pwn 0.5.272 → 0.5.274

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6078f356520f36920cca45fc36a99a93a0afd6f85e94ac1d49f8dcfeeb977758
4
- data.tar.gz: 56a9e78485393d01d5904385395960a2bee20c4aac7cd02e242cd852aed8c0a0
3
+ metadata.gz: 28fcc5271b67076022390d4f7b49e84f2a42524d46a44acea64a8f80851a0c91
4
+ data.tar.gz: 321e49f1b2104c14fa31c74a3f842b812645017b2bcf1e702e07ae539f889542
5
5
  SHA512:
6
- metadata.gz: 0d798a11a08b938ec54b4d0737b549c656ef7ea3569c3ba45b031d2c70261c4c4786f18c7e9764e4fd588f2aaf1b6e480520081d8ed2ef51159a01e81b0c2e90
7
- data.tar.gz: 9f6ccfbddafdcc1e90047bd41202437646d0da359f517dfca6388aa3ed5a7b9c6da4dfcc6bb3aec4f408f44124694b7694a88ad42fbb43b6d21af10edfbab72b
6
+ metadata.gz: 9f7840e9297d430f29285ef1d5b04bd78c268d22a8e6e5844a7bbf50b1ab92b9109255dd11e11fc59583edb92970dce936922d3cd169e4a9b0293eb6b71c1e16
7
+ data.tar.gz: a260236a17031d0733fa4af40ae5f6c69e423e0dfb05d78a1874782b08fd4f7473ec72b13910e85cf142997e1386cc476283ceb865295c49fc90052c6b03cdd7
data/.ruby-version CHANGED
@@ -1 +1 @@
1
- 3.4.1
1
+ 3.4.4
data/Gemfile CHANGED
@@ -20,7 +20,7 @@ gem 'barby', '0.7.0'
20
20
  gem 'base32', '0.3.4'
21
21
  gem 'brakeman', '7.0.2'
22
22
  gem 'bson', '5.0.2'
23
- gem 'bundler', '>=2.6.8'
23
+ gem 'bundler', '>=2.6.9'
24
24
  gem 'bundler-audit', '0.9.2'
25
25
  gem 'bunny', '2.24.0'
26
26
  gem 'colorize', '1.1.0'
@@ -41,7 +41,7 @@ gem 'htmlentities', '4.3.4'
41
41
  gem 'ipaddress', '0.8.3'
42
42
  gem 'jenkins_api_client2', '1.9.0'
43
43
  gem 'js-beautify', '0.1.8'
44
- gem 'json', '2.11.3'
44
+ gem 'json', '2.12.2'
45
45
  gem 'jsonpath', '1.1.5'
46
46
  gem 'jwt', '2.10.1'
47
47
  gem 'libusb', '0.7.2'
@@ -68,18 +68,18 @@ gem 'packetgen', '4.1.0'
68
68
  gem 'pdf-reader', '2.14.1'
69
69
  gem 'pg', '1.5.9'
70
70
  gem 'pry', '0.15.2'
71
- gem 'pry-doc', '1.5.0'
71
+ gem 'pry-doc', '1.6.0'
72
72
  gem 'rake', '13.2.1'
73
73
  gem 'rb-readline', '0.5.5'
74
74
  gem 'rbvmomi2', '3.8.0'
75
- gem 'rdoc', '6.13.1'
75
+ gem 'rdoc', '6.14.0'
76
76
  gem 'rest-client', '2.1.0'
77
77
  gem 'rex', '2.0.13'
78
78
  gem 'rmagick', '6.1.1'
79
79
  gem 'rqrcode', '3.1.0'
80
80
  gem 'rspec', '3.13.0'
81
81
  gem 'rtesseract', '3.1.4'
82
- gem 'rubocop', '1.75.5'
82
+ gem 'rubocop', '1.75.7'
83
83
  gem 'rubocop-rake', '0.7.1'
84
84
  gem 'rubocop-rspec', '3.6.0'
85
85
  gem 'ruby-audio', '1.6.1'
@@ -87,7 +87,7 @@ gem 'ruby-nmap', '1.0.3'
87
87
  gem 'ruby-saml', '1.18.0'
88
88
  gem 'rvm', '1.11.3.9'
89
89
  gem 'savon', '2.15.1'
90
- gem 'selenium-devtools', '0.136.0'
90
+ gem 'selenium-devtools', '0.137.0'
91
91
  # gem 'serialport', '1.3.2'
92
92
  # gem 'sinatra', '4.0.0'
93
93
  gem 'slack-ruby-client', '2.5.2'
data/README.md CHANGED
@@ -37,7 +37,7 @@ $ cd /opt/pwn
37
37
  $ ./install.sh
38
38
  $ ./install.sh ruby-gem
39
39
  $ pwn
40
- pwn[v0.5.272]:001 >>> PWN.help
40
+ pwn[v0.5.274]:001 >>> PWN.help
41
41
  ```
42
42
 
43
43
  [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -48,21 +48,21 @@ pwn[v0.5.272]:001 >>> PWN.help
48
48
  It's wise to update pwn often as numerous versions are released/week:
49
49
  ```
50
50
  $ rvm list gemsets
51
- $ rvm use ruby-3.4.1@pwn
51
+ $ rvm use ruby-3.4.4@pwn
52
52
  $ gem uninstall --all --executables pwn
53
53
  $ gem install --verbose pwn
54
54
  $ pwn
55
- pwn[v0.5.272]:001 >>> PWN.help
