pwn 0.5.360 → 0.5.362

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eeee337e9a2c5177f741508eb5eef6f451bc40226122d5c7c4715bdb90c500e3
-  data.tar.gz: d9b0ee1d04259d8178498ec800bb755c2197c4864ba016932e1d3a4515daf529
+  metadata.gz: f96f7d17fe074a56c13412ad57096f2901637142735e40c6da52a0e1a14ddc99
+  data.tar.gz: 2c329e97737723040338d9d3d7031c4e16a25fafc257a51bd82ad8b124d63921
 SHA512:
-  metadata.gz: eecefbeebc5a8efd78c0d41bd54f86ad463ec2d988b08d8dbdd35d717964b261899aea17245c614f385eb2a696ad943d2d96b1d015dce69a09c56d15a6c7424b
-  data.tar.gz: 665a85e6cbb2179696c88872ebe3d9eac6b2e3ed58230106e9d8358e328d095f7e476208de43e61d7d83babff2f25678fa4aed9563d269e416de5f7e56a2ca65
+  metadata.gz: 23aedc93f01608c45fb762b41fad7adcccb7dda870b7481e8cf02b843c25f56fb626215225eb89e4ceb018b7df597512f579bbc346418ca8ae1e9f22fc50dba6
+  data.tar.gz: 689ad410f181f5dce20bca7b5cffad846d8aabaec3f773155ed40dde59bcda773c3265b1aa70327a1ced17bb1294d13707a3ab555353603161cf057d9ba153a6

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.360]:001 >>> PWN.help
+pwn[v0.5.362]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.360]:001 >>> PWN.help
+pwn[v0.5.362]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.360]:001 >>> PWN.help
+pwn[v0.5.362]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -14,7 +14,8 @@ module PWN
       #   scheme: 'required - scheme of the URI (http|https)',
       #   host: 'required - host of the URI',
       #   port: 'optional - port of the URI',
-      #   path: 'optional - path of the URI'
+      #   path: 'optional - path of the URI',
+      #   query: 'optional - query string of the URI'
       # )
       private_class_method def self.format_uri_from_sitemap_resp(opts = {})
         scheme = opts[:scheme]
@@ -25,6 +26,7 @@ module PWN
 
         port = opts[:port]
         path = opts[:path]
+        query = opts[:query]
 
         implicit_http_ports_arr = [
           80,
@@ -33,6 +35,7 @@ module PWN
 
         uri = "#{scheme}://#{host}:#{port}#{path}"
         uri = "#{scheme}://#{host}#{path}" if implicit_http_ports_arr.include?(port)
+        uri = "#{uri}?#{query}" unless query.nil?
 
         uri
       rescue StandardError => e
@@ -790,6 +793,7 @@ module PWN
           json_req = site[:request]
           b64_decoded_req = Base64.strict_decode64(json_req)
           json_path = b64_decoded_req.split[1].to_s.scrub.strip.chomp
+          json_query = json_path.split('?')[1].to_s.scrub.strip.chomp
 
           json_http_svc = site[:http_service]
           json_protocol = json_http_svc[:protocol]
@@ -800,7 +804,8 @@ module PWN
             scheme: json_protocol,
             host: json_host,
             port: json_port,
-            path: json_path
+            path: json_path,
+            query: json_query
           )
 
           uri_in_scope = in_scope(
@@ -919,12 +924,14 @@ module PWN
         host = URI.parse(target_url).host
         port = URI.parse(target_url).port
         path = URI.parse(target_url).path
+        query = URI.parse(target_url).query
 
         target_domain = format_uri_from_sitemap_resp(
           scheme: scheme,
           host: host,
           port: port,
-          path: path
+          path: path,
+          query: query
         )
 
         puts "Generating #{report_type} report for #{target_domain}..."

data/lib/pwn/reports/fuzz.rb

@@ -277,10 +277,6 @@ module PWN
                     var selected_data = selectedRows.data().toArray();
                     original_json.data = selected_data;
 
-                    if (original_json.report_name) {
-                      original_json.report_name += '_selected';
-                    }
-
                     var json_str = JSON.stringify(original_json, null, 2);
                     var blob = new Blob([json_str], { type: 'application/json' });
                     var url = URL.createObjectURL(blob);

data/lib/pwn/reports/phone.rb

@@ -334,10 +334,6 @@ module PWN
                     var selected_data = selectedRows.data().toArray();
                     original_json.data = selected_data;
 
-                    if (original_json.report_name) {
-                      original_json.report_name += '_selected';
-                    }
-
                     var json_str = JSON.stringify(original_json, null, 2);
                     var blob = new Blob([json_str], { type: 'application/json' });
                     var url = URL.createObjectURL(blob);

data/lib/pwn/reports/sast.rb

@@ -364,10 +364,6 @@ module PWN
 
                     original_json.data = new_data;
 
-                    if (original_json.report_name) {
-                      original_json.report_name += '_selected';
-                    }
-
                     var json_str = JSON.stringify(original_json, null, 2);
                     var blob = new Blob([json_str], { type: 'application/json' });
                     var url = URL.createObjectURL(blob);

data/lib/pwn/reports/uri_buster.rb

@@ -285,10 +285,6 @@ module PWN
                     var selected_data = selectedRows.data().toArray();
                     original_json.data = selected_data;
 
-                    if (original_json.report_name) {
-                      original_json.report_name += '_selected';
-                    }
-
                     var json_str = JSON.stringify(original_json, null, 2);
                     var blob = new Blob([json_str], { type: 'application/json' });
                     var url = URL.createObjectURL(blob);

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.360'
+  VERSION = '0.5.362'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.360
+  version: 0.5.362
 platform: ruby
 authors:
 - 0day Inc.