pwn 0.5.336 → 0.5.338

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 790aa2370e8ac120b651457377b90890f18d4094149d34e1403f34433e328934
-  data.tar.gz: c7834aaced750c7ed0741b21320fa8fc06ea2472693e4bbea86ca76df39848f9
+  metadata.gz: 478052d4b7f5f4c7015d9e2c0ad2ca2aacdf2afc5d8f6904f92126d3721324fb
+  data.tar.gz: 4298c2969ffc59b38e1633d3c728ccb1c9da8d647be9750f5d77cc6117f8dcc2
 SHA512:
-  metadata.gz: eeb7fa2f2cd53e9f80add1e8627f7bb6a466c9a3883fdb4c3768266fda557982d29ece0ab0fbb0ae71aa236037dcebe4de3b869286a483e335483465b4c7dbeb
-  data.tar.gz: 98aee7d871976af7a947c357a2a94e5f8ae50e52ab0ed8705ac72ff784fd3692d2b2f67e8e99c2bff933d3f6f696967637b571c5476a3e5a12eac30acbe07718
+  metadata.gz: 8f85cf2322e788c4681ed6e7f028fcfcc1d833bf88093d3cb651aad367377c3b78f4463642ed31c529ba1ba560ce11d79c89cda54df059b152c6a587ae53ef97
+  data.tar.gz: a51933f762c0f09fbf9e06759d870d5315b6ee1c0b21cf20ec9bc88b9d8f8d6c64473519fe1b31b2d4b266288fa16a9357b386436e9d4feb7cd9493ccae82253

data/bin/pwn_burp_suite_pro_active_scan

@@ -18,6 +18,10 @@ OptionParser.new do |options|
     opts[:headless] = h
   end
 
+  options.on('-s', '--[no-]spider', '<Optional - Crawl / Spider Target Prior to Scanning (Defaults to false)>') do |s|
+    opts[:spider] = s
+  end
+
   options.on('-tTARGET', '--target_url=TARGET', '<Required - Target URI to Scan>') do |t|
     opts[:target_url] = t
   end
@@ -45,6 +49,7 @@ begin
 
   burp_jar_path = opts[:burp_jar_path]
   headless = opts[:headless]
+  spider = opts[:spider] || false
   target_url = opts[:target_url].to_s.scrub
   output_path = opts[:output_path].to_s.scrub
 
@@ -96,6 +101,8 @@ begin
     browser.instance_eval(instruction.to_s.scrub.strip.chomp)
   end
 
+  PWN::Plugins::BurpSuite.spider(burp_obj: burp_obj, target_url: in_scope) if spider
+
   duration = 9
   print "Waiting #{duration} seconds prior to kicking off active scan..."
   sleep duration # Sleep for now so everything loads the way we expect - blech.

data/lib/pwn/plugins/burp_suite.rb

@@ -168,6 +168,48 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # json_in_scope = PWN::Plugins::BurpSuite.spider(
+      #   burp_obj: 'required - burp_obj returned by #start method',
+      #   target_url: 'required - target url to add to crawl / spider'
+      # )
+
+      public_class_method def self.spider(opts = {})
+        burp_obj = opts[:burp_obj]
+        target_url = opts[:target_url]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+
+        post_body = { url: target_url }.to_json
+
+        in_scope = rest_browser.post(
+          "http://#{pwn_burp_api}/spider",
+          post_body, content_type: 'application/json; charset=UTF8'
+        )
+        spider_json = JSON.parse(in_scope, symbolize_names: true)
+        spider_id = spider_json[:id]
+        loop do
+          print '.'
+          spider_status_resp = rest_browser.get("http://#{pwn_burp_api}/spider/#{spider_id}")
+          spider_status_json = JSON.parse(spider_status_resp, symbolize_names: true)
+          spider_status = spider_status_json[:status]
+          case spider_status
+          when 'queued', 'running'
+            sleep 3
+          when 'failed', 'finished'
+            break
+          else
+            puts "Unknown spider status detected: #{spider_status}"
+            break
+          end
+        end
+
+        spider_json.merge!(spider_status_json)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.enable_proxy(
       #   burp_obj: 'required - burp_obj returned by #start method'
@@ -638,9 +680,12 @@ module PWN
         rescue RestClient::ExceptionWithResponse => e
           puts " => #{e.response.code}"
           next
-        rescue RestClient::ServerBrokeConnection => e
+        rescue RestClient::ServerBrokeConnection
           puts ' => Server broke connection.'
           next
+        rescue Errno::ECONNRESET
+          puts ' => Connection reset by peer.'
+          next
         end
 
         # Wait for scan completion

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.336'
+  VERSION = '0.5.338'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.336
+  version: 0.5.338
 platform: ruby
 authors:
 - 0day Inc.