55
+ pwn[v0.5.274]:001 >>> PWN.help
56
56
  ```
57
57
 
58
58
  If you're using a multi-user install of RVM do:
59
59
  ```
60
60
  $ rvm list gemsets
61
- $ rvm use ruby-3.4.1@pwn
61
+ $ rvm use ruby-3.4.4@pwn
62
62
  $ rvmsudo gem uninstall --all --executables pwn
63
63
  $ rvmsudo gem install --verbose pwn
64
64
  $ pwn
65
- pwn[v0.5.272]:001 >>> PWN.help
65
+ pwn[v0.5.274]:001 >>> PWN.help
66
66
  ```
67
67
 
68
68
  PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
data/lib/pwn/sast/csrf.rb CHANGED
@@ -109,7 +109,7 @@ module PWN
109
109
  {
110
110
  sast_module: self,
111
111
  section: 'MALICIOUS CODE PROTECTION',
112
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
112
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
113
113
  cwe_id: '352',
114
114
  cwe_uri: 'https://cwe.mitre.org/data/definitions/352.html'
115
115
  }
@@ -118,7 +118,7 @@ module PWN
118
118
  {
119
119
  sast_module: self,
120
120
  section: 'LEAST PRIVILEGE',
121
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-6',
121
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-06',
122
122
  cwe_id: '546',
123
123
  cwe_uri: 'https://cwe.mitre.org/data/definitions/546.html'
124
124
  }
data/lib/pwn/sast/eval.rb CHANGED
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'MALICIOUS CODE PROTECTION',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
115
115
  cwe_id: '95',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/95.html'
117
117
  }
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'MALICIOUS CODE PROTECTION',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
115
115
  cwe_id: '79',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
117
117
  }
@@ -112,7 +112,7 @@ module PWN
112
112
  {
113
113
  sast_module: self,
114
114
  section: 'MALICIOUS CODE PROTECTION',
115
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
115
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
116
116
  cwe_id: '79',
117
117
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
118
118
  }
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'MALICIOUS CODE PROTECTION',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
115
115
  cwe_id: '79',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
117
117
  }
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'MALICIOUS CODE PROTECTION',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
115
115
  cwe_id: '79',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
117
117
  }
@@ -119,7 +119,7 @@ module PWN
119
119
  {
120
120
  sast_module: self,
121
121
  section: 'VULNERABILITY SCANNING',
122
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=RA-5',
122
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=RA-05',
123
123
  cwe_id: '.0',
124
124
  cwe_uri: 'https://cwe.mitre.org/data/definitions/1104.html'
125
125
  }
data/lib/pwn/sast/port.rb CHANGED
@@ -117,7 +117,7 @@ module PWN
117
117
  {
118
118
  sast_module: self,
119
119
  section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
120
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-8',
120
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-08',
121
121
  cwe_id: '319',
122
122
  cwe_uri: 'https://cwe.mitre.org/data/definitions/319.html'
123
123
  }
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'MALICIOUS CODE PROTECTION',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
