pwn 0.5.354 → 0.5.356

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8512e5e4d1177bad32c255ef76118b23cf334c579f75c7e89fcf01ffacfc4e4c
-  data.tar.gz: f14e9efed8c396aa61ab72a3a60437854c924b694f8c70c793abb2f3536a3260
+  metadata.gz: 9b868d96f794aec7b4791d100b90533fd12f4c8604d2bce0ecfb2984545a70cb
+  data.tar.gz: 292c193f5f6bb877a0b4c1b96803dba2c7f67a7fa21dab9ed67da88d66238ffc
 SHA512:
-  metadata.gz: 0ea6aed1954cf83f6ad74518aafb11386679e4a387b063b80b8286609c54d634bc9d65528a6fe569dd80ed0581cb1dfbd93b8d463741c68e5807793f8c65d6d9
-  data.tar.gz: dc78f00786760d81eeca854594acaa1dbaae3e8401c958458fc3d1ddc01d492b23d42ba9dd4737e35aeca3d661519b35a4ce98f17e814edd1cee9a1f7ab83069
+  metadata.gz: 3f8e83b4c59a0e9ff7d03ee3768ef09316bb6d3e967d1c78ed566ece9dc41f4c96ebe267583cbdc7b7acb84ac0c000b319d2cde4a486630112a03949c8049e7a
+  data.tar.gz: 84f93e38d00342370e2812a1b23c797dc5a97f44aa538d9a1972dca01e028a72043ac194f1cde78650a12c46d5ec5bd67f82702bb2670d54709e3d5243cc72f5

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.354]:001 >>> PWN.help
+pwn[v0.5.356]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.354]:001 >>> PWN.help
+pwn[v0.5.356]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.354]:001 >>> PWN.help
+pwn[v0.5.356]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -40,7 +40,7 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # burp_obj = PWN::Plugins::BurpSuite.start(
+      # burp_obj1 = PWN::Plugins::BurpSuite.start(
       #   burp_jar_path: 'optional - path of burp suite pro jar file (defaults to /opt/burpsuite/burpsuite_pro.jar)',
       #   headless: 'optional - run burp headless if set to true',
       #   browser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types',
@@ -60,12 +60,10 @@ module PWN
 
         browser_type = opts[:browser_type] ||= :firefox
         burp_ip = opts[:burp_ip] ||= '127.0.0.1'
-        burp_port = opts[:burp_port] ||= 8080
-        # burp_port = opts[:burp_port] ||= PWN::Plugins::Sock.get_random_unused_port
-        #
+        burp_port = opts[:burp_port] ||= PWN::Plugins::Sock.get_random_unused_port
+
         pwn_burp_ip = opts[:pwn_burp_ip] ||= '127.0.0.1'
-        pwn_burp_port = opts[:pwn_burp_port] ||= 1337
-        # pwn_burp_port = opts[:pwn_burp_port] ||= PWN::Plugins::Sock.get_random_unused_port
+        pwn_burp_port = opts[:pwn_burp_port] ||= PWN::Plugins::Sock.get_random_unused_port
 
         burp_cmd_string = 'java -Xmx4G'
         burp_cmd_string = "#{burp_cmd_string} -Djava.awt.headless=true" if opts[:headless]
@@ -103,14 +101,13 @@ module PWN
           next
         end
 
-        # USE THIS WHEN Updating Proxy Listener settings become
-        # available in the BurpSuite Montoya API
         # Update proxy listener to use the burp_ip and burp_port
-        # update_proxy_listener(
-        #   burp_obj: burp_obj,
-        #   address: burp_ip,
-        #   port: burp_port
-        # )
+        update_proxy_listener(
+          burp_obj: burp_obj,
+          id: '0',
+          address: burp_ip,
+          port: burp_port
+        )
 
