pwn 0.5.305 → 0.5.307

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7212f39e5a45f10409275c4a73a5c7adab8792e5cc0e23bd489741193ef7140a
-  data.tar.gz: 12bdcbd741a7757d8acb612757c7f7eab0aa8bb3f1029f060ce728e44d86c497
+  metadata.gz: 84d7508456ef5d3e90206c2c24e4c5cd5b9e00f2d0b73b1e173c9e728d5c73e0
+  data.tar.gz: ba77cd727eda78d699d225ed35e42440d33a46163413a98eee8351ba47d0036b
 SHA512:
-  metadata.gz: 7cb9c161c8fb78f1e5ce98f722b5b996af9c1500be12938ff7696a76be7fc8b12bc8715143b64d68d53e9ef7b943cdfd15ec26285e07333bdb4a0a88c197b2c9
-  data.tar.gz: dbe25739420029d73a4bec8d6a4f9a70ae26e355f016862f188683ca126d2496764e49a96751f470c5e043cb498f9aebd1051c05f9ec8ec5281741440857a8dd
+  metadata.gz: d5503a807ca026473e5adead9b6e75224eb174851cc7ffda6e449fc6dd924448a9395f11ad4aa4709c58c23a78c9ae2323946d3ef241455ce5e9e2f4b85982ca
+  data.tar.gz: 758bc5954f798c8602738c0081aca0e072d670d9e54d95ec3e78ea9c3ea641de0cb2eb6fd261f5462e81814a2b4024daca875e4635fad31f4beee2f53fe24e94

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.305]:001 >>> PWN.help
+pwn[v0.5.307]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.305]:001 >>> PWN.help
+pwn[v0.5.307]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.305]:001 >>> PWN.help
+pwn[v0.5.307]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -169,7 +169,9 @@ module PWN
             accept_insecure_certs: true
           )
 
+          # This is required for BiDi support
           options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -196,8 +198,9 @@ module PWN
             accept_insecure_certs: true
           )
 
-          # This is for bidi, once it's ready
-          # options.web_socket_url = true
+          # This is required for BiDi support
+          options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -259,8 +262,9 @@ module PWN
             accept_insecure_certs: true
           )
 
-          # This is for bidi, once it's ready
-          # options.web_socket_url = true
+          # This is required for BiDi support
+          options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -283,8 +287,9 @@ module PWN
             accept_insecure_certs: true
           )
 
-          # This is for bidi, once it's ready
-          # options.web_socket_url = true
+          # This is required for BiDi support
+          options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -327,17 +332,15 @@ module PWN
         if devtools_supported.include?(browser_type)
           if devtools
             driver = browser_obj[:browser].driver
-            browser_obj[:devtools] = driver.devtools
-
-            browser_obj[:devtools].send_cmd('DOM.enable')
-            browser_obj[:devtools].send_cmd('Log.enable')
-            browser_obj[:devtools].send_cmd('Network.enable')
-            browser_obj[:devtools].send_cmd('Page.enable')
-            browser_obj[:devtools].send_cmd('Runtime.enable')
-            browser_obj[:devtools].send_cmd('Security.enable')
-
             chrome_browser_types = %i[chrome headless_chrome]
             if chrome_browser_types.include?(browser_type)
+              browser_obj[:devtools] = driver.devtools
+              browser_obj[:devtools].send_cmd('DOM.enable')
+              browser_obj[:devtools].send_cmd('Log.enable')
+              browser_obj[:devtools].send_cmd('Network.enable')
+              browser_obj[:devtools].send_cmd('Page.enable')
+              browser_obj[:devtools].send_cmd('Runtime.enable')
+              browser_obj[:devtools].send_cmd('Security.enable')
               browser_obj[:devtools].send_cmd('Debugger.enable')
               browser_obj[:devtools].send_cmd('DOMStorage.enable')
               browser_obj[:devtools].send_cmd('DOMSnapshot.enable')
@@ -345,6 +348,7 @@ module PWN
 
             firefox_browser_types = %i[firefox headless_firefox]
             if firefox_browser_types.include?(browser_type)
+              browser_obj[:devtools] = driver.bidi
               # browser_obj[:devtools].send_cmd(
               #   'EventBreakpoints.setInstrumentationBreakpoint',
               #   eventName: 'script'
@@ -352,7 +356,7 @@ module PWN
             end
 
             # Future BiDi API that's more universally supported across browsers
-            # browser_obj[:bidi] = driver.bidi
+            browser_obj[:bidi] = driver.bidi
 
             jmp_devtools_panel(browser_obj: browser_obj, panel: :elements)
           end
@@ -489,6 +493,67 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # console_resp = PWN::Plugins::TransparentBrowser.enable_dom_mutations(
+      #   browser_obj: browser_obj1,
+      #   target: 'optional - target JavaScript node to observe (defaults to document.body)'
+      # )
+
+      public_class_method def self.enable_dom_mutations(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        target = opts[:target] ||= 'document.body'
+
+        js = "
+          // Select the target node to observe
+          const targetNode;
+          targetNode = document.getElementById('#{target}');
+          if (!targetNode) {
+            targetNode = document.body; // Fallback to body if target not found
+          }
+
+          // Configuration for observer
+          const config = { attributes: true, childList: true, subtree: true };
+
+          // Callback for mutations
+          const callback = (mutationList, observer) => {
+            for (const mutation of mutationList) {
+              if (mutation.type === 'childList') {
+                console.log('Child node added/removed:', mutation);
+              } else if (mutation.type === 'attributes') {
+                console.log(`Attribute ${mutation.attributeName} modified:`, mutation);
+              }
+            }
+          };
+
+          // Create and start observer
+          const observer = new MutationObserver(callback);
+          observer.observe(targetNode, config);
+
+          // Later, stop observing if needed
+          // observer.disconnect();
+        "
+        console(browser_obj: browser_obj, js: js)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # console_resp = PWN::Plugins::TransparentBrowser.disable_dom_mutations(
+      #   browser_obj: browser_obj1
+      # )
+
+      public_class_method def self.disable_dom_mutations(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        js = 'observer.disconnect();'
+        console(browser_obj: browser_obj, js: js)
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::TransparentBrowser.update_about_config(
       #   browser_obj: browser_obj1,
@@ -981,7 +1046,7 @@ module PWN
           * All DevTools Commands can be found here:
           * https://chromedevtools.github.io/devtools-protocol/
           * Examples
-          devtools = browser.driver.devtools
+          devtools = browser_obj1[:devtools]
           puts devtools.public_methods
           puts devtools.instance_variables
           puts devtools.instance_variable_get('@session_id')
@@ -1077,6 +1142,14 @@ module PWN
             js: 'required - JavaScript expression to evaluate'
           )
 
+          console_resp = #{self}.enable_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          console_resp = #{self}.disable_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
           #{self}.update_about_config(
             browser_obj: 'required - browser_obj returned from #open method)',
             key: 'required - key to update in about:config',

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.305'
+  VERSION = '0.5.307'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.305
+  version: 0.5.307
 platform: ruby
 authors:
 - 0day Inc.