pwn 0.5.287 → 0.5.288

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6078dc6421e6cce0d193a41cbe3d1e2e0d0ecdfc7abe6d98d188799192fa4d18
-  data.tar.gz: 6518ccac383f48beedda04b02698e714a412fd9354ba5924a8dc981f0e291fef
+  metadata.gz: 508456a1574ce4415f503cb7b90f5a5c34678fa6398d9e09ce312a46444f5afe
+  data.tar.gz: 736271d79f7dd72c16c516174e7c8777ecaba0727f85cc83df7fc2292d4f544a
 SHA512:
-  metadata.gz: 47c781dc941c72f57a1dca2faa4ca2adf024870d8b158b8eaeb9c8563b864f3d6d3fdb6de2e3f564c245928dc1d24407881569bceae227e868cf68a21ad7ca18
-  data.tar.gz: 79122ed05b2659afde9992546d8f9819536f2848a9293b076b81552752f4d779c90dc3428993073ba46bba0245c0c5c3cf5c29eb45c89ed2cad07ce9cfe2dc43
+  metadata.gz: fd2115ef1abc7ec0351b0f780e8aa84e3402e277e4347a5c028fb498e803ab9ce12d15057cd16d87ee5dbedf37b7acd191b32a7b72bdc43658adddc197d409f1
+  data.tar.gz: d72b966e23bca8f3c57e2e08b680e4f8b166c9ba5c081991dda2489150de0df8d853ea586239677b1e25f1974393631c2c9a21b4e7e2ba4c6e98d328504c8471

data/Gemfile

@@ -43,7 +43,7 @@ gem 'jenkins_api_client2', '1.9.0'
 gem 'js-beautify', '0.1.8'
 gem 'json', '2.12.2'
 gem 'jsonpath', '1.1.5'
-gem 'jwt', '3.1.1'
+gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.8.1'
@@ -87,13 +87,13 @@ gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.15.1'
-gem 'selenium-devtools', '0.137.0'
+gem 'selenium-devtools', '0.138.0'
 # gem 'serialport', '1.3.2'
 # gem 'sinatra', '4.0.0'
 gem 'slack-ruby-client', '2.6.0'
 gem 'socksify', '1.7.1'
 gem 'spreadsheet', '1.3.4'
-gem 'sqlite3', '2.7.0'
+gem 'sqlite3', '2.7.1'
 gem 'thin', '2.0.1'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.287]:001 >>> PWN.help
+pwn[v0.5.288]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.287]:001 >>> PWN.help
+pwn[v0.5.288]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.287]:001 >>> PWN.help
+pwn[v0.5.288]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/jira_server.rb

@@ -86,12 +86,36 @@ module PWN
         spinner.stop
       end
 
+      # Supported Method Parameters::
+      # all_fields = PWN::Plugins::JiraServer.get_all_fields(
+      #   base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
+      #   token: 'required - bearer token'
+      # )
+
+      public_class_method def self.get_all_fields(opts = {})
+        base_api_uri = opts[:base_api_uri]
+
+        token = opts[:token]
+        token ||= PWN::Plugins::AuthenticationHelper.mask_password(
+          prompt: 'Personal Access Token'
+        )
+
+        rest_call(
+          base_api_uri: base_api_uri,
+          token: token,
+          rest_call: 'field',
+          params: params
+        )
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # issue_resp = PWN::Plugins::JiraServer.get_issue(
       #   base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
       #   token: 'required - bearer token',
       #   issue: 'required - issue to lookup (e.g. Bug, Issue, Story, or Epic ID)',
-      #   params: 'optional - additional parameters to pass in the URI'
+      #   params: 'optional - additional parameters to pass in the URI (e.g. fields, expand, etc.)'
       # )
 
       public_class_method def self.get_issue(opts = {})
@@ -118,31 +142,64 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # jira_resp = PWN::Plugins::JiraServer.manual_call(
+      # issue_resp = PWN::Plugins::JiraServer.create_issue(
       #   base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
       #   token: 'required - bearer token',
-      #   path: 'required - API path to call, without beginning forward slash',
-      #   params: 'optional - additional parameters to pass in the URI'
+      #   project_key: 'required - project key (e.g. PWN)',
+      #   summary: 'required - summary of the issue (e.g. Epic for PWN-1337)',
+      #   issue_type: 'required - issue type (e.g. :epic, :story, :bug)',
+      #   description: 'optional - description of the issue',
+      #   additional_fields: 'optional - additional fields to set in the issue (e.g. labels, components, custom fields, etc.)'
       # )
 
-      public_class_method def self.manual_call(opts = {})
+      public_class_method def self.create_issue(opts = {})
         base_api_uri = opts[:base_api_uri]
 
         token = opts[:token]
         token ||= PWN::Plugins::AuthenticationHelper.mask_password(
           prompt: 'Personal Access Token'
         )
+        project_key = opts[:project_key]
+        raise 'ERROR: project_key cannot be nil.' if project_key.nil?
 