         burp_obj
       rescue StandardError => e
@@ -246,6 +243,113 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # json_proxy_listeners = PWN::Plugins::BurpSuite.get_proxy_listeners(
+      #   burp_obj: 'required - burp_obj returned by #start method'
+      # )
+
+      public_class_method def self.get_proxy_listeners(opts = {})
+        burp_obj = opts[:burp_obj]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+
+        listeners = rest_browser.get("http://#{pwn_burp_api}/proxy/listeners", content_type: 'application/json; charset=UTF8')
+        JSON.parse(listeners, symbolize_names: true)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # json_proxy_listener = PWN::Plugins::BurpSuite.add_proxy_listener(
+      #   burp_obj: 'required - burp_obj returned by #start method',
+      #   bind_address: 'required - bind address for the proxy listener (e.g., "127.0.0.1")',
+      #   port: 'required - port for the proxy listener (e.g., 8081)',
+      #   enabled: 'optional - enable the listener (defaults to true)'
+      # )
+
+      public_class_method def self.add_proxy_listener(opts = {})
+        burp_obj = opts[:burp_obj]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+        bind_address = opts[:bind_address]
+        raise 'ERROR: bind_address parameter is required' if bind_address.nil?
+
+        port = opts[:port]
+        raise 'ERROR: port parameter is required' if port.nil?
+
+        enabled = opts[:enabled] != false # Default to true if not specified
+
+        proxy_listeners = get_proxy_listeners(burp_obj: burp_obj)
+        last_known_proxy_id = proxy_listeners.last[:id].to_i ||= 0
+        next_id = last_known_proxy_id + 1
+
+        post_body = {
+          id: next_id.to_s,
+          bind_address: bind_address,
+          port: port,
+          enabled: enabled
+        }.to_json
+
+        listener = rest_browser.post("http://#{pwn_burp_api}/proxy/listeners", post_body, content_type: 'application/json; charset=UTF8')
+        JSON.parse(listener, symbolize_names: true)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # json_proxy_listener = PWN::Plugins::BurpSuite.update_proxy_listener(
+      #   burp_obj: 'required - burp_obj returned by #start method',
+      #   id: 'optional - ID of the proxy listener (defaults to "0")',
+      #   bind_address: 'optional - bind address for the proxy listener (defaults to "127.0.0.1")',
+      #   port: 'optional - port for the proxy listener (defaults to 8080)',
+      #   enabled: 'optional - enable or disable the listener (defaults to true)'
+      # )
+
+      public_class_method def self.update_proxy_listener(opts = {})
+        burp_obj = opts[:burp_obj]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+        id = opts[:id] ||= '0'
+        bind_address = opts[:bind_address] ||= '127.0.0.1'
+        port = opts[:port] ||= 8080
+        enabled = opts[:enabled] != false # Default to true if not specified
+
+        post_body = {
+          id: id,
+          bind_address: bind_address,
+          port: port,
+          enabled: enabled
+        }.to_json
+
+        listener = rest_browser.put("http://#{pwn_burp_api}/proxy/listeners/#{id}", post_body, content_type: 'application/json; charset=UTF8')
+        JSON.parse(listener, symbolize_names: true)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Plugins::BurpSuite.delete_proxy_listener(
+      #   burp_obj: 'required - burp_obj returned by #start method',
+      #   id: 'required - ID of the proxy listener (defaults to "0")'
+      # )
+
+      public_class_method def self.delete_proxy_listener(opts = {})
+        burp_obj = opts[:burp_obj]
+        rest_browser = burp_obj[:rest_browser]
+        pwn_burp_api = burp_obj[:pwn_burp_api]
+        id = opts[:id] ||= '0'
+        raise 'ERROR: id parameter is required' if id.nil?
+
+        rest_browser.delete("http://#{pwn_burp_api}/proxy/listeners/#{id}")
+        true # Return true to indicate successful deletion (or error if API fails)
+      rescue StandardError => e
+        stop(burp_obj: burp_obj) unless burp_obj.nil?
+        raise e
+      end
+
       # Supported Method Parameters::
       # json_sitemap = PWN::Plugins::BurpSuite.get_sitemap(
       #   burp_obj: 'required - burp_obj returned by #start method',
@@ -696,20 +800,31 @@ module PWN
         end
 
