pwn 0.5.385 → 0.5.386

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61e60f508b27ca061c1f0f97a99fe9bca5eb88bcc67955ca5aa6ed51db9eb3d8
-  data.tar.gz: 46a8e1ff43dc2b765f11c9e533b6629eea1d429181a6b18dfac08b3991a58772
+  metadata.gz: 32574f1d485c5d56361798bda3224919973f8347bbb3190797d9da2aee93c850
+  data.tar.gz: f539be698f7167a78fbc79f8769df47886e3f7a2a53746fa4d2468432212fef5
 SHA512:
-  metadata.gz: 12d600b05e5ca5eb69debef6e7874fcb4bf5f85f9baefa1555280fa8f7269c98ad20102fb723a0126571bd4492a819b2b735d6400ec02c36352504b2a38d9402
-  data.tar.gz: d2feddfaa93b5540250d77fd9baf4cd7036dfaa2e0847b43d825c9040f953e516ba95290191963b896eaff610679ff7e8f8c63bf0d09246565c6bddeeabf948d
+  metadata.gz: 469d75064ee55c3c2ab4bfc355f1970585204c3b449f43623aa8e951783194dee1f71e8650474750bcc56bd082a8ada97a54f525bdbc25803eea7b7a42ace9c5
+  data.tar.gz: 41b084795147fdc31fc344b4b6e82b31537f65a1562b64a898548170e7b8b971afbcacb798e9c434e2dd497c0d8ceeea895f5132556c91f79a54385912c2e804

data/.rubocop.yml

@@ -16,7 +16,7 @@ Metrics/ClassLength:
 Metrics/CyclomaticComplexity:
   Max: 157
 Metrics/MethodLength:
-  Max: 596
+  Max: 663
 Metrics/ModuleLength:
   Max: 1000
 Metrics/PerceivedComplexity:

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.385]:001 >>> PWN.help
+pwn[v0.5.386]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.385]:001 >>> PWN.help
+pwn[v0.5.386]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.385]:001 >>> PWN.help
+pwn[v0.5.386]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/reports/sast.rb

@@ -431,19 +431,19 @@ module PWN
                         {
                           text: 'Export to JSON',
                           action: function () {
-                            export_selected();
+                            export_json();
                           }
                         },
                         {
-                          text: 'Export to Excel',
+                          text: 'Export to XLSX',
                           action: function () {
-                            exportToExcelOrPdf('excel');
+                            export_xlsx_or_pdf('xlsx');
                           }
                         },
                         {
                           text: 'Export to PDF',
                           action: function () {
-                            exportToExcelOrPdf('pdf');
+                            export_xlsx_or_pdf('pdf');
                           }
                         }
                       ]
@@ -578,7 +578,7 @@ module PWN
                   });
                 }
 
-                function export_selected() {
+                function export_json() {
                   if ($('.multi_line_select tr.highlighted').length === 0 && !confirm('No lines selected. Export all records?')) {
                     return;
                   }
@@ -599,7 +599,7 @@ module PWN
                   });
                 }
 
-                function exportToExcelOrPdf(type) {
+                function export_xlsx_or_pdf(type) {
                   if ($('.multi_line_select tr.highlighted').length === 0 && !confirm('No lines selected. Export all records?')) {
                     return;
                   }
@@ -623,8 +623,64 @@ module PWN
                       });
                     });
 
-                    if (type === 'excel') {
-                      var ws = XLSX.utils.json_to_sheet(flatData);
+                    var exportDate = new Date().toLocaleString();
+                    var title = '~ pwn sast >>> ' + report_name + ' (Exported on ' + exportDate + ')';
+
+                    if (type === 'xlsx') {
+                      // Add title row
+                      var titleRow = [{ v: title, t: 's', s: { font: { sz: 14, bold: true }, alignment: { horizontal: 'center' } } }];
+                      var ws = XLSX.utils.json_to_sheet(flatData, {skipHeader: true});
+                      XLSX.utils.sheet_add_aoa(ws, [titleRow], {origin: 'A1'});
+                      XLSX.utils.sheet_add_json(ws, flatData, {origin: 'A2', skipHeader: false});
+
+                      // Merge title cell across columns
+                      if (!ws['!merges']) ws['!merges'] = [];
+                      ws['!merges'].push({s: {r:0, c:0}, e: {r:0, c:8}}); // A1 to I1
+
+                      // Set column widths by dividing desired column inches by 0.135
+                      // column inches observed with Exce
+                      // e.g 2.83 inches / 0.135 ~ 209px
+                      ws['!cols'] = [
+                        {wpx: 209},
+                        {wpx: 130},
+                        {wpx: 350},
+                        {wpx: 40},
+                        {wpx: 110},
+                        {wpx: 40},
+                        {wpx: 370},
+                        {wpx: 370},
+                        {wpx: 185}
+                      ];
+
+                      // Style header row (row 2, since title at 1, header at 2, data from 3)
+                      var headerStyle = {
+                        font: { bold: true, color: { rgb: "000000" } },
+                        fill: { fgColor: { rgb: "999999" } },
+                        alignment: { horizontal: 'center', wrapText: true }
+                      };
+                      for (var col = 0; col < 9; col++) {
+                        var cellRef = XLSX.utils.encode_cell({r:1, c:col}); // Row 2 (0-based)
+                        if (ws[cellRef]) ws[cellRef].s = headerStyle;
+                      }
+
+                      // Alternate row colors for data rows (starting from row 3)
+                      var grayFill = { fgColor: { rgb: "DEDEDE" } };
+                      var whiteFill = { fgColor: { rgb: "FFFFFF" } };
+                      for (var rowNum = 3; rowNum < flatData.length + 2; rowNum++) { // Data rows 2-based from 3
+                        var fill = (rowNum % 2 === 0) ? whiteFill : grayFill;
+                        for (var col = 0; col < 9; col++) {
+                          var cellRef = XLSX.utils.encode_cell({r: rowNum, c: col});
+                          if (ws[cellRef]) {
+                            if (!ws[cellRef].s) ws[cellRef].s = {};
+                            ws[cellRef].s.fill = fill;
+                            ws[cellRef].s.alignment = { wrapText: true, vertical: 'top' };
+                          }
+                        }
+                      }
+
+                      // Freeze header
+                      ws['!freeze'] = { xSplit: 0, ySplit: 2 };
+
                       var wb = XLSX.utils.book_new();
                       XLSX.utils.book_append_sheet(wb, ws, 'PWN SAST Results');
                       XLSX.writeFile(wb, report_name + '.xlsx');
@@ -632,12 +688,29 @@ module PWN
                       var docDefinition = {
                         pageOrientation: 'landscape',
                         pageSize: 'LETTER',
+                        pageMargins: [10, 10, 10, 10],
+                        header: {
+                          text: title, margin: [20, 10, 20, 0],
+                          fontSize: 12, bold: true,
+                          alignment: 'center'
+                        },
+                        footer: function(currentPage, pageCount) {
+                          return {
+                            text: 'Page ' + currentPage.toString() + ' of ' + pageCount + ' | Exported on ' + exportDate,
+                            alignment: 'center',
+                            fontSize: 8,
+                            margin: [0, 0, 0, 10]
+                          };
+                        },
                         content: [
-                          { text: '~ pwn sast: ' + report_name, style: 'header' },
+                          {
+                            text: title,
+                            style: 'header'
+                          },
                           {
                             table: {
                               headerRows: 1,
-                              widths: [40, 30, 50, 30, 75, 30, 155, 155, 50],
+                              widths: [45, 40, 70, 30, 80, 30, 165, 165, 70],
                               body: [
                                 ['Timestamp', 'Test Case', 'NIST 800-53', 'CWE', 'Path', 'Line#', 'Content', 'AI Analysis', 'Author'],
                                 ...flatData.map(r => [
@@ -653,34 +726,35 @@ module PWN
                                 ])
                               ]
                             },
-                            layout: 'lightHorizontalLines'
+                            layout: {
+                              hLineWidth: function(i, node) { return (i === 0 || i === node.table.body.length) ? 1 : 0.5; },
+                              vLineWidth: function(i, node) { return 0.5; },
+                              hLineColor: function(i, node) { return '#aaaaaa'; },
+                              vLineColor: function(i, node) { return '#aaaaaa'; },
+                              fillColor: function (rowIndex, node, columnIndex) {
+                                if (rowIndex === 0) {
+                                  return '#999999'; // Dark header
+                                }
+                                return (rowIndex % 2 === 0) ? '#ffffff' : '#dedede'; // White even, gray odd
+                              },
+                              paddingLeft: function(i, node) { return 4; },
+                              paddingRight: function(i, node) { return 4; },
+                              paddingTop: function(i, node) { return 2; },
+                              paddingBottom: function(i, node) { return 2; }
+                            }
                           }
                         ],
                         styles: {
-                          title: {
-                            alignment: 'center',
-                            fontSize: 15
-                          },
-                          tableHeader: {
-                            bold: true,
+                          header: {
                             fontSize: 12,
-                            color: 'white',
-                            fillColor: '#2d4154',
-                            alignment: 'center'
-                          },
-                          tableBodyEven: {},
-                          tableBodyOdd: {
-                            fillColor: '#dedede'
-                          },
-                          tableFooter: {
                             bold: true,
-                            fontSize: 8,
-                            color: 'white',
-                            fillColor: '#2d4154'
-                          },
+                            margin: [0, 0, 0, 10]
+                          }
                         },
                         defaultStyle: {
-                          fontSize: 6
+                          fontSize: 8,
+                          color: '#000000',
+                          columnGap: 20
                         }
                       };
                       pdfMake.createPdf(docDefinition).download(report_name + '.pdf');

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.385'
+  VERSION = '0.5.386'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.385
+  version: 0.5.386
 platform: ruby
 authors:
 - 0day Inc.