pwn 0.5.243 → 0.5.245

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f239e28f735812c0f63200b5c74a8ce632aa3ff96e946d07ad923f2711349fc5
-  data.tar.gz: '0381d788f3cf522a0a0bcab0ea5ff7256b1cd74d3fc000de667b1a8cdb647533'
+  metadata.gz: e6468d086af61cecc1e9163738374c7a1d49a9c6a27fe8488eea47e6420d4ca2
+  data.tar.gz: 773bb98a75a52f8f303ca3fbd7b3205125d55b9d13c19e4e807c810a15e890ac
 SHA512:
-  metadata.gz: 84d0b6109b724a7cbbfafe9cef68ba45aa3c7832d327bc78bd6795f801399b7d2593a8ebf86be7723e7778e0bff79fcf820600a8df30bdd8ddd05b50eb6f1d4b
-  data.tar.gz: af6312bc650ecd3ace7948ecc67eaf5121452f3bd7e435ce12d0be8828f08205ea945bce8d08dc44c02c5780241fe56fd3903b2261be55583ae9d2143aa6641c
+  metadata.gz: 6e7ef591a93a9ff49136941bae7e7334507e65bc5271e0c82216f17d39434c92d6566fd410d70ea446e8b8109f0a9fd317ba673aeb76cb87ed24202af7ff289f
+  data.tar.gz: b3229efc4c419ba3d5a0025ee764c122da0557db6c8490918e1dc1b9e8bc06c5805fa87413014d20a3185f472d3fe04701913d1fdba43360e783f580927b1893

data/Gemfile

@@ -41,13 +41,13 @@ gem 'htmlentities', '4.3.4'
 gem 'ipaddress', '0.8.3'
 gem 'jenkins_api_client2', '1.9.0'
 gem 'js-beautify', '0.1.8'
-gem 'json', '2.9.1'
+gem 'json', '2.10.1'
 gem 'jsonpath', '1.1.5'
 gem 'jwt', '2.10.1'
 gem 'libusb', '0.7.2'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.8.1'
-gem 'meshtastic', '0.0.99'
+gem 'meshtastic', '0.0.108'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.21.0'
 gem 'msfrpc-client', '1.1.2'
@@ -90,7 +90,7 @@ gem 'savon', '2.15.1'
 gem 'selenium-devtools', '0.132.0'
 # gem 'serialport', '1.3.2'
 # gem 'sinatra', '4.0.0'
-gem 'slack-ruby-client', '2.4.0'
+gem 'slack-ruby-client', '2.5.1'
 gem 'socksify', '1.7.1'
 gem 'spreadsheet', '1.3.3'
 gem 'sqlite3', '2.5.0'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.243]:001 >>> PWN.help
+pwn[v0.5.245]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.243]:001 >>> PWN.help
+pwn[v0.5.245]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.243]:001 >>> PWN.help
+pwn[v0.5.245]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/etc/pwn.yaml.EXAMPLE

@@ -27,7 +27,7 @@ irc:
     browser:
       pwn_rb: '/opt/pwn/lib/pwn/plugins/transparent_browser.rb'
       system_role_content: 'You are a browser.  You are a web browser that can be controlled by a human or AI agent'
-    ninja:
+    nimjeh:
       pwn_rb: ''
       system_role_content: 'You are a sarcastic hacker.  You find software zero day vulnerabilities. This involves analyzing source code, race conditions, application binaries, and network protocols from an offensive security perspective.'
     nmap:
@@ -39,7 +39,6 @@ irc:
 
 meshtastic:
   psks:
-    admin: 'required - PSK for admin channel'
     LongFast: 'required - PSK for LongFast channel'
     PWN: 'required - PSK for pwn channel'
 

data/lib/pwn/plugins/repl.rb

@@ -120,7 +120,7 @@ module PWN
         Pry::Commands.create_command 'pwn-irc' do
           description 'Initiate pwn.irc chat interface.'
 
