pwn 0.5.275 → 0.5.276

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +5 -5
  3. data/README.md +3 -3
  4. data/bin/pwn_bdba_scan +1 -1
  5. data/lib/pwn/plugins/black_duck_binary_analysis.rb +9 -3
  6. data/lib/pwn/version.rb +1 -1
  7. metadata +11 -11
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1083ea73f73a01610719111219f8c3e7915de2af83fb6b0828d512fb18d5f7bb
4
- data.tar.gz: aec2a143fb5101c1a2ea4a2074cd8bc46c7389396be33aea90b7714b171732c9
3
+ metadata.gz: 15271f10bdb70966b130167ec81a81249c8db3e818587f4231fef33c8bf49c65
4
+ data.tar.gz: c7840a304777f72a2184f95fa202d21526aafa7462aac074df0fc0279154797d
5
5
  SHA512:
6
- metadata.gz: a600e3fc61a73d010bc991099061542b43b7216f266c07466b6539f4ee2496f2eb24e87795d32c16ddf4d227d0bee2f59bf518c35150117f4ffe5bee02a5a005
7
- data.tar.gz: 705b0d90b32f586731f1601ff79fbb24183bb3aad1548c692c56ded73d05f7426e7e81905e42418d1d017e99539c1e0dda1e3d21fde166f78f4bb8bb1013db05
6
+ metadata.gz: 585a7622370f8b8d818e79c4fd64d71265ca5a8a3427cfc9ea5508a4b081f54d80a01eb14503b74c72b89e1c8b61bda702739322615d008b5bf23b811b1e9381
7
+ data.tar.gz: e044ef3c7427ca5cdf4ef228646f3c373825d4b339df344f37c8abd57bfb05abe320171892f398a7ed121ba4a239862ccc11333076642bcc20c4078644043eda
data/Gemfile CHANGED
@@ -28,14 +28,14 @@ gem 'credit_card_validations', '7.0.0'
28
28
  gem 'eventmachine', '1.2.7'
29
29
  gem 'executable-hooks', '1.7.1'
30
30
  gem 'faker', '3.5.1'
31
- gem 'faye-websocket', '0.11.3'
31
+ gem 'faye-websocket', '0.12.0'
32
32
  gem 'ffi', '1.17.2'
33
33
  gem 'fftw3', '0.3'
34
34
  gem 'gdb', '1.0.0'
35
35
  gem 'gem-wrappers', '1.4.0'
36
36
  gem 'geocoder', '1.8.5'
37
37
  gem 'gist', '6.0.0'
38
- gem 'gruff', '0.26.0'
38
+ gem 'gruff', '0.27.0'
39
39
  # gem 'hidapi', '0.1.9'
40
40
  gem 'htmlentities', '4.3.4'
41
41
  gem 'ipaddress', '0.8.3'
@@ -77,9 +77,9 @@ gem 'rest-client', '2.1.0'
77
77
  gem 'rex', '2.0.13'
78
78
  gem 'rmagick', '6.1.1'
79
79
  gem 'rqrcode', '3.1.0'
80
- gem 'rspec', '3.13.0'
80
+ gem 'rspec', '3.13.1'
81
81
  gem 'rtesseract', '3.1.4'
82
- gem 'rubocop', '1.75.7'
82
+ gem 'rubocop', '1.75.8'
83
83
  gem 'rubocop-rake', '0.7.1'
84
84
  gem 'rubocop-rspec', '3.6.0'
85
85
  gem 'ruby-audio', '1.6.1'
@@ -90,7 +90,7 @@ gem 'savon', '2.15.1'
90
90
  gem 'selenium-devtools', '0.137.0'
91
91
  # gem 'serialport', '1.3.2'
92
92
  # gem 'sinatra', '4.0.0'
93
- gem 'slack-ruby-client', '2.5.2'
93
+ gem 'slack-ruby-client', '2.6.0'
94
94
  gem 'socksify', '1.7.1'
95
95
  gem 'spreadsheet', '1.3.4'
96
96
  gem 'sqlite3', '2.6.0'
data/README.md CHANGED
@@ -37,7 +37,7 @@ $ cd /opt/pwn
37
37
  $ ./install.sh
38
38
  $ ./install.sh ruby-gem
39
39
  $ pwn
40
- pwn[v0.5.275]:001 >>> PWN.help
40
+ pwn[v0.5.276]:001 >>> PWN.help
41
41
  ```
42
42
 
43
43
  [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
52
52
  $ gem uninstall --all --executables pwn
53
53
  $ gem install --verbose pwn
54
54
  $ pwn
55
- pwn[v0.5.275]:001 >>> PWN.help
55
+ pwn[v0.5.276]:001 >>> PWN.help
56
