pwn 0.5.259 → 0.5.261

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c06971d7679da9c7582786d7fdf1058eb60fffa8e7e3be9a0381e8c64c27669
-  data.tar.gz: 18a09f571db9d4e5f7eccf39a1377afbaacc2b6ac7cedbf065d7efb7dc7c35f5
+  metadata.gz: a9c22ecc8e5ce9a02da49a22288572cede1eeb407125769c905c39adcea333cc
+  data.tar.gz: e70d1286edf8cba818e2b8b194cd6bb2781f76b455a3e0ac06f0f84ae8eb3d0a
 SHA512:
-  metadata.gz: 0a5cb4e5cba87d9924fd7d8154993fc21c7b2846e219ec7b98437d275264d63e7b67dd811c618964afed1c50f43e3e47a2d497702eaa4ac932357d6c3865e0cb
-  data.tar.gz: cff2183bfc7eaaba2f5069ecaab994c25c3eb672555f885fade51b77b8c46e9ed81ca51c2f350bf390cb691b9edfc60a9c626bf999694abe9e2d487236e68ab7
+  metadata.gz: 230d6425720c0fc61dea6b0404cf81614b739b309edd4f6f92e8a6d83b625b7c74fb4464c39c02cb67d13580292347a5fc4723eb4d040cb395e51b9887ee693d
+  data.tar.gz: 321b015fc9e68ccd447718dc501d4e9f5bce0d4f2fae3a85cb6815617ba0da36eac3039df9f089d309bd38002fa114353c7483afb4b018b6fd00f1ebb253ea03

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2025-04-22 21:19:03 UTC using RuboCop version 1.75.3.
+# on 2025-04-22 22:15:44 UTC using RuboCop version 1.75.3.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -65,10 +65,11 @@ Metrics/BlockLength:
     - 'lib/pwn/plugins/repl.rb'
     - 'lib/pwn/sast/banned_function_calls_c.rb'
 
-# Offense count: 1
+# Offense count: 2
 # Configuration parameters: CountBlocks, CountModifierForms, Max.
 Metrics/BlockNesting:
   Exclude:
+    - 'lib/pwn/plugins/son_micro_rfid.rb'
     - 'lib/pwn/plugins/tor.rb'
 
 # Offense count: 1

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.259]:001 >>> PWN.help
+pwn[v0.5.261]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.259]:001 >>> PWN.help
+pwn[v0.5.261]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.259]:001 >>> PWN.help
+pwn[v0.5.261]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/msr206.rb

@@ -10,7 +10,7 @@ module PWN
     module MSR206
       # Logger instance for auditing and debugging
       private_class_method def self.logger
-        @logger ||= Logger.new('msr206.log')
+        @logger ||= Logger.new('/tmp/pwn-msr206.log')
       end
 
       # Supported Method Parameters::

data/lib/pwn/plugins/son_micro_rfid.rb

@@ -10,7 +10,7 @@ module PWN
     module SonMicroRFID
       # Logger instance for auditing and debugging
       private_class_method def self.logger
-        @logger ||= Logger.new('sonmicro_rfid.log')
+        @logger ||= Logger.new('/tmp/pwn-sonmicro_rfid.log')
       end
 
       # Supported Method Parameters::
@@ -335,11 +335,16 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::SonMicroRFID.read_tag(
-      #   son_micro_rfid_obj: 'required - son_micro_rfid_obj returned from #connect method'
+      #   son_micro_rfid_obj: 'required - son_micro_rfid_obj returned from #connect method',
+      #   authn: 'optional - authentication flag (default: false)',
+      #   key: 'optional - key for authentication (default: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF])'
       # )
 
       public_class_method def self.read_tag(opts = {})
         son_micro_rfid_obj = opts[:son_micro_rfid_obj]
+        authn = opts[:authn] ||= false
+        key = opts[:key] ||= [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF]
+
         logger.info('Starting read_tag')
 
         print 'Reader Activated. Please Scan Tag...'
@@ -349,7 +354,7 @@ module PWN
         )
 
         rfid_data = exec_resp.last
-        logger.info("\n#{rfid_data.inspect}")
+        logger.info(rfid_data)
 
