pwn 0.5.349 → 0.5.351

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 44787455b2e00a8fa93b19c8c90822b8555adc8291e3f45126cc424bea5e6549
-  data.tar.gz: 7e3898ab30e50162b79e78d16525760f2a51b8e6b2f20b9f6231c77208b9bf50
+  metadata.gz: 9bb30be67441b28427458dfab64121bf4ed929841daf537e9be1d32c821f4a56
+  data.tar.gz: b86d8a385472b4133452eaa74332c2320802f6f2da0035fe843382f6fb332ffc
 SHA512:
-  metadata.gz: 6af7f2ed0880f11453da46b67d0cb9bdb4e3e55422c784d4530e174d97ad5f925247d29cfd81deb41c2251e1281ba86e7b2602bbf77a5097a1df80d4afd33bcd
-  data.tar.gz: ba49fc940c50324702a1ad62a487ea9cc084a2bedac19060bac2070b91b5ed8c32867cf09af494a731370241c540a6f5cdfa209505dc698475bb352e84ec8f38
+  metadata.gz: ac5bff9fe638a5a82db943f209b78b8cf8ee8268a74b88f88aaaa0a9a7a528652fc9627615c908917b3d26bf5da64ff5d862ce946c508f5c0ab335c98365e13d
+  data.tar.gz: 8f598af14329fa31bf86bd383baa00eebcff9690dde51746a9ba2bcf2ed2334e17ac395b536fafdeb3b65217f1f4bcf3685f54bfa2740d998b5189ef4ae9dc9f

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.349]:001 >>> PWN.help
+pwn[v0.5.351]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.349]:001 >>> PWN.help
+pwn[v0.5.351]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.349]:001 >>> PWN.help
+pwn[v0.5.351]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -204,6 +204,7 @@ module PWN
             break
           end
         end
+        print "\n"
 
         spider_json.merge!(spider_status_json)
       rescue StandardError => e
@@ -340,7 +341,7 @@ module PWN
         openapi_spec = opts[:openapi_spec]
         raise 'ERROR: openapi_spec parameter not found' unless File.exist?(openapi_spec)
 
-        additional_http_headers = opts[:additional_http_headers] || {}
+        additional_http_headers = opts[:additional_http_headers] ||= {}
         raise 'ERROR: additional_http_headers must be a Hash' unless additional_http_headers.is_a?(Hash)
 
         highlight = opts[:highlight] ||= 'NONE'
@@ -500,12 +501,12 @@ module PWN
                     param_name = param[:name].to_s
                     case param[:in]
                     when 'path'
-                      # Substitute path parameter with a default value (e.g., 'example')
-                      param_value = param[:schema]&.dig(:example) || 'example'
+                      # Substitute path parameter with a default value (e.g., 'PLACEHOLDER')
+                      param_value = param[:schema]&.dig(:example) || 'PLACEHOLDER'
                       request_path.gsub!("{#{param_name}}", param_value.to_s)
                     when 'query'
                       # Collect query parameters
-                      param_value = param[:schema]&.dig(:example) || 'example'
+                      param_value = param[:schema]&.dig(:example) || 'PLACEHOLDER'
                       query_params << "#{URI.encode_www_form_component(param_name)}=#{URI.encode_www_form_component(param_value.to_s)}"
                     end
                   end
@@ -518,6 +519,16 @@ module PWN
                     host: host
                   }
                   request_headers.merge!(additional_http_headers)
+                  # Aggregate remaining HTTP header names from spec,
+                  # reference as keys, and assign their respective
+                  # values to the request_headers hash
+                  operation[:parameters]&.each do |param|
+                    next unless param.is_a?(Hash) && param[:in] == 'header' && param[:name]
+
+                    header_name = param[:name].to_s.downcase
+                    header_value = param[:schema]&.dig(:example) || 'PLACEHOLDER'
+                    request_headers[header_name] = header_value.to_s
+                  end
 
                   # Construct request lines, including all headers
                   request_lines = [
@@ -526,7 +537,7 @@ module PWN
                   request_headers.each do |key, value|
                     # Capitalize header keys (e.g., 'host' to 'Host', 'authorization' to 'Authorization')
                     header_key = key.to_s.split('-').map(&:capitalize).join('-')
-                    request_lines << "#{header_key}: #{value}"
+                    request_lines.push("#{header_key}: #{value}")
                   end
                   request_lines << '' << '' # Add blank lines for HTTP request body separation
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.349'
+  VERSION = '0.5.351'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.349
+  version: 0.5.351
 platform: ruby
 authors:
 - 0day Inc.