pwn 0.5.344 → 0.5.345

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d7e80f00eb55ed1f8f0f78eec57518ba5b69e015408faec5abcfc983e395ba72
-  data.tar.gz: f2f8ba9191e1074aca3e11009bc0d46150b0fc60db18a06df3005cf5d83df80c
+  metadata.gz: 96302709830175b8b3c21e6a550bed60708d67d4a52d2655749b815f573d9090
+  data.tar.gz: 6d0fc1e8a9075967174962faf40e40163dfe980f1bf0e175b24e26dd430d981c
 SHA512:
-  metadata.gz: ea918d32b0a1d44f25c440575a6505f18bcd33deadadcb34282b5660ac7d46d1c602d0294b49e12222e528e6ae17073268852e7c61c076b43336d52efcd8ba67
-  data.tar.gz: 6ba601d59c8bcbd1a837e8e1781842c90ad8eb39579102f2d1057464615f4a2b4f32543e28570a9d7d0f11943c87092e6c40f7247d6dad31b3fc3d94c18c9bf2
+  metadata.gz: f1511724aecf7ddc21d39526f5c1f27d72b33615c3533518b765798ca9856df70609dd8acb689fa6160daefbba3cf4be20b8f92bf5add62c997c40de04489151
+  data.tar.gz: 4d9cea6428bc3e599ca449efd96f76682e57cb0cc873121d41e8ef77314167ae0904160b2c8d99f68f1a1740f838af596b1eb2cdfaad5d7acd428e135ab140ab

data/Gemfile

@@ -82,7 +82,7 @@ gem 'rmagick', '6.1.2'
 gem 'rqrcode', '3.1.0'
 gem 'rspec', '3.13.1'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.79.1'
+gem 'rubocop', '1.79.2'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.6.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.344]:001 >>> PWN.help
+pwn[v0.5.345]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.344]:001 >>> PWN.help
+pwn[v0.5.345]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.344]:001 >>> PWN.help
+pwn[v0.5.345]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -631,6 +631,7 @@ module PWN
         target_url = opts[:target_url].to_s.scrub.strip.chomp
         target_scheme = URI.parse(target_url).scheme
         target_host = URI.parse(target_url).host
+        target_path = URI.parse(target_url).path
         target_port = URI.parse(target_url).port.to_i
         active_scan_url_arr = []
 
@@ -675,7 +676,6 @@ module PWN
             use_https: use_https,
             request: json_req
           }.to_json
-          puts "POST BODY: #{post_body.inspect}"
           # Kick off an active scan for each given page in the json_sitemap results
           resp = rest_browser.post(
             "http://#{pwn_burp_api}/scan/active",
@@ -683,7 +683,6 @@ module PWN
             content_type: 'application/json'
           )
           puts " => #{resp.code}"
-          sleep 0.5 # Sleep to avoid overwhelming the Burp API
         rescue RestClient::ExceptionWithResponse => e
           puts " => #{e.response.code}"
           next

data/lib/pwn/reports/fuzz.rb

@@ -110,6 +110,10 @@ module PWN
             </div>
             <br /><br />
 
+            <div>
+              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
+            </div><br />
+
             <div>
               <table id="pwn_fuzz_net_app_proto" class="display squish" cellspacing="0">
                 <thead>
@@ -212,6 +216,56 @@ module PWN
                     }
                   ],
                 });
+
+                // Custom advanced search handling
+                $('.dataTables_filter input').unbind();
+                $('.dataTables_filter input').on('keyup', function() {
+                  var search = $(this).val();
+
+                  var filterFunc;
+                  if (search.match(/^\\/.*\\/$/)) {
+                    try {
+                      var regex = new RegExp(search.slice(1, -1), 'i');
+                      filterFunc = function(settings, data, dataIndex) {
+                        var rowData = data.join(' ');
+                        return regex.test(rowData);
+                      };
+                    } catch (e) {
+                      filterFunc = function(settings, data, dataIndex) {
+                        return true;
+                      };
+                    }
+                  } else {
+                    var positives = [];
+                    var negatives = [];
+                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
+                    for (var i = 0; i < terms.length; i++) {
+                      var term = terms[i];
+                      if (term.startsWith('-')) {
+                        var cleanTerm = term.substring(1).toLowerCase();
+                        if (cleanTerm) negatives.push(cleanTerm);
+                      } else {
+                        positives.push(term.toLowerCase());
+                      }
+                    }
+                    filterFunc = function(settings, data, dataIndex) {
+                      var rowData = data.join(' ').toLowerCase();
+                      for (var j = 0; j < positives.length; j++) {
+                        if (!rowData.includes(positives[j])) return false;
+                      }
+                      for (var k = 0; k < negatives.length; k++) {
+                        if (rowData.includes(negatives[k])) return false;
+                      }
+                      return true;
+                    };
+                  }
+
+                  $.fn.dataTable.ext.search.pop();
+                  $.fn.dataTable.ext.search.push(filterFunc);
+                  table.search('');
+                  table.draw();
+                });
+
                 // Toggle Columns
                 $('a.toggle-vis').on('click', function (e) {
                   e.preventDefault();