         if rfid_data[:resp_code_desc] == :no_tag_present
           logger.error('No RFID tag detected')
@@ -366,21 +371,23 @@ module PWN
           )
           rfid_data[:block_data] = exec_resp.last[:block_data] if exec_resp.last[:resp_code_desc] == :read_success
         when :mifare_classic_1k, :mifare_classic_4k
-          exec_resp = exec(
-            son_micro_rfid_obj: son_micro_rfid_obj,
-            cmd: :authenticate,
-            params: { block: 0, key_type: :key_a, key: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF] }
-          )
-          if exec_resp.last[:resp_code_desc] == :auth_success
+          if authn
             exec_resp = exec(
               son_micro_rfid_obj: son_micro_rfid_obj,
-              cmd: :read_block,
-              params: { block: 0 }
+              cmd: :authenticate,
+              params: { block: 0, key_type: :key_a, key: key }
             )
-            rfid_data[:block_data] = exec_resp.last[:block_data] if exec_resp.last[:resp_code_desc] == :read_success
-          else
-            logger.error("Authentication failed for #{rfid_data[:resp_code_desc]}")
-            raise 'Authentication failed'
+            if exec_resp.last[:resp_code_desc] == :auth_success
+              exec_resp = exec(
+                son_micro_rfid_obj: son_micro_rfid_obj,
+                cmd: :read_block,
+                params: { block: 0 }
+              )
+              rfid_data[:block_data] = exec_resp.last[:block_data] if exec_resp.last[:resp_code_desc] == :read_success
+            else
+              logger.error("Authentication failed for #{rfid_data[:resp_code_desc]}")
+              raise 'Authentication failed'
+            end
           end
         end
 
@@ -397,12 +404,16 @@ module PWN
       # Supported Method Parameters::
       # PWN::Plugins::SonMicroRFID.write_tag(
       #   son_micro_rfid_obj: 'required - son_micro_rfid_obj returned from #connect method',
-      #   rfid_data: 'required - RFID data to write (see #read_tag for structure)'
+      #   rfid_data: 'required - RFID data to write (see #read_tag for structure)',
+      #   authn: 'optional - authentication flag (default: false)',
+      #   key: 'optional - key for authentication (default: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF])'
       # )
 
       public_class_method def self.write_tag(opts = {})
         son_micro_rfid_obj = opts[:son_micro_rfid_obj]
         rfid_data = opts[:rfid_data]
+        authn = opts[:authn] ||= false
+        key = opts[:key] ||= [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF]
         logger.info('Starting write_tag')
 
         unless rfid_data.is_a?(Hash) && rfid_data[:resp_code_desc] && rfid_data[:tag_id]
@@ -444,27 +455,29 @@ module PWN
             end
           end
         when :mifare_classic_1k, :mifare_classic_4k
-          exec_resp = exec(
-            son_micro_rfid_obj: son_micro_rfid_obj,
-            cmd: :authenticate,
-            params: { block: 0, key_type: :key_a, key: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF] }
-          )
-          if exec_resp.last[:resp_code_desc] == :auth_success
-            if rfid_data[:block_data]
-              data = rfid_data[:block_data].split.map { |b| b.to_i(16) }
-              exec_resp = exec(
-                son_micro_rfid_obj: son_micro_rfid_obj,
-                cmd: :write_block,
-                params: { block: 0, data: data }
-              )
-              unless exec_resp.last[:resp_code_desc] == :write_success
-                logger.error('Failed to write block for Classic')
-                raise 'Failed to write block'
+          if authn
+            exec_resp = exec(
+              son_micro_rfid_obj: son_micro_rfid_obj,
+              cmd: :authenticate,
+              params: { block: 0, key_type: :key_a, key: key }
+            )
+            if exec_resp.last[:resp_code_desc] == :auth_success
+              if rfid_data[:block_data]
+                data = rfid_data[:block_data].split.map { |b| b.to_i(16) }
+                exec_resp = exec(
+                  son_micro_rfid_obj: son_micro_rfid_obj,
+                  cmd: :write_block,
+                  params: { block: 0, data: data }
+                )
+                unless exec_resp.last[:resp_code_desc] == :write_success
+                  logger.error('Failed to write block for Classic')
+                  raise 'Failed to write block'
+                end
               end
+            else
+              logger.error("Authentication failed for #{rfid_data[:resp_code_desc]}")
+              raise 'Authentication failed'
             end
-          else
-            logger.error("Authentication failed for #{rfid_data[:resp_code_desc]}")
-            raise 'Authentication failed'
           end
         else
           logger.error("Unsupported tag type: #{rfid_data[:resp_code_desc]}")
@@ -720,12 +733,16 @@ module PWN
           )
 
           rfid_data = #{self}.read_tag(
-            son_micro_rfid_obj: 'required son_micro_rfid_obj returned from #connect method'
+            son_micro_rfid_obj: 'required son_micro_rfid_obj returned from #connect method',
+            authn: 'optional - authentication flag (default: false)',
+            key: 'optional - key for authentication (default: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF])'
           )
 
           rfid_data = #{self}.write_tag(
             son_micro_rfid_obj: 'required son_micro_rfid_obj returned from #connect method',
-            rfid_data: 'required - RFID data to write'
+            rfid_data: 'required - RFID data to write',
+            authn: 'optional - authentication flag (default: false)',
+            key: 'optional - key for authentication (default: [0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF])'
           )
 
           rfid_data = #{self}.backup_tag(

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.259'
+  VERSION = '0.5.261'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.259
+  version: 0.5.261
 platform: ruby
 authors:
 - 0day Inc.