-          def h1_scope
+          def top_h1_program_scope
             browser_obj = PWN::WWW::HackerOne.open(browser_type: :headless)
             h1_programs = PWN::WWW::HackerOne.get_bounty_programs(
               browser_obj: browser_obj,
@@ -128,18 +128,15 @@ module PWN
               suppress_progress: true
             )
             # Top 10 Programs
-            top_programs = h1_programs.sort_by { |s| s[:min_payout].delete('$').to_f }.reverse[0..9]
+            top_program = h1_programs.sort_by { |s| s[:min_payout].delete('$').to_f }.reverse.first
 
-            h1_scope_details = []
-            top_programs.each do |program|
-              program_name = program[:name]
-              this_h1_scope = PWN::WWW::HackerOne.get_scope_details(
-                program_name: program_name
-              )
-              h1_scope_details.push(this_h1_scope)
-            end
+            program_name = top_program[:name]
+            h1_scope_details = PWN::WWW::HackerOne.get_scope_details(
+              program_name: program_name
+            )
+            top_program_scope = h1_scope_details[:scope_details][:data][:team][:structured_scopes_search][:nodes]
 
-            h1_scope_details
+            top_program_scope
           rescue StandardError => e
             raise e
           ensure
@@ -227,14 +224,13 @@ module PWN
                 ! If PWN_Framework is defined, understand the purpose of the module and how it is used
                 ! Generate ruby examples using the capabilities of the PWN_Framework if applicable
                 ! `require 'pwn'` is the gem needed to using the PWN_Framework capabilities
-                ! Any agents with target_scope defined owns a portion of authorized targets in scope for exploitation
                 Your area of expertise is the following:
                 #{ai_system_role_content}
               "
 
               # Convention over Configuration \o/
               if nick == :h1
-                h1_scope_details = h1_scope
+                h1_scope_details = top_h1_program_scope
                 system_role_content = "
                   #{system_role_content}
                   target_scope :#{h1_scope_details}

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.243'
+  VERSION = '0.5.245'
 end

data/third_party/pwn_rdoc.jsonl

@@ -1222,6 +1222,7 @@
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.authors Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.close Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.close`: Supported Method Parameters\n\nbrowser_obj = PWN::WWW::HackerOne.close(\n\nbrowser_obj: 'required - browser_obj returned from #open method'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.get_bounty_programs Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.get_bounty_programs`: Supported Method Parameters\n\nprograms_arr = PWN::WWW::HackerOne.get_bounty_programs(\n\nbrowser_obj: 'required - browser_obj returned from #open method',\nproxy: 'optional - scheme://proxy_host:port || tor',\nmin_payouts_enabled: 'optional - only display programs where payouts are > $0.00 (defaults to false)',\nsuppress_progress: 'optional - suppress output (defaults to false)'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::WWW::HackerOne.get_hacktivity Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.get_hacktivity`: Supported Method Parameters\n\nhacktivity = PWN::WWW::HackerOne.get_hacktivity(\n\nprogram_name: 'required - program name from #get_bounty_programs method',\nproxy: 'optional - scheme://proxy_host:port || tor'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.get_scope_details Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.get_scope_details`: Supported Method Parameters\n\nscope_details = PWN::WWW::HackerOne.get_scope_details(\n\nprogram_name: 'required - program name from #get_bounty_programs method',\nproxy: 'optional - scheme://proxy_host:port || tor'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.help Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::WWW::HackerOne.login Usage"},{"role":"assistant","content":"`PWN::WWW::HackerOne.login`: Supported Method Parameters\n\nbrowser_obj = PWN::WWW::HackerOne.login(\n\nbrowser_obj: 'required - browser_obj returned from #open method',\nusername: 'required - username',\npassword: 'optional - passwd (will prompt if blank)'\n\n)\n"}]}

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.243
+  version: 0.5.245
 platform: ruby
 authors:
 - 0day Inc.
 bindir: bin
 cert_chain: []
-date: 2025-02-07 00:00:00.000000000 Z
+date: 2025-02-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -407,14 +407,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.1
+        version: 2.10.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.1
+        version: 2.10.1
 - !ruby/object:Gem::Dependency
   name: jsonpath
   requirement: !ruby/object:Gem::Requirement
@@ -491,14 +491,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.99
+        version: 0.0.108
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.99
+        version: 0.0.108
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -1051,14 +1051,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.4.0
+        version: 2.5.1
 - !ruby/object:Gem::Dependency
   name: socksify
   requirement: !ruby/object:Gem::Requirement