115
115
  cwe_id: '79',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
117
117
  }
@@ -110,7 +110,7 @@ module PWN
110
110
  {
111
111
  sast_module: self,
112
112
  section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
113
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=IA-7',
113
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=IA-07',
114
114
  cwe_id: '321',
115
115
  cwe_uri: 'https://cwe.mitre.org/data/definitions/321.html'
116
116
  }
@@ -112,7 +112,7 @@ module PWN
112
112
  {
113
113
  sast_module: self,
114
114
  section: 'LEAST PRIVILEGE',
115
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-6',
115
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-06',
116
116
  cwe_id: '601',
117
117
  cwe_uri: 'https://cwe.mitre.org/data/definitions/601.html'
118
118
  }
data/lib/pwn/sast/sudo.rb CHANGED
@@ -110,7 +110,7 @@ module PWN
110
110
  {
111
111
  sast_module: self,
112
112
  section: 'LEAST PRIVILEGE',
113
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-6',
113
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-06',
114
114
  cwe_id: '250',
115
115
  cwe_uri: 'https://cwe.mitre.org/data/definitions/250.html'
116
116
  }
@@ -124,7 +124,7 @@ module PWN
124
124
  {
125
125
  sast_module: self,
126
126
  section: 'LEAST PRIVILEGE',
127
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-6',
127
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-06',
128
128
  cwe_id: '546',
129
129
  cwe_uri: 'https://cwe.mitre.org/data/definitions/546.html'
130
130
  }
@@ -112,7 +112,7 @@ module PWN
112
112
  {
113
113
  sast_module: self,
114
114
  section: 'CRYPTOGRAPHIC MODULE AUTHENTICATION',
115
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=IA-7',
115
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=IA-07',
116
116
  cwe_id: '798',
117
117
  cwe_uri: 'https://cwe.mitre.org/data/definitions/798.html'
118
118
  }
@@ -111,7 +111,7 @@ module PWN
111
111
  {
112
112
  sast_module: self,
113
113
  section: 'VULNERABILITY SCANNING',
114
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=RA-5',
114
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=RA-05',
115
115
  cwe_id: '672',
116
116
  cwe_uri: 'https://cwe.mitre.org/data/definitions/672.html'
117
117
  }
@@ -110,7 +110,7 @@ module PWN
110
110
  {
111
111
  sast_module: self,
112
112
  section: 'MALICIOUS CODE PROTECTION',
113
- nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-3',
113
+ nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
114
114
  cwe_id: '79',
115
115
  cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
116
116
  }
data/lib/pwn/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module PWN
4
- VERSION = '0.5.272'
4
+ VERSION = '0.5.274'
5
5
  end
@@ -11,7 +11,7 @@ else
11
11
  pwn_root="${PWN_ROOT}"
12
12
  fi
13
13
 
14
- $screen_cmd "${apt} install -y rpm alien nsis gvmd redis-server greenbone-security-assistant ${assess_update_errors}"
14
+ $screen_cmd "${apt} install -y gvm ${assess_update_errors}"
15
15
  grok_error
16
16
 
17
17
  sudo systemctl enable redis-server
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pwn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.272
4
+ version: 0.5.274
5
5
  platform: ruby
6
6
  authors:
7
7
  - 0day Inc.
@@ -127,14 +127,14 @@ dependencies:
127
127
  requirements:
128
128
  - - ">="
129
129
  - !ruby/object:Gem::Version
130
- version: 2.6.8
130
+ version: 2.6.9
131
131
  type: :development
132
132
  prerelease: false
133
133
  version_requirements: !ruby/object:Gem::Requirement
134
134
  requirements:
135
135
  - - ">="
136
136
  - !ruby/object:Gem::Version
137
- version: 2.6.8
137
+ version: 2.6.9
138
138
  - !ruby/object:Gem::Dependency
139
139
  name: bundler-audit
140
140
  requirement: !ruby/object:Gem::Requirement
@@ -407,14 +407,14 @@ dependencies:
407
407
  requirements:
408
408
  - - '='
409
409
  - !ruby/object:Gem::Version
410
- version: 2.11.3
410
+ version: 2.12.2
411
411
  type: :runtime
412
412
  prerelease: false
413
413
  version_requirements: !ruby/object:Gem::Requirement
414
414
  requirements:
415
415
  - - '='
416
416
  - !ruby/object:Gem::Version
417
- version: 2.11.3
417
+ version: 2.12.2
418
418
  - !ruby/object:Gem::Dependency
419
419
  name: jsonpath
420
420
  requirement: !ruby/object:Gem::Requirement
@@ -771,14 +771,14 @@ dependencies:
771
771
  requirements:
772
772
  - - '='
773
773
  - !ruby/object:Gem::Version
774
- version: 1.5.0
774
+ version: 1.6.0
775
775
  type: :runtime
776
776
  prerelease: false
777
777
  version_requirements: !ruby/object:Gem::Requirement
778
778
  requirements:
779
779
  - - '='
780
780
  - !ruby/object:Gem::Version
781
- version: 1.5.0
781
+ version: 1.6.0
782
782
  - !ruby/object:Gem::Dependency
783
783
  name: rake
784
784
  requirement: !ruby/object:Gem::Requirement
@@ -827,14 +827,14 @@ dependencies:
827
827
  requirements:
828
828
  - - '='
829
829
  - !ruby/object:Gem::Version
830
- version: 6.13.1
830
+ version: 6.14.0
831
831
  type: :development
832
832
  prerelease: false
833
833
  version_requirements: !ruby/object:Gem::Requirement
834
834
  requirements:
835
835
  - - '='
836
836
  - !ruby/object:Gem::Version
837
- version: 6.13.1
837
+ version: 6.14.0
838
838
  - !ruby/object:Gem::Dependency
839
839
  name: rest-client
840
840
  requirement: !ruby/object:Gem::Requirement
@@ -925,14 +925,14 @@ dependencies:
925
925
  requirements:
926
926
  - - '='
927
927
  - !ruby/object:Gem::Version
928
- version: 1.75.5
928
+ version: 1.75.7
929
929
  type: :runtime
930
930
  prerelease: false
931
931
  version_requirements: !ruby/object:Gem::Requirement
932
932
  requirements:
933
933
  - - '='
934
934
  - !ruby/object:Gem::Version
935
- version: 1.75.5
935
+ version: 1.75.7
936
936
  - !ruby/object:Gem::Dependency
937
937
  name: rubocop-rake
938
938
  requirement: !ruby/object:Gem::Requirement
@@ -1037,14 +1037,14 @@ dependencies:
1037
1037
  requirements:
1038
1038
  - - '='
1039
1039
  - !ruby/object:Gem::Version
1040
- version: 0.136.0
1040
+ version: 0.137.0
1041
1041
  type: :runtime
1042
1042
  prerelease: false
1043
1043
  version_requirements: !ruby/object:Gem::Requirement
1044
1044
  requirements:
1045
1045
  - - '='
1046
1046
  - !ruby/object:Gem::Version
1047
- version: 0.136.0
1047
+ version: 0.137.0
1048
1048
  - !ruby/object:Gem::Dependency
1049
1049
  name: slack-ruby-client
1050
1050
  requirement: !ruby/object:Gem::Requirement
@@ -2346,7 +2346,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
2346
2346
  - !ruby/object:Gem::Version
2347
2347
  version: '0'
2348
2348
  requirements: []
2349
- rubygems_version: 3.6.8
2349
+ rubygems_version: 3.6.9
2350
2350
  specification_version: 4
2351
2351
  summary: Automated Security Testing for CI/CD Pipelines & Beyond
2352
2352
  test_files: []