data/lib/pwn/reports/phone.rb

@@ -113,6 +113,10 @@ module PWN
             </div>
             <br /><br />
 
+            <div>
+              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
+            </div><br />
+
             <div>
               <table id="pwn_phone_results" class="display" cellspacing="0">
                 <thead>
@@ -253,6 +257,56 @@ module PWN
                     }
                   ]
                 });
+
+                // Custom advanced search handling
+                $('.dataTables_filter input').unbind();
+                $('.dataTables_filter input').on('keyup', function() {
+                  var search = $(this).val();
+
+                  var filterFunc;
+                  if (search.match(/^\\/.*\\/$/)) {
+                    try {
+                      var regex = new RegExp(search.slice(1, -1), 'i');
+                      filterFunc = function(settings, data, dataIndex) {
+                        var rowData = data.join(' ');
+                        return regex.test(rowData);
+                      };
+                    } catch (e) {
+                      filterFunc = function(settings, data, dataIndex) {
+                        return true;
+                      };
+                    }
+                  } else {
+                    var positives = [];
+                    var negatives = [];
+                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
+                    for (var i = 0; i < terms.length; i++) {
+                      var term = terms[i];
+                      if (term.startsWith('-')) {
+                        var cleanTerm = term.substring(1).toLowerCase();
+                        if (cleanTerm) negatives.push(cleanTerm);
+                      } else {
+                        positives.push(term.toLowerCase());
+                      }
+                    }
+                    filterFunc = function(settings, data, dataIndex) {
+                      var rowData = data.join(' ').toLowerCase();
+                      for (var j = 0; j < positives.length; j++) {
+                        if (!rowData.includes(positives[j])) return false;
+                      }
+                      for (var k = 0; k < negatives.length; k++) {
+                        if (rowData.includes(negatives[k])) return false;
+                      }
+                      return true;
+                    };
+                  }
+
+                  $.fn.dataTable.ext.search.pop();
+                  $.fn.dataTable.ext.search.push(filterFunc);
+                  table.search('');
+                  table.draw();
+                });
+
                 // Toggle Columns
                 $('a.toggle-vis').on('click', function (e) {
                   e.preventDefault();

data/lib/pwn/reports/sast.rb

@@ -110,6 +110,10 @@ module PWN
             </div>
             <br /><br />
 
+            <div>
+              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
+            </div><br />
+
             <div>
               <table id="pwn_scan_git_source_results" class="display" cellspacing="0">
                 <thead>
@@ -253,6 +257,56 @@ module PWN
                     }
                   ]
                 });
+
+                // Custom advanced search handling
+                $('.dataTables_filter input').unbind();
+                $('.dataTables_filter input').on('keyup', function() {
+                  var search = $(this).val();
+
+                  var filterFunc;
+                  if (search.match(/^\\/.*\\/$/)) {
+                    try {
+                      var regex = new RegExp(search.slice(1, -1), 'i');
+                      filterFunc = function(settings, data, dataIndex) {
+                        var rowData = data.join(' ');
+                        return regex.test(rowData);
+                      };
+                    } catch (e) {
+                      filterFunc = function(settings, data, dataIndex) {
+                        return true;
+                      };
+                    }
+                  } else {
+                    var positives = [];
+                    var negatives = [];
+                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
+                    for (var i = 0; i < terms.length; i++) {
+                      var term = terms[i];
+                      if (term.startsWith('-')) {
+                        var cleanTerm = term.substring(1).toLowerCase();
+                        if (cleanTerm) negatives.push(cleanTerm);
+                      } else {
+                        positives.push(term.toLowerCase());
+                      }
+                    }
+                    filterFunc = function(settings, data, dataIndex) {
+                      var rowData = data.join(' ').toLowerCase();
+                      for (var j = 0; j < positives.length; j++) {
+                        if (!rowData.includes(positives[j])) return false;
+                      }
+                      for (var k = 0; k < negatives.length; k++) {
+                        if (rowData.includes(negatives[k])) return false;
+                      }
+                      return true;
+                    };
+                  }
+
+                  $.fn.dataTable.ext.search.pop();
+                  $.fn.dataTable.ext.search.push(filterFunc);
+                  table.search('');
+                  table.draw();
+                });
+
                 // Toggle Columns
                 $('a.toggle-vis').on('click', function (e) {
                   e.preventDefault();