56
  ```
57
57
 
58
58
  If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
62
62
  $ rvmsudo gem uninstall --all --executables pwn
63
63
  $ rvmsudo gem install --verbose pwn
64
64
  $ pwn
65
- pwn[v0.5.275]:001 >>> PWN.help
65
+ pwn[v0.5.276]:001 >>> PWN.help
66
66
  ```
67
67
 
68
68
  PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
data/bin/pwn_bdba_scan CHANGED
@@ -44,7 +44,7 @@ OptionParser.new do |options|
44
44
  opts[:report_only] = o
45
45
  end
46
46
 
47
- options.on('-tTYPE', '--report-type=TYPE', '<Optional - Black Duck Binary Analysis Scan Report Type csv_libs|csv_vulns|pdf (Default: csv_vulns)>') do |t|
47
+ options.on('-tTYPE', '--report-type=TYPE', '<Optional - Black Duck Binary Analysis Scan Report Type csv_libs|csv_vulns|pdf|spdx (Default: csv_vulns)>') do |t|
48
48
  opts[:report_type] = t
49
49
  end
50
50
 
data/lib/pwn/plugins/black_duck_binary_analysis.rb CHANGED
@@ -269,7 +269,7 @@ module PWN
269
269
  # token: 'required - Bearer token',
270
270
  # product_id: 'required - product id',
271
271
  # output_path: 'required - path to output file',
272
- # type: 'optional - report type csv_libs||csv_vulns|pdf (Defaults to csv_vulns)'
272
+ # type: 'optional - report type csv_libs||csv_vulns|pdf|spdx (Defaults to csv_vulns)'
273
273
  # )
274
274
 
275
275
  public_class_method def self.generate_product_report(opts = {})
@@ -278,6 +278,7 @@ module PWN
278
278
  output_path = opts[:output_path]
279
279
  type = opts[:type] ||= :csv_vulns
280
280
 
281
+ params = {}
281
282
  case type.to_s.downcase.to_sym
282
283
  when :csv_libs
283
284
  rest_call = "product/#{product_id}/csv-libs"
@@ -285,13 +286,18 @@ module PWN
285
286
  rest_call = "product/#{product_id}/csv-vulns"
286
287
  when :pdf
287
288
  rest_call = "product/#{product_id}/pdf-report"
289
+ when :spdx
290
+ rest_call = "product/#{product_id}/"
291
+ params[:format] = 'spdx-2.3'
292
+ params[:include_paths] = 'true'
288
293
  else
289
294
  raise "ERROR: Invalid report type #{type}"
290
295
  end
291
296
 
292
297
  response = bd_bin_analysis_rest_call(
293
298
  token: token,
294
- rest_call: rest_call
299
+ rest_call: rest_call,
300
+ params: params
295
301
  )
296
302
 
297
303
  File.write(output_path, response.body)
@@ -689,7 +695,7 @@ module PWN
689
695
  token: 'required - Bearer token',
690
696
  product_id: 'required - product id',
691
697
  output_path: 'required - path to output file',
692
- type: 'optional - report type csv_libs||csv_vulns|pdf (Defaults to csv_vulns)'
698
+ type: 'optional - report type csv_libs||csv_vulns|pdf|spdx (Defaults to csv_vulns)'
693
699
  )
694
700
 
695
701
  response = #{self}.get_tasks(
data/lib/pwn/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module PWN
4
- VERSION = '0.5.275'
4
+ VERSION = '0.5.276'
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pwn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.275
4
+ version: 0.5.276
5
5
  platform: ruby
6
6
  authors:
7
7
  - 0day Inc.