-        path = opts[:path]
-        params = opts[:params]
+        summary = opts[:summary]
+        raise 'ERROR: summary cannot be nil.' if summary.nil?
+
+        issue_type = opts[:issue_type]
+        raise 'ERROR: issue_type values must be one of :epic, :story, or :bug.' unless %i[epic story bug].include?(issue_type)
 
-        raise 'ERROR: path cannot be nil.' if path.nil?
+        description = opts[:description]
+
+        additional_fields = opts[:additional_fields] ||= { fields: {} }
+
+        all_fields = get_all_fields(base_api_uri: base_api_uri, token: token)
+        epic_name_field_key = all_fields.find { |field| field[:name] == 'Epic Name' }[:id]
+
+        epic_name = summary
+
+        http_body = {
+          fields: {
+            project: {
+              key: project_key
+            },
+            summary: summary,
+            issuetype: {
+              name: issue_type.to_s.capitalize
+            },
+            "#{epic_name_filed_key}": epic_name,
+            description: description
+          }
+        }
+
+        http_body[:fields].merge!(additional_fields[:fields])
 
         rest_call(
+          http_method: :post,
           base_api_uri: base_api_uri,
           token: token,
-          rest_call: path,
-          params: params
+          rest_call: "issue/#{issue}",
+          params: params,
+          http_body: http_body
         )
       rescue StandardError => e
         raise e
@@ -160,18 +217,26 @@ module PWN
 
       public_class_method def self.help
         puts "USAGE:
+          all_fields = #{self}.get_all_fields(
+            base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
+            token: 'required - bearer token'
+          )
+
           issue_resp = #{self}.get_issue(
-          base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
+            base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
             token: 'required - bearer token',
             issue: 'required - issue to lookup (e.g. Bug, Issue, Story, or Epic ID)',
             params: 'optional - additional parameters to pass in the URI'
           )
 
-          jira_resp = #{self}.manual_call(
-          base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
+          issue_resp = #{self}.create_issue(
+            base_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',
             token: 'required - bearer token',
-            path: 'required - API path to call, without beginning forward slash',
-            params: 'optional - additional parameters to pass in the URI'
+            project_key: 'required - project key (e.g. PWN)',
+            summary: 'required - summary of the issue (e.g. Epic for PWN-1337)',
+            issue_type: 'required - issue type (e.g. :epic, :story, :bug)',
+            description: 'optional - description of the issue',
+            additional_fields: 'optional - additional fields to set in the issue (e.g. labels, components, custom fields, etc.)'
           )
 
           **********************************************************************

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.287'
+  VERSION = '0.5.288'
 end

data/third_party/pwn_rdoc.jsonl

@@ -665,9 +665,9 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::Jenkins.list_nested_jobs Usage"},{"role":"assistant","content":"`PWN::Plugins::Jenkins.list_nested_jobs`: Supported Method Parameters\n\nPWN::Plugins::Jenkins.list_nested_jobs(\n\njenkins_obj: 'required jenkins_obj returned from #connect method',\nview_path: 'required view path to list jobs'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Jenkins.list_nested_views Usage"},{"role":"assistant","content":"`PWN::Plugins::Jenkins.list_nested_views`: Supported Method Parameters\n\nPWN::Plugins::Jenkins.list_nested_views(\n\njenkins_obj: 'required jenkins_obj returned from #connect method',\nview_path: 'required view path list sub-views'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
-{"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.get_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.get_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraServer.get_issue(\n\nbase_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',\ntoken: 'required - bearer token',\nissue: 'required - issue to lookup'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.get_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.get_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraServer.get_issue(\n\nbase_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',\ntoken: 'required - bearer token',\nissue: 'required - issue to lookup (e.g. Bug, Issue, Story, or Epic ID)',\nparams: 'optional - additional parameters to pass in the URI'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.help Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.help`: "}]}
-{"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.manual_call Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.manual_call`: Supported Method Parameters\n\njira_resp = PWN::Plugins::JiraServer.manual_call(\n\nbase_api_uri: 'required - base URI for Jira (e.g. https:/corp.jira.com/rest/api/latest)',\ntoken: 'required - bearer token',\npath: 'required - API path to call, without beginning forward slash'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.manual_call Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.manual_call`: Supported Method Parameters\n\njira_resp = PWN::Plugins::JiraServer.manual_call(\n\nbase_api_uri: 'required - base URI for Jira (e.g. https:/jira.corp.com/rest/api/latest)',\ntoken: 'required - bearer token',\npath: 'required - API path to call, without beginning forward slash',\nparams: 'optional - additional parameters to pass in the URI'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraServer.rest_call Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraServer.rest_call`: Supported Method Parameters\n\nrest_call(\n\ntoken: 'required - bearer token',\nhttp_method: 'optional HTTP method (defaults to GET)',\nrest_call: 'required rest call to make per the schema',\nparams: 'optional params passed in the URI or HTTP Headers',\nhttp_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Log.append Usage"},{"role":"assistant","content":"`PWN::Plugins::Log.append`: Supported Method Parameters\n\nPWN::Log.create( )\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Log.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::Log.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.287
+  version: 0.5.288
 platform: ruby
 authors:
 - 0day Inc.
@@ -435,14 +435,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.1
+        version: 3.1.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.1
+        version: 3.1.2
 - !ruby/object:Gem::Dependency
   name: libusb
   requirement: !ruby/object:Gem::Requirement
@@ -1037,14 +1037,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.0
+        version: 0.138.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.0
+        version: 0.138.0
 - !ruby/object:Gem::Dependency
   name: slack-ruby-client
   requirement: !ruby/object:Gem::Requirement
@@ -1093,14 +1093,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 2.7.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 2.7.1
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement