pwn 0.5.254 → 0.5.256

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 64d8af414630ccaa72fbcd4e9f8cb2a3578fe75ed4eb85431ac6a6b82fc3050f
-  data.tar.gz: cf8b2554f1bca1cb6ab010f05c234d8809f106a5f49cb1bd0b6b2a72a470ea96
+  metadata.gz: ec288d693aeb1ac636b660f94c0eb76b38af996b1da19ee254658ca5abfe2f0b
+  data.tar.gz: 8273e39021d56970afdd9b10269411c6b1273f2d03efb712d5a36b50c91befc7
 SHA512:
-  metadata.gz: 640f2ee1f7586deba37913a29ed9987d48d01783117a1b334b6f44f8143473a1598fe550af08302a9d79e9c90a4dbd7ed4f13a42700864252eefdfe8095931a7
-  data.tar.gz: 15ce743cc3f513318413139b32c04e8204e98075ff75e060fde5792cbc43303ab7bc3eee8e9729afd0fc3e510d96c24543ea80792a95a786e6720dde679826c0
+  metadata.gz: f3b92960031463e117224044902eed1d8b83d2a76e9013fc7dc35e5f5fc1e05fd5e538a758df78c23a6d8ab7af2d511a344919fc03c42c1bdcaf61333f1f7dd5
+  data.tar.gz: 55fd07ad96fe4680093d33c42365f3b888d88e74ec4d74afed22ccb494cf7f0954a62d4aa9889ac8d3811f3033020f57e5301cb13f4c65eb4004e7b18f8afe25

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2025-02-15 22:50:15 UTC using RuboCop version 1.72.1.
+# on 2025-04-21 18:26:41 UTC using RuboCop version 1.75.2.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -41,7 +41,7 @@ Lint/RedundantTypeConversion:
     - 'lib/pwn/plugins/jenkins.rb'
     - 'lib/pwn/plugins/repl.rb'
 
-# Offense count: 320
+# Offense count: 319
 # This cop supports safe autocorrection (--autocorrect).
 # Configuration parameters: AutoCorrect.
 Lint/UselessAssignment:
@@ -173,10 +173,30 @@ Style/RedundantBegin:
 
 # Offense count: 94
 # This cop supports safe autocorrection (--autocorrect).
+# Configuration parameters: AllowedMethods.
+# AllowedMethods: nonzero?
 Style/RedundantCondition:
   Exclude:
     - 'lib/pwn/plugins/packet.rb'
 
+# Offense count: 13
+# This cop supports safe autocorrection (--autocorrect).
+Style/RedundantParentheses:
+  Exclude:
+    - 'lib/pwn/sast/banned_function_calls_c.rb'
+    - 'lib/pwn/sast/cmd_execution_java.rb'
+    - 'lib/pwn/sast/cmd_execution_python.rb'
+    - 'lib/pwn/sast/cmd_execution_ruby.rb'
+    - 'lib/pwn/sast/cmd_execution_scala.rb'
+    - 'lib/pwn/sast/deserial_java.rb'
+    - 'lib/pwn/sast/factory.rb'
+    - 'lib/pwn/sast/log4j.rb'
+    - 'lib/pwn/sast/logger.rb'
+    - 'lib/pwn/sast/php_input_mechanisms.rb'
+    - 'lib/pwn/sast/php_type_juggling.rb'
+    - 'lib/pwn/sast/throw_errors.rb'
+    - 'lib/pwn/sast/type_script_type_juggling.rb'
+
 # Offense count: 12
 # This cop supports safe autocorrection (--autocorrect).
 Style/RedundantStringEscape:

data/Gemfile

@@ -56,7 +56,7 @@ gem 'net-ldap', '0.19.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.5.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.18.7'
+gem 'nokogiri', '1.18.8'
 gem 'nokogiri-diff', '0.3.0'
 # gem 'oauth2', '2.0.9'
 gem 'oily_png', '1.2.1'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.254]:001 >>> PWN.help
+pwn[v0.5.256]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.254]:001 >>> PWN.help
+pwn[v0.5.256]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.254]:001 >>> PWN.help
+pwn[v0.5.256]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn_serial_msr206

@@ -36,18 +36,20 @@ OptionParser.new do |options|
   end
 end.parse!
 
-if opts.empty?
-  puts `#{File.basename($PROGRAM_NAME)} --help`
-  exit 1
-end
+# if opts.empty?
+#   puts `#{File.basename($PROGRAM_NAME)} --help`
+#   exit 1
+# end
 
 begin
-  block_dev = opts[:block_dev] if File.exist?(opts[:block_dev])
-  baud = opts[:baud]
-  data_bits = opts[:data_bits]
-  stop_bits = opts[:stop_bits]
-  parity = opts[:parity]
-  flow_control = opts[:flow_control]
+  block_dev = opts[:block_dev] ||= '/dev/ttyUSB0'
+  raise "ERROR: Block device not found: #{block_dev}" unless File.exist?(block_dev)
+
+  baud = opts[:baud] ||= 9_600
+  data_bits = opts[:data_bits] ||= 8
+  stop_bits = opts[:stop_bits] ||= 1
+  parity = opts[:parity] ||= 'none'
+  flow_control = opts[:flow_control] ||= 'soft'
 
   msr206_obj = PWN::Plugins::MSR206.connect(
     block_dev: block_dev,
@@ -59,9 +61,9 @@ begin
   )
 
   puts "- Welcome to #{File.basename($PROGRAM_NAME)} -"
-  puts "Connected via: #{block_dev} @ #{msr206_obj[:serial_conn].modem_params}"
-  puts "Flow Control: #{msr206_obj[:serial_conn].flow_control}"
-  puts "Signals: #{msr206_obj[:serial_conn].signals}"
+  # puts "Connected via: #{block_dev} @ #{msr206_obj[:serial_conn].modem_params}"
+  # puts "Flow Control: #{msr206_obj[:serial_conn].flow_control}"
+  # puts "Signals: #{msr206_obj[:serial_conn].signals}"
 
   exec_resp = PWN::Plugins::MSR206.exec(
     msr206_obj: msr206_obj,

data/lib/pwn/plugins/xxd.rb

@@ -77,7 +77,7 @@ module PWN
 
         hexdump.each do |key, value|
           key_int = key.to_i(16)
-          value[:hex] = Array.new(16, byte) if key_int >= start_int && key_int <= end_int
+          value[:hex] = Array.new(16, byte) if key_int.between?(start_int, end_int)
         end
 
         hexdump

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.254'
+  VERSION = '0.5.256'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.254
+  version: 0.5.256
 platform: ruby
 authors:
 - 0day Inc.
@@ -617,14 +617,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.18.7
+        version: 1.18.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.18.7
+        version: 1.18.8
 - !ruby/object:Gem::Dependency
   name: nokogiri-diff
   requirement: !ruby/object:Gem::Requirement