pwn 0.5.336 → 0.5.337

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 790aa2370e8ac120b651457377b90890f18d4094149d34e1403f34433e328934
-  data.tar.gz: c7834aaced750c7ed0741b21320fa8fc06ea2472693e4bbea86ca76df39848f9
+  metadata.gz: 0df266efa703498ddd6cbb7273a2831110a5816edb7efa86983f11e379ee3d77
+  data.tar.gz: cb492461c9c93d7aae1149863218be38e817b0fb59c1500598e69f3b783ac78b
 SHA512:
-  metadata.gz: eeb7fa2f2cd53e9f80add1e8627f7bb6a466c9a3883fdb4c3768266fda557982d29ece0ab0fbb0ae71aa236037dcebe4de3b869286a483e335483465b4c7dbeb
-  data.tar.gz: 98aee7d871976af7a947c357a2a94e5f8ae50e52ab0ed8705ac72ff784fd3692d2b2f67e8e99c2bff933d3f6f696967637b571c5476a3e5a12eac30acbe07718
+  metadata.gz: a3629cbc8059bdc38f1e74c003c4499f8bcda4cd9cf96b018ac5948471f0d2ecc5da150af668e5c31e03a609d35d82f5fb954ce58ad7d95997892ee95c39f5ea
+  data.tar.gz: 10ef427857e37163cdb40ef952c106f5f68af16799e017df1955d281d0742213d2fb3cdab3d1fdf38a73f6ce27b0441cd1aad326c88adf7ef5f936dc00c4effc

data/bin/pwn_burp_suite_pro_active_scan

@@ -18,6 +18,10 @@ OptionParser.new do |options|
     opts[:headless] = h
   end
 
+  options.on('-s', '--[no-]spider', '<Optional - Crawl / Spider Target Prior to Scanning (Defaults to false)>') do |s|
+    opts[:spider] = s
+  end
+
   options.on('-tTARGET', '--target_url=TARGET', '<Required - Target URI to Scan>') do |t|
     opts[:target_url] = t
   end
@@ -45,6 +49,7 @@ begin
 
   burp_jar_path = opts[:burp_jar_path]
   headless = opts[:headless]
+  spider = opts[:spider] || false
   target_url = opts[:target_url].to_s.scrub
   output_path = opts[:output_path].to_s.scrub
 
@@ -96,6 +101,8 @@ begin
     browser.instance_eval(instruction.to_s.scrub.strip.chomp)
   end
 
+  PWN::Plugins::BurpSuite.spider(burp_obj: burp_obj, target_url: in_scope) if spider
+
   duration = 9
   print "Waiting #{duration} seconds prior to kicking off active scan..."
   sleep duration # Sleep for now so everything loads the way we expect - blech.

data/lib/pwn/plugins/burp_suite.rb

@@ -168,6 +168,42 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # json_in_scope = PWN::Plugins::BurpSuite.spider(
+      #   burp_obj: 'required - burp_obj returned by #start method',
+      #   target_url: 'required - target url to add to crawl / spider'
+      # )
+
+      public_class_method def self.spider(opts = {})
+        burp_obj = opts[:burp_obj]
+        target_url = opts[:target_url]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+
+        post_body = { url: target_url }.to_json
+
+        in_scope = rest_browser.post(
+          "http://#{pwn_burp_api}/spider",
+          post_body, content_type: 'application/json; charset=UTF8'
+        )
+        spider_json = JSON.parse(in_scope, symbolize_names: true)
+        spider_id = spider_json[:id]
+        loop do
+          print '.'
+          spider_status_resp = rest_browser.get("http://#{pwn_burp_api}/spider/#{spider_id}")
+          spider_status_json = JSON.parse(spider_status_resp, symbolize_names: true)
+          spider_status = spider_status_json[:status]
+          break if spider_status == 'finished'
+
+          sleep 3
+        end
+
+        spider_json.merge!(spider_status_json)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.enable_proxy(
       #   burp_obj: 'required - burp_obj returned by #start method'
@@ -638,9 +674,12 @@ module PWN
         rescue RestClient::ExceptionWithResponse => e
           puts " => #{e.response.code}"
           next
-        rescue RestClient::ServerBrokeConnection => e
+        rescue RestClient::ServerBrokeConnection
           puts ' => Server broke connection.'
           next
+        rescue Errno::ECONNRESET
+          puts ' => Connection reset by peer.'
+          next
         end
 
         # Wait for scan completion

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.336'
+  VERSION = '0.5.337'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.336
+  version: 0.5.337
 platform: ruby
 authors:
 - 0day Inc.