pwn 0.5.306 → 0.5.308

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5eecd40e3449eadca23b11856941949081ad7b9b4d5153a817693979942fdf47
-  data.tar.gz: fe743f6692f9230f3d7e5beb335f4c98579256a77c716a4b16c64fe5249e963c
+  metadata.gz: 8cf8d3e6c50a8caa34200e9dee3323ac1c689ff2381db4a8b39a8cc51eb7f245
+  data.tar.gz: 82fd38322306d70277792942ed664bef3a03e0704a30fddbf54fcfc3a82c5a24
 SHA512:
-  metadata.gz: 6d8aac1d1769e24a9e5e0ac8ac2363910e5975752138d7d4568f8b275e3c8b8c6034f7ffe840d0e2ef3022ac4b449ea1f01e86e9a4427ab5c1ba362d3eb7c298
-  data.tar.gz: 6121482f2f382a7347e53259bd1d1426d4262b7ff337b45837239d942236558018da3a27caf79ea74b6dcce3c40284f5b48460cad9dd7e33052b655628116d3a
+  metadata.gz: e4e48ca74897cd2cbfe03f961b2922ad1c9d66cadb8c2ce831945e1a935cc227b81c6898991c9bea8b38a3218f14a892699f1766ed566949a99a4de8a8dfe167
+  data.tar.gz: d7a13a43336ed4bb3301f1c52faa60d771552078521036c8e1090843b3ec70b88c8b16b802ec2eca63fd06f56d4a5dae000d8df19bafed5040cdead98a48b851

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.306]:001 >>> PWN.help
+pwn[v0.5.308]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.306]:001 >>> PWN.help
+pwn[v0.5.308]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.306]:001 >>> PWN.help
+pwn[v0.5.308]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -171,6 +171,7 @@ module PWN
 
           # This is required for BiDi support
           options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -199,6 +200,7 @@ module PWN
 
           # This is required for BiDi support
           options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -262,6 +264,7 @@ module PWN
 
           # This is required for BiDi support
           options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -286,6 +289,7 @@ module PWN
 
           # This is required for BiDi support
           options.web_socket_url = true
+          options.add_preference('remote.active-protocols', 3)
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -489,6 +493,100 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # console_resp = PWN::Plugins::TransparentBrowser.enable_dom_mutations(
+      #   browser_obj: browser_obj1,
+      #   target: 'optional - target JavaScript node to observe (defaults to document.body)'
+      # )
+
+      public_class_method def self.enable_dom_mutations(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        target = opts[:target] ||= 'undefined'
+
+        jmp_devtools_panel(
+          browser_obj: browser_obj,
+          panel: :console
+        )
+
+        js = <<~JAVASCRIPT
+          // Select the target node to observe
+          const targetNode = document.getElementById(#{target}) || document.body;
+
+          // Configuration for observer
+          const config = { attributes: true, childList: true, subtree: true };
+
+          // Callback for mutations
+          const callback = (mutationList, observer) => {
+            for (const mutation of mutationList) {
+              if (mutation.type === 'childList') {
+                console.log('Child node added/removed:', mutation);
+              } else if (mutation.type === 'attributes') {
+                console.log(`Attribute ${mutation.attributeName} modified:`, mutation);
+              }
+            }
+          };
+
+          // Create and start observer
+          const observer = new MutationObserver(callback);
+          observer.observe(targetNode, config);
+        JAVASCRIPT
+
+        console(browser_obj: browser_obj, js: 'console.clear();')
+        browser = browser_obj[:browser]
+        browser.execute_script(js)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # console_resp = PWN::Plugins::TransparentBrowser.disable_dom_mutations(
+      #   browser_obj: browser_obj1
+      # )
+
+      public_class_method def self.disable_dom_mutations(opts = {})
+        browser_obj = opts[:browser_obj]
+        verify_devtools_browser(browser_obj: browser_obj)
+
+        jmp_devtools_panel(
+          browser_obj: browser_obj,
+          panel: :console
+        )
+
+        js = <<~JAVASCRIPT
+          // Select the target node to observe
+          const targetNode = document.getElementById(#{target}) || document.body;
+
+          // Configuration for observer
+          const config = { attributes: true, childList: true, subtree: true };
+
+          // Callback for mutations
+          const callback = (mutationList, observer) => {
+            for (const mutation of mutationList) {
+              if (mutation.type === 'childList') {
+                console.log('Child node added/removed:', mutation);
+              } else if (mutation.type === 'attributes') {
+                console.log(`Attribute ${mutation.attributeName} modified:`, mutation);
+              }
+            }
+          };
+
+          // Create and start observer
+          const observer = new MutationObserver(callback);
+          observer.observe(targetNode, config);
+
+          // Later, stop observing if needed
+          observer.disconnect();
+        JAVASCRIPT
+
+        console(browser_obj: browser_obj, js: 'console.clear();')
+        browser = browser_obj[:browser]
+        browser.execute_script(js)
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::TransparentBrowser.update_about_config(
       #   browser_obj: browser_obj1,
@@ -1077,6 +1175,14 @@ module PWN
             js: 'required - JavaScript expression to evaluate'
           )
 
+          console_resp = #{self}.enable_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
+          console_resp = #{self}.disable_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)'
+          )
+
           #{self}.update_about_config(
             browser_obj: 'required - browser_obj returned from #open method)',
             key: 'required - key to update in about:config',

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.306'
+  VERSION = '0.5.308'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.306
+  version: 0.5.308
 platform: ruby
 authors:
 - 0day Inc.