pwn 0.5.308 → 0.5.310

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8cf8d3e6c50a8caa34200e9dee3323ac1c689ff2381db4a8b39a8cc51eb7f245
-  data.tar.gz: 82fd38322306d70277792942ed664bef3a03e0704a30fddbf54fcfc3a82c5a24
+  metadata.gz: 285a68a2cda6bbdd1ae33ec4a3fd37f5831f27780eb55b1b405ac3d01c14cf9d
+  data.tar.gz: 145f7a73a322bd700cd0852c1e35349413ab45ff1e2e71e3895f43c8c0e457a1
 SHA512:
-  metadata.gz: e4e48ca74897cd2cbfe03f961b2922ad1c9d66cadb8c2ce831945e1a935cc227b81c6898991c9bea8b38a3218f14a892699f1766ed566949a99a4de8a8dfe167
-  data.tar.gz: d7a13a43336ed4bb3301f1c52faa60d771552078521036c8e1090843b3ec70b88c8b16b802ec2eca63fd06f56d4a5dae000d8df19bafed5040cdead98a48b851
+  metadata.gz: 212678e418bcf5fe6c4c5d2c6ed9c5ef0ebf31ed526ec72b52a81dacab60d53eff8637631259f0e267c4eb870dbda6de891fa31cf1ed8aca44d44585ec27ac07
+  data.tar.gz: e7bbae0e1600fa8f712c663eb787cc93edfeced5c8324617d616cb6981d881ac0aad6d41f2510ec340891f46d717c8dcb9ac39317512fa1cf28e37c1f389f8fa

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.308]:001 >>> PWN.help
+pwn[v0.5.310]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.308]:001 >>> PWN.help
+pwn[v0.5.310]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.308]:001 >>> PWN.help
+pwn[v0.5.310]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -461,7 +461,8 @@ module PWN
       # Supported Method Parameters::
       # console_resp = PWN::Plugins::TransparentBrowser.console(
       #   browser_obj: browser_obj1,
-      #   js: 'required - JavaScript expression to evaluate'
+      #   js: 'required - JavaScript expression to evaluate',
+      #   return_to: 'optional - return to :console or :stdout (defaults to :console)'
       # )
 
       public_class_method def self.console(opts = {})
@@ -469,13 +470,20 @@ module PWN
         verify_devtools_browser(browser_obj: browser_obj)
 
         js = opts[:js] ||= "alert('ACK from => #{self}')"
+        return_to = opts[:return_to] ||= :console
+        raise 'ERROR: return_to parameter must be :console or :stdout' unless %i[console stdout].include?(return_to.to_s.downcase.to_sym)
 
         browser = browser_obj[:browser]
         case js
         when 'clear', 'clear;', 'clear()', 'clear();'
           script = 'console.clear()'
         else
-          script = "console.log(#{js})"
+          case return_to.to_s.downcase.to_sym
+          when :stdout
+            script = "return #{js}"
+          when :console
+            script = "console.log(#{js})"
+          end
         end
 
         console_resp = nil
@@ -494,12 +502,12 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # console_resp = PWN::Plugins::TransparentBrowser.enable_dom_mutations(
+      # console_resp = PWN::Plugins::TransparentBrowser.view_dom_mutations(
       #   browser_obj: browser_obj1,
       #   target: 'optional - target JavaScript node to observe (defaults to document.body)'
       # )
 
-      public_class_method def self.enable_dom_mutations(opts = {})
+      public_class_method def self.view_dom_mutations(opts = {})
         browser_obj = opts[:browser_obj]
         verify_devtools_browser(browser_obj: browser_obj)
 
@@ -511,29 +519,117 @@ module PWN
         )
 
         js = <<~JAVASCRIPT
-          // Select the target node to observe
+          // Select the target node to observe (replace 'target-id' with your element's ID or use document.body)
           const targetNode = document.getElementById(#{target}) || document.body;
 
-          // Configuration for observer
-          const config = { attributes: true, childList: true, subtree: true };
+          // Configuration for MutationObserver
+          const config = {
+            attributes: true, // Observe attribute changes
+            childList: true, // Observe additions/removals of child nodes
+            subtree: true, // Observe descendants
+            characterData: true, // Observe text content changes
+          };
 
-          // Callback for mutations
+          // Callback function to handle mutations
           const callback = (mutationList, observer) => {
-            for (const mutation of mutationList) {
+            console.group('DOM Mutation Detected');
+            mutationList.forEach((mutation, index) => {
+              console.log(`Mutation ${index + 1}:`, mutation.type);
+
               if (mutation.type === 'childList') {
-                console.log('Child node added/removed:', mutation);
+                // Log added or removed nodes
+                if (mutation.addedNodes.length) {
+                  mutation.addedNodes.forEach((node) => {
+                    if (node.nodeType === Node.ELEMENT_NODE) {
+                      console.log('Added Element:', {
+                        tagName: node.tagName,
+                        id: node.id || 'N/A',
+                        classList: node.className || 'N/A',
+                        outerHTML: node.outerHTML,
+                      });
+                    } else if (node.nodeType === Node.TEXT_NODE) {
+                      console.log('Added Text Node:', {
+                        textContent: node.textContent,
+                        parentTag: node.parentElement?.tagName || 'N/A',
+                      });
+                    }
+                  });
+                }
+                if (mutation.removedNodes.length) {
+                  mutation.removedNodes.forEach((node) => {
+                    if (node.nodeType === Node.ELEMENT_NODE) {
+                      console.log('Removed Element:', {
+                        tagName: node.tagName,
+                        id: node.id || 'N/A',
+                        classList: node.className || 'N/A',
+                        outerHTML: node.outerHTML,
+                      });
+                    } else if (node.nodeType === Node.TEXT_NODE) {
+                      console.log('Removed Text Node:', {
+                        textContent: node.textContent,
+                        parentTag: node.parentElement?.tagName || 'N/A',
+                      });
+                    }
+                  });
+                }
               } else if (mutation.type === 'attributes') {
-                console.log(`Attribute ${mutation.attributeName} modified:`, mutation);
+                // Log attribute changes
+                console.log(`Attribute "${mutation.attributeName}" modified on`, {
+                  element: mutation.target.tagName,
+                  id: mutation.target.id || 'N/A',
+                  oldValue: mutation.oldValue,
+                  newValue: mutation.target.getAttribute(mutation.attributeName),
+                  outerHTML: mutation.target.outerHTML,
+                });
+              } else if (mutation.type === 'characterData') {
+                // Log text content changes (e.g., from user input in contenteditable or form fields)
+                console.log('Text Content Changed:', {
+                  element: mutation.target.parentElement?.tagName || 'N/A',
+                  id: mutation.target.parentElement?.id || 'N/A',
+                  oldValue: mutation.oldValue,
+                  newValue: mutation.target.textContent,
+                  innerHTML: mutation.target.parentElement?.innerHTML || 'N/A',
+                });
               }
-            }
+            });
+            console.groupEnd();
           };
 
-          // Create and start observer
+          // Create and start the MutationObserver
           const observer = new MutationObserver(callback);
           observer.observe(targetNode, config);
+
+          // Optional: Add event listeners to capture user interactions
+          const logUserInteraction = (event) => {
+            console.group('User Interaction Detected');
+            console.log('Event Type:', event.type);
+            console.log('Target:', {
+              tagName: event.target.tagName,
+              id: event.target.id || 'N/A',
+              classList: event.target.className || 'N/A',
+              value: 'value' in event.target ? event.target.value : 'N/A',
+              innerHTML: event.target.innerHTML || 'N/A',
+            });
+            console.groupEnd();
+          };
+
+          // Attach listeners for keyboard and click events
+          document.addEventListener('input', logUserInteraction); // For form inputs, contenteditable
+          document.addEventListener('click', logUserInteraction); // For clicks
+
+          // Function to stop the observer (run in console when needed)
+          window.stopObserving = () => {
+            observer.disconnect();
+            document.removeEventListener('input', logUserInteraction);
+            document.removeEventListener('click', logUserInteraction);
+            console.log('MutationObserver and event listeners stopped.');
+          };
+
+          // Log instructions to console
+          console.log('MutationObserver started. To stop, run: stopObserving()');
         JAVASCRIPT
 
-        console(browser_obj: browser_obj, js: 'console.clear();')
+        console(browser_obj: browser_obj, js: 'clear();')
         browser = browser_obj[:browser]
         browser.execute_script(js)
       rescue StandardError => e
@@ -541,11 +637,11 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # console_resp = PWN::Plugins::TransparentBrowser.disable_dom_mutations(
+      # console_resp = PWN::Plugins::TransparentBrowser.hide_dom_mutations(
       #   browser_obj: browser_obj1
       # )
 
-      public_class_method def self.disable_dom_mutations(opts = {})
+      public_class_method def self.hide_dom_mutations(opts = {})
         browser_obj = opts[:browser_obj]
         verify_devtools_browser(browser_obj: browser_obj)
 
@@ -555,38 +651,20 @@ module PWN
         )
 
         js = <<~JAVASCRIPT
-          // Select the target node to observe
-          const targetNode = document.getElementById(#{target}) || document.body;
-
-          // Configuration for observer
-          const config = { attributes: true, childList: true, subtree: true };
-
-          // Callback for mutations
-          const callback = (mutationList, observer) => {
-            for (const mutation of mutationList) {
-              if (mutation.type === 'childList') {
-                console.log('Child node added/removed:', mutation);
-              } else if (mutation.type === 'attributes') {
-                console.log(`Attribute ${mutation.attributeName} modified:`, mutation);
-              }
-            }
-          };
-
-          // Create and start observer
-          const observer = new MutationObserver(callback);
-          observer.observe(targetNode, config);
-
-          // Later, stop observing if needed
-          observer.disconnect();
+          if (typeof stopObserving === 'function') {
+            stopObserving();
+            console.log('DOM mutation observer and event listeners disabled.');
+          } else {
+            console.log('Error: stopObserving function not found. DOM mutation observer was not active.');
+          }
         JAVASCRIPT
 
-        console(browser_obj: browser_obj, js: 'console.clear();')
+        console(browser_obj: browser_obj, js: 'clear();')
         browser = browser_obj[:browser]
         browser.execute_script(js)
       rescue StandardError => e
         raise e
       end
-
       # Supported Method Parameters::
       # PWN::Plugins::TransparentBrowser.update_about_config(
       #   browser_obj: browser_obj1,
@@ -1175,12 +1253,14 @@ module PWN
             js: 'required - JavaScript expression to evaluate'
           )
 
-          console_resp = #{self}.enable_dom_mutations(
-            browser_obj: 'required - browser_obj returned from #open method)'
+          console_resp = #{self}.view_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            target: 'optional - target JavaScript node to observe (defaults to document.body)'
           )
 
-          console_resp = #{self}.disable_dom_mutations(
-            browser_obj: 'required - browser_obj returned from #open method)'
+          console_resp = #{self}.hide_dom_mutations(
+            browser_obj: 'required - browser_obj returned from #open method)',
+            target: 'optional - target JavaScript node to observe (defaults to document.body)'
           )
 
           #{self}.update_about_config(

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.308'
+  VERSION = '0.5.310'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.308
+  version: 0.5.310
 platform: ruby
 authors:
 - 0day Inc.