@@ -239,14 +239,14 @@ dependencies:
239
239
  requirements:
240
240
  - - '='
241
241
  - !ruby/object:Gem::Version
242
- version: 0.11.3
242
+ version: 0.12.0
243
243
  type: :runtime
244
244
  prerelease: false
245
245
  version_requirements: !ruby/object:Gem::Requirement
246
246
  requirements:
247
247
  - - '='
248
248
  - !ruby/object:Gem::Version
249
- version: 0.11.3
249
+ version: 0.12.0
250
250
  - !ruby/object:Gem::Dependency
251
251
  name: ffi
252
252
  requirement: !ruby/object:Gem::Requirement
@@ -337,14 +337,14 @@ dependencies:
337
337
  requirements:
338
338
  - - '='
339
339
  - !ruby/object:Gem::Version
340
- version: 0.26.0
340
+ version: 0.27.0
341
341
  type: :runtime
342
342
  prerelease: false
343
343
  version_requirements: !ruby/object:Gem::Requirement
344
344
  requirements:
345
345
  - - '='
346
346
  - !ruby/object:Gem::Version
347
- version: 0.26.0
347
+ version: 0.27.0
348
348
  - !ruby/object:Gem::Dependency
349
349
  name: htmlentities
350
350
  requirement: !ruby/object:Gem::Requirement
@@ -897,14 +897,14 @@ dependencies:
897
897
  requirements:
898
898
  - - '='
899
899
  - !ruby/object:Gem::Version
900
- version: 3.13.0
900
+ version: 3.13.1
901
901
  type: :development
902
902
  prerelease: false
903
903
  version_requirements: !ruby/object:Gem::Requirement
904
904
  requirements:
905
905
  - - '='
906
906
  - !ruby/object:Gem::Version
907
- version: 3.13.0
907
+ version: 3.13.1
908
908
  - !ruby/object:Gem::Dependency
909
909
  name: rtesseract
910
910
  requirement: !ruby/object:Gem::Requirement
@@ -925,14 +925,14 @@ dependencies:
925
925
  requirements:
926
926
  - - '='
927
927
  - !ruby/object:Gem::Version
928
- version: 1.75.7
928
+ version: 1.75.8
929
929
  type: :runtime
930
930
  prerelease: false
931
931
  version_requirements: !ruby/object:Gem::Requirement
932
932
  requirements:
933
933
  - - '='
934
934
  - !ruby/object:Gem::Version
935
- version: 1.75.7
935
+ version: 1.75.8
936
936
  - !ruby/object:Gem::Dependency
937
937
  name: rubocop-rake
938
938
  requirement: !ruby/object:Gem::Requirement
@@ -1051,14 +1051,14 @@ dependencies:
1051
1051
  requirements:
1052
1052
  - - '='
1053
1053
  - !ruby/object:Gem::Version
1054
- version: 2.5.2
1054
+ version: 2.6.0
1055
1055
  type: :runtime
1056
1056
  prerelease: false
1057
1057
  version_requirements: !ruby/object:Gem::Requirement
1058
1058
  requirements:
1059
1059
  - - '='
1060
1060
  - !ruby/object:Gem::Version
1061
- version: 2.5.2
1061
+ version: 2.6.0
1062
1062
  - !ruby/object:Gem::Dependency
1063
1063
  name: socksify
1064
1064
  requirement: !ruby/object:Gem::Requirement