         # Wait for scan completion
-        scan_queue = rest_browser.get("http://#{pwn_burp_api}/scan/active")
-        json_scan_queue = JSON.parse(scan_queue, symbolize_names: true)
-        scan_queue_total = json_scan_queue.count
-        json_scan_queue.each do |scan_item|
-          this_scan_item_id = scan_item[:id]
-          until scan_item[:status] == 'finished'
-            scan_item_resp = rest_browser.get("http://#{pwn_burp_api}/scan/active/#{this_scan_item_id}")
-            scan_item = JSON.parse(scan_item_resp, symbolize_names: true)
-            scan_status = scan_item[:status]
-            puts "Target ID ##{this_scan_item_id} of ##{scan_queue_total}| #{scan_status}"
-            sleep 3
+        loop do
+          scan_queue = rest_browser.get("http://#{pwn_burp_api}/scan/active")
+          json_scan_queue = JSON.parse(scan_queue, symbolize_names: true)
+          break if json_scan_queue.all? { |scan| scan[:status] == 'finished' }
+
+          puts "\n\n\n"
+          puts '-'* 90
+          json_scan_queue.each do |scan|
+            puts "Target ID: #{scan[:id]}, Request Count: #{scan[:request_count]}, Progress: #{scan[:percent_complete]}%, Status: #{scan[:status]}"
           end
-          puts "Target ID ##{this_scan_item_id} of ##{scan_queue_total}| 100% complete\n"
+
+          sleep 30
         end
+        # scan_queue_total = json_scan_queue.count
+        # json_scan_queue.each do |scan_item|
+        #   this_scan_item_id = scan_item[:id]
+        #   until scan_item[:status] == 'finished'
+        #     scan_item_resp = rest_browser.get("http://#{pwn_burp_api}/scan/active/#{this_scan_item_id}")
+        #     scan_item = JSON.parse(scan_item_resp, symbolize_names: true)
+        #     scan_status = scan_item[:status]
+        #     puts "Target ID ##{this_scan_item_id} of ##{scan_queue_total}| #{scan_status}"
+        #     sleep 3
+        #   end
+        #   puts "Target ID ##{this_scan_item_id} of ##{scan_queue_total}| 100% complete\n"
+        # end
 
         active_scan_url_arr # Return array of targeted URIs to pass to #generate_scan_report method
       rescue StandardError => e
@@ -788,109 +903,6 @@ module PWN
         raise e
       end
 
-      # Supported Method Parameters::
-      # json_proxy_listeners = PWN::Plugins::BurpSuite.get_proxy_listeners(
-      #   burp_obj: 'required - burp_obj returned by #start method'
-      # )
-
-      public_class_method def self.get_proxy_listeners(opts = {})
-        burp_obj = opts[:burp_obj]
-        rest_browser = burp_obj[:rest_browser]
-        pwn_burp_api = burp_obj[:pwn_burp_api]
-
-        listeners = rest_browser.get("http://#{pwn_burp_api}/proxy/listeners", content_type: 'application/json; charset=UTF8')
-        JSON.parse(listeners, symbolize_names: true)
-      rescue StandardError => e
-        stop(burp_obj: burp_obj) unless burp_obj.nil?
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # json_proxy_listener = PWN::Plugins::BurpSuite.add_proxy_listener(
-      #   burp_obj: 'required - burp_obj returned by #start method',
-      #   bind_address: 'required - bind address for the proxy listener (e.g., "127.0.0.1")',
-      #   port: 'required - port for the proxy listener (e.g., 8081)',
-      #   enabled: 'optional - enable the listener (defaults to true)'
-      # )
-
-      public_class_method def self.add_proxy_listener(opts = {})
-        burp_obj = opts[:burp_obj]
-        rest_browser = burp_obj[:rest_browser]
-        pwn_burp_api = burp_obj[:pwn_burp_api]
-        bind_address = opts[:bind_address]
-        raise 'ERROR: bind_address parameter is required' if bind_address.nil?
-
-        port = opts[:port]
-        raise 'ERROR: port parameter is required' if port.nil?
-
-        enabled = opts[:enabled] != false # Default to true if not specified
-
-        post_body = {
-          id: "#{bind_address}:#{port}",
-          bind_address: bind_address,
-          port: port,
-          enabled: enabled
-        }.to_json
-
-        listener = rest_browser.post("http://#{pwn_burp_api}/proxy/listeners", post_body, content_type: 'application/json; charset=UTF8')
-        JSON.parse(listener, symbolize_names: true)
-      rescue StandardError => e
-        stop(burp_obj: burp_obj) unless burp_obj.nil?
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # json_proxy_listener = PWN::Plugins::BurpSuite.update_proxy_listener(
-      #   burp_obj: 'required - burp_obj returned by #start method',
-      #   id: 'optional - ID of the proxy listener (defaults to "127.0.0.1:8080")',
-      #   bind_address: 'optional - bind address for the proxy listener (defaults to "127.0.0.1")',
-      #   port: 'optional - port for the proxy listener (defaults to 8080)',
-      #   enabled: 'optional - enable or disable the listener (defaults to true)'
-      # )
-
-      public_class_method def self.update_proxy_listener(opts = {})
-        burp_obj = opts[:burp_obj]
-        rest_browser = burp_obj[:rest_browser]
-        pwn_burp_api = burp_obj[:pwn_burp_api]
-        id = opts[:id] ||= '127.0.0.1:8080'
-        bind_address = opts[:bind_address] ||= '127.0.0.1'
-        port = opts[:port] ||= 8080
-        enabled = opts[:enabled] != false # Default to true if not specified
-
-        post_body = {
-          id: id,
-          bind_address: bind_address,
-          port: port,
-          enabled: enabled
-        }.to_json
-
-        listener = rest_browser.put("http://#{pwn_burp_api}/proxy/listeners/#{id}", post_body, content_type: 'application/json; charset=UTF8')
-        JSON.parse(listener, symbolize_names: true)
-      rescue StandardError => e
-        stop(burp_obj: burp_obj) unless burp_obj.nil?
-        raise e
-      end
-
-      # Supported Method Parameters::
-      # PWN::Plugins::BurpSuite.delete_proxy_listener(
-      #   burp_obj: 'required - burp_obj returned by #start method',
-      #   id: 'required - ID of the proxy listener (e.g., "127.0.0.1:8080")'
-      # )
-
-      public_class_method def self.delete_proxy_listener(opts = {})
-        burp_obj = opts[:burp_obj]
-        rest_browser = burp_obj[:rest_browser]
-        pwn_burp_api = burp_obj[:pwn_burp_api]
-        id = opts[:id]
-        raise 'ERROR: id parameter is required' if id.nil?
-
-        rest_browser.delete("http://#{pwn_burp_api}/proxy/listeners/#{id}")
-        true # Return true to indicate successful deletion (or error if API fails)
-      rescue StandardError => e
-        stop(burp_obj: burp_obj) unless burp_obj.nil?
-        raise e
-      end
-
       # Supported Method Parameters::
       # PWN::Plugins::BurpSuite.update_burp_jar(
       # )
@@ -929,7 +941,7 @@ module PWN
 
       public_class_method def self.help
         puts "USAGE:
-          burp_obj = #{self}.start(
+          burp_obj1 = #{self}.start(
             burp_jar_path: 'optional - path of burp suite pro jar file (defaults to /opt/burpsuite/burpsuite_pro.jar)',
             headless: 'optional - run headless if set to true',
             browser_type: 'optional - defaults to :firefox. See PWN::Plugins::TransparentBrowser.help for a list of types'
@@ -958,6 +970,30 @@ module PWN
             burp_obj: 'required - burp_obj returned by #start method'
           )
 
+          #{self}.get_proxy_listeners(
+            burp_obj: 'required - burp_obj returned by #start method'
+          )
+
+          json_proxy_listener = #{self}.add_proxy_listener(
+            burp_obj: 'required - burp_obj returned by #start method',
+            bind_address: 'required - bind address for the proxy listener (e.g., \"127.0.0.1\")',
+            port: 'required - port for the proxy listener (e.g., 8081)',
+            enabled: 'optional - enable the listener (defaults to true)'
+          )
+
+          json_proxy_listener = #{self}.update_proxy_listener(
+            burp_obj: 'required - burp_obj returned by #start method',
+            id: 'optional - ID of the proxy listener (defaults to \"0\")',
+            bind_address: 'required - bind address for the proxy listener (e.g., \"127.0.0.1\")',
+            port: 'required - port for the proxy listener (e.g., 8081)',
+            enabled: 'optional - enable the listener (defaults to true)'
+          )
+
+          #{self}.delete_proxy_listener(
+            burp_obj: 'required - burp_obj returned by #start method',
+            id: 'required - ID of the proxy listener (defaults to \"0\")'
+          )
+
           json_sitemap = #{self}.get_sitemap(
             burp_obj: 'required - burp_obj returned by #start method',
             target_url: 'optional - target URL to filter sitemap results (defaults to entire sitemap)'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.354'
+  VERSION = '0.5.356'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.354
+  version: 0.5.356
 platform: ruby
 authors:
 - 0day Inc.