_details: json_resp_hash[:data][:team][:structured_scopes_search]
+          scope_details: json_resp_hash
         }
       rescue RestClient::ExceptionWithResponse => e
         if e.response
@@ -212,6 +212,145 @@ module PWN
         rest_client = nil if rest_client
         rest_request = nil if rest_request
       end
+
+      # Supported Method Parameters::
+      # hacktivity = PWN::WWW::HackerOne.get_hacktivity(
+      #   program_name: 'required - program name from #get_bounty_programs method',
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
+      # )
+
+      public_class_method def self.get_hacktivity(opts = {})
+        program_name = opts[:program_name]
+        proxy = opts[:proxy]
+
+        browser_obj = PWN::Plugins::TransparentBrowser.open(
+          browser_type: :rest,
+          proxy: proxy
+        )
+        rest_client = browser_obj[:browser]
+        rest_request = rest_client::Request
+
+        graphql_endpoint = 'https://hackerone.com/graphql'
+        headers = { content_type: 'application/json' }
+        # NOTE: If you copy this payload to the pwn REPL
+        # the triple dots ... attempt to execute commands
+        # <cough>Pry CE</cough>
+        payload = {
+          operationName: 'HacktivitySearchQuery',
+          variables: {
+            from: 0,
+            product_area: 'other',
+            product_feature: 'other',
+            queryString: "team:(\"#{program_name}\")",
+            size: 100,
+            sort: {
+              field: 'disclosed_at',
+              direction: 'DESC'
+            }
+          },
+          query: 'query HacktivitySearchQuery(
+              $queryString: String!,
+              $from: Int,
+              $size: Int,
+              $sort: SortInput!
+            ) {
+              me {
+                id
+                __typename
+              }
+              search(
+                index: CompleteHacktivityReportIndex
+                query_string: $queryString
+                from: $from
+                size: $size
+                sort: $sort
+              ) {
+                __typename
+                total_count
+                nodes {
+                  __typename
+                  ... on HacktivityDocument {
+                    id
+                    _id
+                    reporter {
+                      id
+                      username
+                      name
+                      __typename
+                    }
+                    cve_ids
+                    cwe
+                    severity_rating
+                    upvoted: upvoted_by_current_user
+                    public
+                    report {
+                      id
+                      databaseId: _id
+                      title
+                      substate
+                      url
+                      disclosed_at
+                      report_generated_content {
+                        id
+                        hacktivity_summary
+                        __typename
+                      }
+                      __typename
+                    }
+                    votes
+                    team {
+                      id
+                      handle
+                      name
+                      medium_profile_picture: profile_picture(size: medium)
+                      url
+                      currency
+                      __typename
+                    }
+                    total_awarded_amount
+                    latest_disclosable_action
+                    latest_disclosable_activity_at
+                    submitted_at
+                    disclosed
+                    has_collaboration
+                    __typename
+                  }
+                }
+              }
+            }
+          '
+        }
+
+        rest_response = rest_request.execute(
+          method: :post,
+          url: graphql_endpoint,
+          headers: headers,
+          payload: payload.to_json.delete("\n"),
+          verify_ssl: false
+        )
+
+        json_resp_hash = JSON.parse(rest_response.body, symbolize_names: true)
+
+        json_resp = {
+          name: program_name,
+          hacktivity: json_resp_hash
+        }
+      rescue RestClient::ExceptionWithResponse => e
+        if e.response
+          puts "HTTP RESPONSE CODE: #{e.response.code}"
+          puts "HTTP RESPONSE HEADERS:\n#{e.response.headers}"
+          puts "HTTP RESPONSE BODY:\n#{e.response.body}\n\n\n"
+        end
+
+        raise e
+      rescue StandardError => e
+        raise e
+      ensure
+        browser_obj = PWN::Plugins::TransparentBrowser.close(browser_obj: browser_obj) if browser_obj
+        rest_client = nil if rest_client
+        rest_request = nil if rest_request
+      end
+
       # Supported Method Parameters::
       # PWN::WWW::HackerOne.save_burp_target_config_file(
       #   programs_arr: 'required - array of hashes returned from #get_bounty_programs method',
@@ -367,7 +506,12 @@ module PWN
             suppress_progress: 'optional - suppress output (defaults to false)'
           )
 
-          scope_details = PWN::WWW::HackerOne.get_scope_details(
+          scope_details = #{self}.get_scope_details(
+            program_name: 'required - program name from #get_bounty_programs method',
+            proxy: 'optional - scheme://proxy_host:port || tor'
+          )
+
+          hacktivity = #{self}.get_hacktivity(
             program_name: 'required - program name from #get_bounty_programs method',
             proxy: 'optional - scheme://proxy_host:port || tor'
           )

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.241
+  version: 0.5.243
 platform: ruby
 authors:
 - 0day Inc.
 bindir: bin
 cert_chain: []
-date: 2025-02-03 00:00:00.000000000 Z
+date: 2025-02-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -589,14 +589,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.1
 - !ruby/object:Gem::Dependency
   name: nexpose
   requirement: !ruby/object:Gem::Requirement
@@ -729,14 +729,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.0
+        version: 2.14.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.0
+        version: 2.14.1
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -827,14 +827,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.11.0
+        version: 6.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.11.0
+        version: 6.12.0
 - !ruby/object:Gem::Dependency
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
@@ -925,14 +925,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.71.1
+        version: 1.71.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.71.1
+        version: 1.71.2
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement