pwn 0.5.369 → 0.5.371

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ddb9e7ee3407311d3a4818e5fb8e1766e95d0cad1963be4dbb073826c7e4e9a5
-  data.tar.gz: fd1aab577447769da5f3f2217d98782ef5b3fbfd09dc356c6a7be57a2bc35bdf
+  metadata.gz: 1df5b3d4c2d79901fe666b5577650d27f0d76352869d63e7663d20ac7abf77f0
+  data.tar.gz: 0a43e230337f5c7c4d767e25bd37b308c1f0b58f35d1594c5cf83bef51bd2db8
 SHA512:
-  metadata.gz: a08c51dfee8578d5468c89d2b75b1dba462808ad596a6a2c18d388b2a51993b59d191cea417ff9917a7ba9dbb43b722cb57129a58aa31e03dad822d7c8418f4f
-  data.tar.gz: a23871b5b0ebbfbb0b4fb90f3d2892d2183b7964bb8710844cd992f559eac1e907466f93affcb6843969ebf21281deb81aa4b55fe4a6e743b3c467ac8e9464af
+  metadata.gz: 6cc49d2a3342cdf77836653582c71b7d3925e9b04924751ee6ba158726a4567ef29377bf51070e2e3b9aa393bfa24f30f448f848c89412d8a48bd3340f18b40b
+  data.tar.gz: cbbc66c2dc8a5d0f323765f60d1fc01217e4d75b9aea514b51265cb7d699b30f38cffef2cf8c2c376760f0dcca8db7cf5ee485e324333af011643d5be9e3eee4

data/.rubocop.yml

@@ -14,7 +14,7 @@ Metrics/BlockNesting:
 Metrics/ClassLength:
   Max: 134
 Metrics/CyclomaticComplexity:
-  Max: 122
+  Max: 123
 Metrics/MethodLength:
   Max: 485
 Metrics/ModuleLength:

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.369]:001 >>> PWN.help
+pwn[v0.5.371]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.369]:001 >>> PWN.help
+pwn[v0.5.371]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.369]:001 >>> PWN.help
+pwn[v0.5.371]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -416,7 +416,7 @@ module PWN
           url: "http://#{pwn_burp_api}/sitemap",
           payload: sitemap.to_json,
           headers: { content_type: 'application/json; charset=UTF-8' },
-          timeout: 30
+          timeout: 10
         )
 
         if debug
@@ -429,7 +429,7 @@ module PWN
         JSON.parse(response.body, symbolize_names: true)
       rescue RestClient::ExceptionWithResponse => e
         puts "ERROR: Failed to add to sitemap: #{e.message}"
-        puts "HTTP error adding to sitemap: Status #{e.response.code}, Response: #{e.response.body}" if e.responds_to?(:response) && e.response.respond_to?(:code) && e.response.respond_to?(:body)
+        puts "HTTP error adding to sitemap: Status #{e.response.code}, Response: #{e.response.body}" if e.respond_to?(:response) && e.response.respond_to?(:code) && e.response.respond_to?(:body)
       rescue StandardError => e
         stop(burp_obj: burp_obj) unless burp_obj.nil?
         raise e
@@ -438,7 +438,7 @@ module PWN
       # Supported Method Parameters:
       # json_sitemap = PWN::Plugins::BurpSuite.import_openapi_to_sitemap(
       #   burp_obj: 'required - burp_obj returned by #start method',
-      #   openapi_spec: 'required - path to OpenAPI JSON specification file',
+      #   openapi_spec: 'required - path to OpenAPI JSON or YAML specification file',
       #   additional_http_headers: 'optional - hash of additional HTTP headers to include in requests (default: {})',
       #   highlight: 'optional - highlight color for the sitemap entry (default: "NONE")',
       #   comment: 'optional - comment for the sitemap entry (default: "")',
@@ -459,8 +459,10 @@ module PWN
 
         debug = opts[:debug] || false
 
-        # Parse the OpenAPI JSON
-        openapi = JSON.parse(File.read(openapi_spec), symbolize_names: true)
+        # Parse the OpenAPI JSON or YAML specification file
+        # If the opeenapi_spec is YAML, convert it to JSON
+        openapi = JSON.parse(File.read(openapi_spec), symbolize_names: true) if openapi_spec.end_with?('.json')
+        openapi = YAML.safe_load_file(openapi_spec, permitted_classes: [Symbol, Date, Time], aliases: true, symbolize_names: true) if openapi_spec.end_with?('.yaml', '.yml')
 
         # Initialize result array
         sitemap_arr = []
@@ -763,7 +765,11 @@ module PWN
           end
         end
 
-        sitemap_arr.each { |sitemap| add_to_sitemap(burp_obj: burp_obj, sitemap: sitemap) }
+        begin
+          sitemap_arr.each { |sitemap| add_to_sitemap(burp_obj: burp_obj, sitemap: sitemap) }
+        rescue RestClient::ExceptionWithResponse
+          next
+        end
 
         sitemap_arr
       rescue StandardError => e
@@ -1084,7 +1090,7 @@ module PWN
 
           json_sitemap = #{self}.import_openapi_to_sitemap(
             burp_obj: 'required - burp_obj returned by #start method',
-            openapi_spec: 'required - path to OpenAPI JSON specification file',
+            openapi_spec: 'required - path to OpenAPI JSON or YAML specification file',
             additional_http_headers: 'optional - hash of additional HTTP headers to include in requests (default: {})',
             debug: 'optional - boolean to enable debug logging (default: false)',
             highlight: 'optional - highlight color for the sitemap entry (default: \"NONE\")',

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.369'
+  VERSION = '0.5.371'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.369
+  version: 0.5.371
 platform: ruby
 authors:
 - 0day Inc.