data/lib/pwn/reports/uri_buster.rb

@@ -107,6 +107,10 @@ module PWN
             </div>
             <br /><br />
 
+            <div>
+              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
+            </div><br />
+
             <div>
               <table id="pwn_www_uri_buster_results" class="display" cellspacing="0">
                 <thead>
@@ -207,6 +211,56 @@ module PWN
                     }
                   ]
                 });
+
+                // Custom advanced search handling
+                $('.dataTables_filter input').unbind();
+                $('.dataTables_filter input').on('keyup', function() {
+                  var search = $(this).val();
+
+                  var filterFunc;
+                  if (search.match(/^\\/.*\\/$/)) {
+                    try {
+                      var regex = new RegExp(search.slice(1, -1), 'i');
+                      filterFunc = function(settings, data, dataIndex) {
+                        var rowData = data.join(' ');
+                        return regex.test(rowData);
+                      };
+                    } catch (e) {
+                      filterFunc = function(settings, data, dataIndex) {
+                        return true;
+                      };
+                    }
+                  } else {
+                    var positives = [];
+                    var negatives = [];
+                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
+                    for (var i = 0; i < terms.length; i++) {
+                      var term = terms[i];
+                      if (term.startsWith('-')) {
+                        var cleanTerm = term.substring(1).toLowerCase();
+                        if (cleanTerm) negatives.push(cleanTerm);
+                      } else {
+                        positives.push(term.toLowerCase());
+                      }
+                    }
+                    filterFunc = function(settings, data, dataIndex) {
+                      var rowData = data.join(' ').toLowerCase();
+                      for (var j = 0; j < positives.length; j++) {
+                        if (!rowData.includes(positives[j])) return false;
+                      }
+                      for (var k = 0; k < negatives.length; k++) {
+                        if (rowData.includes(negatives[k])) return false;
+                      }
+                      return true;
+                    };
+                  }
+
+                  $.fn.dataTable.ext.search.pop();
+                  $.fn.dataTable.ext.search.push(filterFunc);
+                  table.search('');
+                  table.draw();
+                });
+
                 // Toggle Columns
                 $('a.toggle-vis').on('click', function (e) {
                   e.preventDefault();

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.344'
+  VERSION = '0.5.345'
 end

data/third_party/pwn_rdoc.jsonl

@@ -508,6 +508,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.import_openapi_to_sitemap Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.import_openapi_to_sitemap`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.in_scope Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.in_scope`: Supported Method Parameters\n\nuri_in_scope = PWN::Plugins::BurpSuite.in_scope(\n\nburp_obj: 'required - burp_obj returned by #start method',\nuri: 'required - URI to determine if in scope'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.invoke_active_scan Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.invoke_active_scan`: Supported Method Parameters\n\nactive_scan_url_arr = PWN::Plugins::BurpSuite.invoke_active_scan(\n\nburp_obj: 'required - burp_obj returned by #start method',\ntarget_url: 'required - target url to scan in sitemap (should be loaded & authenticated w/ burp_obj[:burp_browser])'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.spider Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.spider`: Supported Method Parameters\n\njson_in_scope = PWN::Plugins::BurpSuite.spider(\n\nburp_obj: 'required - burp_obj returned by #start method',\ntarget_url: 'required - target url to add to crawl / spider'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.start Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.start`: Supported Method Parameters\n\nburp_obj = PWN::Plugins::BurpSuite.start(\n\nburp_jar_path: 'optional - path of burp suite pro jar file (defaults to /opt/burpsuite/burpsuite_pro.jar)',\nheadless: 'optional - run burp headless if set to true',\nbrowser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types',\nburp_ip: 'optional - IP address for the Burp proxy (defaults to 127.0.0.1)',\nburp_port: 'optional - port for the Burp proxy (defaults to a random unused port)',\npwn_burp_ip: 'optional - IP address for the PWN Burp API (defaults to 127.0.0.1)',\npwn_burp_port: 'optional - port for the PWN Burp API (defaults to a random unused port)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.stop Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.stop`: Supported Method Parameters\n\nPWN::Plugins::BurpSuite.stop(\n\nburp_obj: 'required - burp_obj returned by #start method'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::BurpSuite.update_burp_jar Usage"},{"role":"assistant","content":"`PWN::Plugins::BurpSuite.update_burp_jar`: Supported Method Parameters\n\nPWN::Plugins::BurpSuite.update_burp_jar( )\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.344
+  version: 0.5.345
 platform: ruby
 authors:
 - 0day Inc.
@@ -939,14 +939,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.79.1
+        version: 1.79.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.79.1
+        version: 1.79.2
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement