pwn 0.5.387 → 0.5.390

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6276f7133a84a10851a85b44e5b21543de34abaec589011698c04667ede52f35
-  data.tar.gz: b632de2f5bf6957b5ab1ce5f4408403a935a4fce1709bbcaa223d56962cef613
+  metadata.gz: 29455d0f44118f016d59ba4370e80b883a189d960697d2ad98f1c6d36b6b953d
+  data.tar.gz: bda5ff363c12e7b054daf8f71936d8d83ccf973c7e927333331e6107ddb9e4df
 SHA512:
-  metadata.gz: bdc09c6f2b768550ab1c288bccab9e02c8008eb09769313f350719c19b8a4d87b6121116f481f013ee2ba2b978b79ccf5a81ec7a177f0f966103b810887e367b
-  data.tar.gz: f6911fdab5cffa4038412815b4b8a1f5ccba48d6bd0b645900aa65b79138322c00945b6740c0f5f165bcb3169b2c54582ad0c5735b19d07ac68081e60eff2f23
+  metadata.gz: 885789f3328900c0e0cfee3c69a868a54851b9b156c61399a32f789daa767e1f33d5a1f4846d197832f76f8916da525cd40e564666691ed2489b495e0e47cc06
+  data.tar.gz: b25394c00e67546058cc7cc0b8da9cdf2b93a1165f4305ed056c5959907273f4b884607be987550095fd9fcae14bdacfd81a58a7e08c6381742cca2be6c947ee

data/.rubocop.yml

@@ -2,7 +2,7 @@ AllCops:
   UseCache: false
   NewCops: enable
 Layout/LineLength:
-  Max: 874
+  Max: 1620
 Lint/UselessRescue:
   Enabled: false
 Metrics/AbcSize:
@@ -16,7 +16,7 @@ Metrics/ClassLength:
 Metrics/CyclomaticComplexity:
   Max: 157
 Metrics/MethodLength:
-  Max: 663
+  Max: 564
 Metrics/ModuleLength:
   Max: 1000
 Metrics/PerceivedComplexity:

data/Gemfile

@@ -82,7 +82,7 @@ gem 'rmagick', '6.1.4'
 gem 'rqrcode', '3.1.0'
 gem 'rspec', '3.13.1'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.80.0'
+gem 'rubocop', '1.80.1'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.6.0'
 gem 'ruby-audio', '1.6.1'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.387]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.387]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.387]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/git.rb

@@ -56,11 +56,7 @@ module PWN
         target_file = opts[:target_file].to_s
         target_file.gsub!(%r{^#{repo_root}/}, '')
 
-        if File.directory?(repo_root) && File.file?("#{repo_root}/#{target_file}")
-          `git --git-dir="#{Shellwords.escape(repo_root)}/.git" log -L #{from_line},#{to_line}:"#{Shellwords.escape(target_file)}" 2> /dev/null | grep Author | head -n 1`.to_s.scrub
-        else
-          -1
-        end
+        `git --git-dir="#{Shellwords.escape(repo_root)}/.git" log -L #{from_line},#{to_line}:"#{Shellwords.escape(target_file)}" 2> /dev/null | grep Author | head -n 1`.to_s.scrub if File.directory?(repo_root) && File.file?("#{repo_root}/#{target_file}")
       rescue StandardError => e
         raise e
       end
@@ -120,7 +116,7 @@ module PWN
           )
         end
 
-        author
+        author ||= 'N/A'
       rescue StandardError => e
         raise e
       end

data/lib/pwn/plugins/scannable_codes.rb

@@ -1,8 +1,10 @@
 # frozen_string_literal: true
 
 require 'barby'
-require 'rqrcode'
+require 'base64'
+require 'fileutils'
 require 'chunky_png'
+require 'rqrcode'
 
 module PWN
   module Plugins
@@ -12,7 +14,9 @@ module PWN
       # response = PWN::Plugins::ScannableCodes.generate(
       #   data: 'required - data to encode',
       #   type: 'optional - :barcode || :qrcode (defaults to :qrcode)',
+      #   size: 'optional - size of the image when type is :qrcode (defaults to 200)',
       #   path: 'optional - path to save image (defaults to "./#{data}.png")'
+      #   return_type: 'optional - :base64 || :file (defaults to :file)'
       # )
 
       public_class_method def self.generate(opts = {})
@@ -22,22 +26,34 @@ module PWN
         type = opts[:type]
         type ||= :qrcode
 
+        size = opts[:size]
+        raise 'ERROR: size is only applicable when type is :qrcode.' if size && type != :qrcode
+
         path = opts[:path]
         path ||= "./#{data}.png"
 
+        return_type = opts[:return_type] ||= :file
+
         case type
         when :barcode
           barcode = Barby::Code128B.new(data)
           barcode.to_png.save(path)
         when :qrcode
+          size ||= 200
           qrcode = RQRCode::QRCode.new(data)
           png = qrcode.as_png
-          png.resize(200, 200).save(path)
+          png.resize(size, size).save(path)
         else
           raise 'ERROR: type must be :barcode or :qrcode.'
         end
 
-        puts "Saved #{type} to #{path}"
+        data = "Saved #{type} to #{path}"
+        if return_type == :base64
+          data = Base64.strict_encode64(File.binread(path))
+          FileUtils.rm_f(path)
+        end
+
+        data
       rescue Interrupt
         puts "\nGoodbye."
       rescue StandardError => e
@@ -59,6 +75,7 @@ module PWN
           #{self}.generate(
             data: 'required - data to encode',
             type: 'optional - :barcode || :qrcode (defaults to :qrcode)',
+            size: 'optional - size of the image when type is :qrcode (defaults to 200)',
             path: 'optional - path to save image (defaults to \"./\#{data}.png\")'
           )
 

data/lib/pwn/reports/html_header.rb

@@ -0,0 +1,255 @@
+# frozen_string_literal: true
+
+require 'cgi'
+require 'json'
+require 'tty-spinner'
+
+module PWN
+  module Reports
+    # This plugin generates the HTML header and includes external JS/CSS libraries for PWN reports.
+    module HTMLHeader
+      # Supported Method Parameters::
+      # PWN::Reports::HTMLHeader.generate(
+      #   column_names: 'required - array of column names to use in the report table',
+      #   driver_src_uri: 'required - pwn driver source code uri',
+      # )
+
+      public_class_method def self.generate(opts = {})
+        column_names = opts[:column_names] || []
+        driver_src_uri = opts[:driver_src_uri]
+        raise 'ERROR: :driver_src_uri must be provided' if driver_src_uri.nil? || driver_src_uri.strip == ''
+
+        driver_src_name = "~ #{driver_src_uri.to_s.split('/').last.gsub('_', ' ')}"
+
+        external_css_libraries = [
+          {
+            src: 'https://cdn.datatables.net/plug-ins/2.3.3/features/searchHighlight/dataTables.searchHighlight.css',
+            integrity: 'sha384-3FGcHDS9wKlVV/Pu4y1kojpLsNxlE3jQjdm1N0p7RC9f6xPdRAj78js3ELGiGP/j'
+          },
+          {
+            src: 'https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.css',
+            integrity: 'sha384-51NLFpi/9qR2x0LAjQHiFAjV765f0g9+05EmKQ/QWINR/y3qonty8mPy68vEbo0z'
+          }
+        ]
+
+        external_js_libraries = [
+          {
+            src: 'https://code.jquery.com/jquery-3.7.1.min.js',
+            integrity: 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo='
+          },
+          {
+            src: 'https://cdn.jsdelivr.net/npm/datatables.mark.js@2.1.0/dist/datatables.mark.min.js',
+            integrity: 'sha384-1NNYvadWgPeE3tcSCdnI+3HB9iVqXwDBQsQUCUJTygTR3Whmz3HFkMn1kdevXe/F'
+          },
+          {
+            src: 'https://bartaz.github.io/sandbox.js/jquery.highlight.js',
+            integrity: 'sha384-COfjQfuLZw+Zvx+XMsYIVqsBHXPaUJnu/nwutbZvnI3zys8lUt3N3SUDsR6yu7ud'
+          },
+          {
+            src: 'https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js',
+            integrity: 'sha384-VFQrHzqBh5qiJIU0uGU5CIW3+OWpdGGJM9LBnGbuIH2mkICcFZ7lPd/AAtI7SNf7'
+          },
+          {
+            src: 'https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js',
+            integrity: 'sha384-/RlQG9uf0M2vcTw3CX7fbqgbj/h8wKxw7C3zu9/GxcBPRKOEcESxaxufwRXqzq6n'
+          },
+          {
+            src: 'https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.js',
+            integrity: 'sha384-jvnxkXTB++rTO/pbg6w5nj0jm5HiSGtTcBW5vnoLGRfmSxw3eyqNA0bJ+m6Skjw/'
+          },
+          {
+            src: 'https://cdn.datatables.net/plug-ins/2.3.3/features/searchHighlight/dataTables.searchHighlight.min.js',
+            integrity: 'sha384-XDdmvsWg5e1/POTILjMFvB3KtrBqRk5W1CG9aoi1+K6bBMPHQAvlKEiekndU6CTp'
+          },
+          {
+            src: 'https://unpkg.com/exceljs@4.4.0/dist/exceljs.min.js',
+            integrity: 'sha384-Pqp51FUN2/qzfxZxBCtF0stpc9ONI6MYZpVqmo8m20SoaQCzf+arZvACkLkirlPz'
+          }
+        ]
+
+        markup = %(<!DOCTYPE HTML>
+        <html>
+          <head>
+            <!-- favicon.ico from https://0dayinc.com -->
+            <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
+            <style>
+              body {
+                font-family: Verdana, Geneva, sans-serif;
+                font-size: 11px;
+                background-color: #FFFFFF;
+                color: #084B8A !important;
+              }
+
+              a:link {
+                color: #0174DF;
+                text-decoration: none;
+              }
+
+              a:visited {
+                color: #B40404;
+                text-decoration: none;
+              }
+
+              a:hover {
+                color: #01A9DB;
+                text-decoration: underline;
+              }
+
+              a:active {
+                color: #610B5E;
+                text-decoration: underline;
+              }
+
+              div.toggle_col_and_button_group {
+                display: flex; /* Makes the container a flex container */
+                justify-content: none; /* Aligns items along the main axis */
+                align-items: flex-start; /* Aligns items to the start of the cross-axis */
+                width: 1275px !important;
+              }}
+
+              div.cols_to_toggle {
+                width: 300px !important;
+                text-align: left !important;
+                vertical-align: middle !important;
+              }
+
+              div.dt-buttons {
+                width: 420px !important;
+                text-align: right !important;
+              }
+
+              div.dt-container {
+                width: 1275px !important;
+              }
+
+              div.dt-scroll-body {
+                width: 1275px !important;
+              }
+
+              span.highlight {
+                background-color: cyan  !important;
+              }
+              table {
+                width: 100%;
+                border-spacing:0px;
+              }
+
+              table.squish {
+                table-layout: fixed;
+              }
+
+              td {
+                vertical-align: top;
+                word-wrap: break-word !important;
+                border: none !important;
+              }
+
+              table.multi_line_select tr.odd {
+                background-color: #dedede !important;  /* Gray for odd rows */
+              }
+
+              table.multi_line_select tr.even {
+                background-color: #ffffff !important;  /* White for even rows */
+              }
+
+              tr.highlighted td {
+                background-color: #FFF396 !important;
+              }
+            </style>
+        )
+
+        external_css_libraries.each do |css_lib_hash|
+          css_lib = css_lib_hash[:src]
+          css_integrity = css_lib_hash[:integrity]
+          markup += %(
+            <link href="#{css_lib}" rel="stylesheet" integrity="#{css_integrity}" crossorigin="anonymous">
+          )
+        end
+
+        external_js_libraries.each do |js_lib|
+          js_src = js_lib[:src]
+          js_integrity = js_lib[:integrity]
+          markup += %(
+            <script type="text/javascript" src="#{js_src}" integrity="#{js_integrity}" crossorigin="anonymous"></script>
+          )
+        end
+
+        markup += %(
+          </head>
+          <body id="pwn_body">
+
+            <h1 style="display:inline">
+              <img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIEAAACCCAQAAADLPWN1AAAAAXNSR0IB2cksfwAAAARnQU1BAACxjwv8YQUAAAAgY0hSTQAAeiYAAICEAAD6AAAAgOgAAHUwAADqYAAAOpgAABdwnLpRPAAAAAJiS0dEAIKpO8E+AAAACXBIWXMAAAsTAAALEwEAmpwYAAADTElEQVR42u2dyY7jMBBDqxrz/7+sOTRycCKJpOwBBsjzrWO3F4Ks3XKPUV++/dTXb3+qqjr8p1/i9HLPa2uxZ0z+6s011HXPngMWAAEQvGzBXK+fW6b+uUJ7ebTWuL7+yXPAAiB4E8IdurV5XObs1rLQEZ37HLAACKZCcLcrIe8QXFF7wAKEAAT/sS2oSWbnuqUOz55dFxYAwQNCyKi1iwdbuEudOq0j0A6jUlgABLYQ+saJVP1vHB1X0XFnzwELgAAIXrbgLMLS3YS2LMdZoWO2b8AChPB0mjRLQ9okX9tSWcuiTUepos2dbGmoIYSLEDRxXYur+0Pne3bRYZv3OXtCWAAEQFBGyUSVPa52ZCydZ5lO1tXz7nwl7xYWAMGbD/ocumvTEenUpc0oci2sLM4zHndyNCwAgjchtJlyKOK6SUt8s5GkdAxLmoQQgOCeU8wyOzevHNFv6fkomSAEu2Qyo4xKk3QXOROWS/fZddOBf1gABDI67JC4KkrLxmt3tQv3v1qKAxYAARBcbUE6OZzZhzKjtCzeO7MSRXSIEM7SJOWiRljOUCR1644loz7teBECQrikSSUJqbtESg6usLKY0+9E9fIasAAIgKA2M8juaNXM3eiO8RN5IywAgn8aHaoE5XTZjJNoUzvo7FqUTBCCIYQsQXKjSHdk485c+lnNkjQJIQDBzha4M4ZnTjGr+9fyumddbjrLCGGTJqWlEHeecOaclHx091rf3/o3OssIwagXeHTzaazjzKySoGoSPZUPLAACIHiiZDJu6F5Flm6mmHavVXZLdIgQ7OjQXZVGL+2kSe+ObHREc7ejDQuA4G0VCzcNcY+bRXPKgj9RhchqErAACICgNivjP1fDc2dJynSe2vWt+xyz54AFQBAu7ZS2vLJFNmbnc1t86RvRsAAITI+gBXG2LLyb6gzhiTqscTQsQAhAIG3BmcPyoj3nfCOKIl3b4rp1WAAEt76Vso4En3gXWb39nA7yUzJBCKEQUnvuRXO741Qi41r8sxEQWAAEQHDPFqy/cjduaPzsrbX1ne3WY4QFQLARwtMvQWWLx6VncqPX9W+wAAge/FbK2p5nn6PU4x6uRNzCOiwAAiCozdwhLAACIPiq7S/uVkwm4fz8nQAAAABJRU5ErkJggg==" type="image/png" style="iheight:70px;width:70px;"/>
+              <a href="#{driver_src_uri}" target="_blank">#{driver_src_name}</a>
+            </h1>
+            <h2 id="report_name"></h2><br />
+
+            <div id="toggle_col_and_button_group" class="toggle_col_and_button_group">
+              <div class="cols_to_toggle">
+                <b>Toggle Column(s) Visibility:</b>&nbsp;
+        )
+
+        last_column_idx = column_names.length - 1
+        column_names.each_with_index do |col, idx|
+          dat_col = idx + 1
+          encoded_col = CGI.escape_html(col)
+          if idx < last_column_idx
+            markup += %(
+                <a class="toggle-vis" data-column="#{dat_col}" href="#">#{encoded_col}</a>&nbsp;|&nbsp;
+            )
+          else
+            markup += %(
+                <a class="toggle-vis" data-column="#{dat_col}" href="#">#{encoded_col}</a>
+            )
+          end
+        end
+
+        markup += %(
+              </div>
+            </div>
+            <div class="dt-container">
+              <table id="pwn_results" class="display" cellspacing="0">
+                <thead>
+                  <tr>
+                    <th>#</th>
+        )
+
+        column_names.each do |col|
+          markup += %(
+            <th>#{col}</th>
+          )
+        end
+
+        markup += %(
+                  </tr>
+                </thead>
+                <!-- DataTables <tbody> -->
+              </table>
+            </div>
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          #{self}.generate(
+            column_names: 'Array of Column Names to use in the report table',
+            driver_src_uri: 're
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/reports/sast.rb

@@ -127,140 +127,18 @@ module PWN
           JSON.pretty_generate(results_hash)
         )
 
-        html_report = %{<!DOCTYPE HTML>
-        <html>
-          <head>
-            <!-- favicon.ico from https://0dayinc.com -->
-            <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
-            <style>
-              body {
-                font-family: Verdana, Geneva, sans-serif;
-                font-size: 11px;
-                background-color: #FFFFFF;
-                color: #084B8A !important;
-              }
-
-              a:link {
-                color: #0174DF;
-                text-decoration: none;
-              }
-
-              a:visited {
-                color: #B40404;
-                text-decoration: none;
-              }
-
-              a:hover {
-                color: #01A9DB;
-                text-decoration: underline;
-              }
-
-              a:active {
-                color: #610B5E;
-                text-decoration: underline;
-              }
-
-              div.dt-container {
-                width: 1275px !important;
-              }
-
-              div.dt-scroll-body {
-                width: 1275px !important;
-              }
-
-              table {
-                width: 100%;
-                border-spacing:0px;
-              }
-
-              table.squish {
-                table-layout: fixed;
-              }
-
-              td {
-                vertical-align: top;
-                word-wrap: break-word !important;
-                border: none !important;
-              }
-
-              table.multi_line_select tr.odd {
-                background-color: #dedede !important;  /* Gray for odd rows */
-              }
-
-              table.multi_line_select tr.even {
-                background-color: #ffffff !important;  /* White for even rows */
-              }
-
-              tr.highlighted td {
-                background-color: #FFF396 !important;
-              }
-            </style>
-
-            <!-- jQuery & DataTables -->
-            <script type="text/javascript" src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
-
-            <link href="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.css" rel="stylesheet" integrity="sha384-51NLFpi/9qR2x0LAjQHiFAjV765f0g9+05EmKQ/QWINR/y3qonty8mPy68vEbo0z" crossorigin="anonymous">
-
-            <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js" integrity="sha384-VFQrHzqBh5qiJIU0uGU5CIW3+OWpdGGJM9LBnGbuIH2mkICcFZ7lPd/AAtI7SNf7" crossorigin="anonymous"></script>
-
-            <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js" integrity="sha384-/RlQG9uf0M2vcTw3CX7fbqgbj/h8wKxw7C3zu9/GxcBPRKOEcESxaxufwRXqzq6n" crossorigin="anonymous"></script>
-
-            <script src="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.js" integrity="sha384-jvnxkXTB++rTO/pbg6w5nj0jm5HiSGtTcBW5vnoLGRfmSxw3eyqNA0bJ+m6Skjw/" crossorigin="anonymous"></script>
-
-            <script src="https://cdn.sheetjs.com/xlsx-0.20.2/package/dist/xlsx.full.min.js"></script>
-
-            <!--
-            <script type="text/javascript" src="//code.jquery.com/jquery-3.6.0.min.js"></script>
-
-            <link rel="stylesheet" type="text/css" href="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.css"/>
-
-            <script type="text/javascript" src="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.js"></script>
-            -->
-          </head>
-
-          <body id="pwn_body">
-
-            <h1 style="display:inline">
-              <a href="https://github.com/0dayinc/pwn/tree/master">~ pwn sast</a>
-            </h1><br /><br />
-            <h2 id="report_name"></h2><br />
-
-            <div class="dt-buttons" id="button_group">
-              <!--<button type="button" id="debug_rows_selected">Rows Selected</button>-->
-            </div>
-
-            <div>
-              <b>Toggle Column(s) Visibility:</b>&nbsp;
-              <a class="toggle-vis" data-column="1" href="#">Timestamp</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="2" href="#">Test Case / Security References</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="3" href="#">Path</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="4" href="#">Line#, Formatted Content, AI Analysis, &amp; Last Committed By</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="5" href="#">Raw Content</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="6" href="#">Test Case (Anti-Pattern) Filter</a>
-            </div>
-            <br /><br />
-
-            <div>
-              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
-            </div><br />
-
-            <div>
-              <table id="pwn_scan_git_source_results" class="display" cellspacing="0">
-                <thead>
-                  <tr>
-                    <th>#</th>
-                    <th>Timestamp</th>
-                    <th>Test Case / Security References</th>
-                    <th>Path</th>
-                    <th>Line#, Formatted Content, AI Analysis, &amp; Last Committed By</th>
-                    <th>Raw Content</th>
-                    <th>Test Case (Anti-Pattern) Filter</th>
-                  </tr>
-                </thead>
-                <!-- DataTables <tbody> -->
-              </table>
-            </div>
-
+        column_names = [
+          'Timestamp',
+          'Test Case / Security References',
+          'Path',
+          'Line# | Source | AI Analysis | Author',
+          'Raw Content',
+          'Test Case'
+        ]
+
+        driver_src_uri = 'https://github.com/0dayinc/pwn/blob/master/bin/pwn_sast'
+
+        html_report = %(#{PWN::Reports::HTMLHeader.generate(column_names: column_names, driver_src_uri: driver_src_uri)}
             <script>
               var htmlEntityEncode = $.fn.dataTable.render.text().display;
 
@@ -273,10 +151,11 @@ module PWN
                 var offset = 400;
                 var min_scroll_height = 100;
                 var scrollYHeight = Math.max(min_scroll_height, windowHeight - offset);  // Ensure minimum of 600px
-                var table = $('#pwn_scan_git_source_results').DataTable( {
+                var table = $('#pwn_results').DataTable( {
                   "order": [[2, 'asc']],
                   "scrollY": scrollYHeight + "px",
                   "scrollCollapse": true,
+                  "searchHighlight": true,
                   "paging": true,
                   "lengthMenu": [25, 50, 100, 250, 500, 1000, 2500, 5000],
                   "drawCallback": function () {
@@ -449,61 +328,52 @@ module PWN
                       ]
                     });
 
-                    table.buttons().container().insertAfter('#button_group');
+                    table.buttons().container().appendTo('#toggle_col_and_button_group');
                   }
                 });
 
-                $('#pwn_scan_git_source_results tbody').on('click', '.multi_line_select tr', function () {
+                $('#pwn_results tbody').on('click', '.multi_line_select tr', function () {
                   $(this).toggleClass('highlighted');
                 });
 
+                // Dynamically create the smart toggle label and input
+                var smartLabel = $('<label for="smart-toggle">Smart Search (e.g., "security !password")</label>');
+                var smartInput = $('<input type="radio" id="smart-toggle" name="searchMode" value="" checked>');
+                smartLabel.prepend(smartInput);  // Prepend input inside label for proper association
+
+                // Dynamically create the regex toggle label and input
+                var regexLabel = $('<label for="regex-toggle">Regex Search (e.g., "^important.*$")</label>');
+                var regexInput = $('<input type="radio" id="regex-toggle" name="searchMode" value="">');
+                regexLabel.prepend(regexInput);  // Prepend input inside label
+
+                // Now relocate them as before (insert before the search input)
+                smartLabel.insertBefore('#dt-search-0');
+                regexLabel.insertBefore('#dt-search-0');
+
+                // Style for inline display and spacing
+                smartLabel.css({ display: 'inline-block', marginRight: '10px' });
+                regexLabel.css({ display: 'inline-block', marginRight: '10px' });
+
+                // Optional: Hide the default "Search:" label if not needed
+                $('.dt-search label:first-of-type').hide();
+
                 // Custom advanced search handling
-                $('.dataTables_filter input').unbind();
-                $('.dataTables_filter input').on('keyup', function() {
-                  var search = $(this).val();
-
-                  var filterFunc;
-                  if (search.match(/^\\/.*\\/$/)) {
-                    try {
-                      var regex = new RegExp(search.slice(1, -1), 'i');
-                      filterFunc = function(settings, data, dataIndex) {
-                        var rowData = data.join(' ');
-                        return regex.test(rowData);
-                      };
-                    } catch (e) {
-                      filterFunc = function(settings, data, dataIndex) {
-                        return true;
-                      };
-                    }
-                  } else {
-                    var positives = [];
-                    var negatives = [];
-                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
-                    for (var i = 0; i < terms.length; i++) {
-                      var term = terms[i];
-                      if (term.startsWith('-')) {
-                        var cleanTerm = term.substring(1).toLowerCase();
-                        if (cleanTerm) negatives.push(cleanTerm);
-                      } else {
-                        positives.push(term.toLowerCase());
-                      }
-                    }
-                    filterFunc = function(settings, data, dataIndex) {
-                      var rowData = data.join(' ').toLowerCase();
-                      for (var j = 0; j < positives.length; j++) {
-                        if (!rowData.includes(positives[j])) return false;
-                      }
-                      for (var k = 0; k < negatives.length; k++) {
-                        if (rowData.includes(negatives[k])) return false;
-                      }
-                      return true;
-                    };
-                  }
+                $('#dt-search-0').unbind();
+                $('#dt-search-0').on('input', function() {
+                  var table = $('#pwn_results').DataTable();
+                  var searchTerm = this.value;
+                  var isRegex = $('#regex-toggle').prop('checked');
+                  var isSmart = $('#smart-toggle').prop('checked');
+                  table.search(searchTerm, isRegex, isSmart).draw();
+                });
 
-                  $.fn.dataTable.ext.search.pop();
-                  $.fn.dataTable.ext.search.push(filterFunc);
-                  table.search('');
-                  table.draw();
+                // Additionally, reapply search on toggle changes (assuming radios exist in HTML)
+                $('#regex-toggle, #smart-toggle').on('input', function() {
+                  var table = $('#pwn_results').DataTable();
+                  var searchTerm = this.value;
+                  var isRegex = $('#regex-toggle').prop('checked');
+                  var isSmart = $('#smart-toggle').prop('checked');
+                  table.search(searchTerm, isRegex, isSmart).draw();
                 });
 
                 // Toggle Columns
@@ -523,10 +393,12 @@ module PWN
 
                 // Select All and Deselect All
                 function select_deselect_all() {
-                  if ($('.multi_line_select tr.highlighted').length === $('.multi_line_select tr').length) {
-                    $('.multi_line_select tr.highlighted').removeClass('highlighted');
+                  var visible_multi_line_trs = $('#pwn_results tbody tr:visible .multi_line_select tr');
+                  var highlighted_in_visible = visible_multi_line_trs.filter('.highlighted');
+                  if (highlighted_in_visible.length === visible_multi_line_trs.length) {
+                    highlighted_in_visible.removeClass('highlighted');
                   } else {
-                    $('.multi_line_select tr:not(.highlighted)').addClass('highlighted');
+                    visible_multi_line_trs.filter(':not(.highlighted)').addClass('highlighted');
                   }
                 }
 
@@ -614,6 +486,8 @@ module PWN
                           test_case: row.security_references.sast_module.split('::')[2],
                           nist_800_53_security_control: row.security_references.nist_800_53_uri,
                           cwe: row.security_references.cwe_uri,
+                          nist_section: row.security_references.section,
+                          cwe_id: row.security_references.cwe_id,
                           path: row.filename.entry,
                           line_no: line.line_no,
                           contents: line.contents,
@@ -627,63 +501,70 @@ module PWN
                     var title = '~ pwn sast >>> ' + report_name + ' (Exported on ' + exportDate + ')';
 
                     if (type === 'xlsx') {
-                      // Add title row
-                      var titleRow = [{ v: title, t: 's', s: { font: { sz: 14, bold: true }, alignment: { horizontal: 'center' } } }];
-                      var ws = XLSX.utils.json_to_sheet(flatData, {skipHeader: true});
-                      XLSX.utils.sheet_add_aoa(ws, [titleRow], {origin: 'A1'});
-                      XLSX.utils.sheet_add_json(ws, flatData, {origin: 'A2', skipHeader: false});
-
-                      // Merge title cell across columns
-                      if (!ws['!merges']) ws['!merges'] = [];
-                      ws['!merges'].push({s: {r:0, c:0}, e: {r:0, c:8}}); // A1 to I1
-
-                      // Set column widths by dividing desired column inches by 0.135
-                      // column inches observed with Exce
-                      // e.g 2.83 inches / 0.0135 ~ 209px
-                      ws['!cols'] = [
-                        {wpx: 209},
-                        {wpx: 130},
-                        {wpx: 580},
-                        {wpx: 256},
-                        {wpx: 110},
-                        {wpx: 40},
-                        {wpx: 370},
-                        {wpx: 370},
-                        {wpx: 185}
-                      ];
-
-                      // Style header row (row 2, since title at 1, header at 2, data from 3)
-                      var headerStyle = {
-                        font: { bold: true, color: { rgb: "000000" } },
-                        fill: { fgColor: { rgb: "999999" } },
-                        alignment: { horizontal: 'center', wrapText: true }
-                      };
-                      for (var col = 0; col < 9; col++) {
-                        var cellRef = XLSX.utils.encode_cell({r:1, c:col}); // Row 2 (0-based)
-                        if (ws[cellRef]) ws[cellRef].s = headerStyle;
-                      }
+                      const workbook = new ExcelJS.Workbook();
+                      const worksheet = workbook.addWorksheet('PWN SAST Results');
+
+                      // Add title row and merge
+                      worksheet.mergeCells('A1:I1');
+                      const titleCell = worksheet.getCell('A1');
+                      titleCell.value = title;
+                      titleCell.font = { size: 14, bold: true };
+                      titleCell.alignment = { horizontal: 'center' };
+
+                      // Add header row
+                      worksheet.addRow(['Timestamp', 'Test Case', 'NIST 800-53', 'CWE', 'Path', 'Line#', 'Content', 'AI Analysis', 'Author']);
+                      const headerRow = worksheet.getRow(2);
+                      headerRow.eachCell((cell) => {
+                        cell.font = { bold: true, color: { argb: 'FF000000' } };
+                        cell.fill = { type: 'pattern', pattern: 'solid', fgColor: { argb: 'FF999999' } };
+                        cell.alignment = { horizontal: 'center', wrapText: true };
+                      });
 
-                      // Alternate row colors for data rows (starting from row 3)
-                      var grayFill = { fgColor: { rgb: "DEDEDE" } };
-                      var whiteFill = { fgColor: { rgb: "FFFFFF" } };
-                      for (var rowNum = 3; rowNum < flatData.length + 2; rowNum++) { // Data rows 2-based from 3
-                        var fill = (rowNum % 2 === 0) ? whiteFill : grayFill;
-                        for (var col = 0; col < 9; col++) {
-                          var cellRef = XLSX.utils.encode_cell({r: rowNum, c: col});
-                          if (ws[cellRef]) {
-                            if (!ws[cellRef].s) ws[cellRef].s = {};
-                            ws[cellRef].s.fill = fill;
-                            ws[cellRef].s.alignment = { wrapText: true, vertical: 'top' };
-                          }
-                        }
-                      }
+                      // Add data rows with alternating fills and hyperlinks
+                      flatData.forEach((item, index) => {
+                        const row = worksheet.addRow([
+                          item.timestamp,
+                          item.test_case,
+                          { text: item.nist_section, hyperlink: item.nist_800_53_security_control },
+                          { text: item.cwe_id, hyperlink: item.cwe },
+                          item.path,
+                          item.line_no,
+                          item.contents,
+                          item.ai_analysis,
+                          item.author
+                        ]);
+
+                        const fill = (index % 2 === 0)
+                          ? { type: 'pattern', pattern: 'solid', fgColor: { argb: 'FFDEDEDE' } }
+                          : { type: 'pattern', pattern: 'solid', fgColor: { argb: 'FFFFFFFF' } };
+
+                        row.eachCell((cell) => {
+                          cell.fill = fill;
+                          cell.alignment = { wrapText: true, vertical: 'top', horizontal: 'left' };
+                        });
+                      });
 
-                      // Freeze header
-                      ws['!freeze'] = { xSplit: 0, ySplit: 2 };
+                      // Set column widths (converted from pixels to character units approx.)
+                      const pixelWidthsInches = [1.0, 2.0, 4.5, 0.5, 2.5, 0.75, 3.5, 3.5, 2];
+                      worksheet.columns = pixelWidthsInches.map(inches => {
+                        let width;
+                        width = inches / 0.077
+                        return { width: width };
+                      });
 
-                      var wb = XLSX.utils.book_new();
-                      XLSX.utils.book_append_sheet(wb, ws, 'PWN SAST Results');
-                      XLSX.writeFile(wb, report_name + '.xlsx');
+                      // Freeze header
+                      worksheet.views = [{ state: 'frozen', ySplit: 2 }];
+
+                      // Generate and download the file
+                      workbook.xlsx.writeBuffer().then(buffer => {
+                        const blob = new Blob([buffer], { type: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet' });
+                        const url = URL.createObjectURL(blob);
+                        const a = document.createElement('a');
+                        a.href = url;
+                        a.download = report_name + '.xlsx';
+                        a.click();
+                        URL.revokeObjectURL(url);
+                      });
                     } else if (type === 'pdf') {
                       var docDefinition = {
                         pageOrientation: 'landscape',
@@ -716,8 +597,8 @@ module PWN
                                 ...flatData.map(r => [
                                   r.timestamp,
                                   r.test_case,
-                                  r.nist_800_53_security_control,
-                                  r.cwe,
+                                  { text: r.nist_section, link: r.nist_800_53_security_control, style: {decoration: 'underline'} },
+                                  { text: r.cwe_id, link: r.cwe, style: {decoration: 'underline'} },
                                   r.path,
                                   r.line_no,
                                   r.contents,
@@ -761,7 +642,6 @@ module PWN
                     }
                   });
                 }
-
                 // Detect window size changes and recalculate/update scrollY
                 $(window).resize(function() {
                   var newWindowHeight = $(window).height();
@@ -773,7 +653,7 @@ module PWN
             </script>
           </body>
         </html>
-        }
+        )
 
         File.open("#{dir_path}/#{report_name}.html", 'w') do |f|
           f.print(html_report)

data/lib/pwn/reports.rb

@@ -9,6 +9,7 @@ module PWN
     # autoload :JSON, 'pwn/reports/json'
     # autoload :PDF, 'pwn/reports/pdf'
     autoload :Fuzz, 'pwn/reports/fuzz'
+    autoload :HTMLHeader, 'pwn/reports/html_header'
     autoload :Phone, 'pwn/reports/phone'
     autoload :SAST, 'pwn/reports/sast'
     autoload :URIBuster, 'pwn/reports/uri_buster'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.387'
+  VERSION = '0.5.390'
 end

data/pwn.gemspec

@@ -59,6 +59,9 @@ Gem::Specification.new do |spec|
     gem_name = columns[1].delete("'").delete(',')
     gem_version = columns.last.delete("'")
 
+    # Good for debugging issues in Gemfile
+    # puts "pwn.gemspec: Adding dependency: #{gem_name} #{gem_version}"
+
     if dev_dependency_arr.include?(gem_name.to_sym)
       spec.add_development_dependency(
         gem_name,

data/spec/lib/pwn/reports/html_header_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Reports::HTMLHeader do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::HTMLHeader
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::HTMLHeader
+    expect(help_response).to respond_to :help
+  end
+end

data/third_party/pwn_rdoc.jsonl

@@ -901,7 +901,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::SSN.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::SSN.generate`: Supported Method Parameters\n\nPWN::Plugins::SSN.generate(\n\ncount: 'required - number of SSN numbers to generate'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::SSN.help Usage"},{"role":"assistant","content":"`PWN::Plugins::SSN.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
-{"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.generate`: Supported Method Parameters\n\nresponse = PWN::Plugins::ScannableCodes.generate(\n\ndata: 'required - data to encode',\ntype: 'optional - :barcode || :qrcode (defaults to :qrcode)',\npath: 'optional - path to save image (defaults to \"./#{data}.png\")'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.generate`: Supported Method Parameters\n\nresponse = PWN::Plugins::ScannableCodes.generate(\n\ndata: 'required - data to encode',\ntype: 'optional - :barcode || :qrcode (defaults to :qrcode)',\nsize: 'optional - size of the image when type is :qrcode (defaults to 200)',\npath: 'optional - path to save image (defaults to \"./#{data}.png\")'\nreturn_type: 'optional - :base64 || :file (defaults to :file)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.help Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Serial.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::Serial.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Serial.connect Usage"},{"role":"assistant","content":"`PWN::Plugins::Serial.connect`: Supported Method Parameters\n\nserial_obj = PWN::Plugins::Serial.connect(\n\nblock_dev: 'optional - serial block device path (defaults to /dev/ttyUSB0)',\nbaud: 'optional - (defaults to 9600)',\ndata_bits: 'optional - (defaults to 8)',\nstop_bits: 'optional - (defaults to 1)',\nparity: 'optional - :even|:mark|:odd|:space|:none (defaults to :none)'\n\n)\n"}]}
@@ -1053,9 +1053,7 @@
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.authors Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.generate`: Supported Method Parameters\n\nPWN::Reports::Phone.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.help Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.help`: "}]}
-{"messages":[{"role":"user","content":"PWN::Reports::SAST.authors Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::SAST.generate Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.generate`: Supported Method Parameters\n\nPWN::Reports::SAST.generate(\n\ndir_path: 'optional - Directory path to save the report (defaults to .)',\nresults_hash: 'optional - Hash containing the results of the SAST analysis (defaults to empty hash structure)',\nreport_name: 'optional - Name of the report file (defaults to current directory name)',\nai_engine: 'optional - AI engine to use for analysis (:grok, :ollama, or :openai)',\nai_model: 'optionnal - AI Model to Use for Respective AI Engine (e.g., grok-4i-0709, chargpt-4o-latest, llama-3.1, etc.)',\nai_key: 'optional -  AI Key/Token for Respective AI Engine',\nai_fqdn: 'optional -  AI FQDN (Only Required for \"ollama\" AI Engine)',\nai_system_role_content: 'optional - AI System Role Content (Defaults to \"Is this code vulnerable or a false positive?  Valid responses are only: \"VULNERABLE\" or \"FALSE+\". DO NOT PROVIDE ANY OTHER TEXT OR EXPLANATIONS.\")',\nai_temp: 'optional - AI Temperature (Defaults to 0.9)'\n\n)\n"}]}
-{"messages":[{"role":"user","content":"PWN::Reports::SAST.help Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.authors Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.generate Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.generate`: Supported Method Parameters\n\nPWN::Reports::URIBuster.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.help Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.help`: "}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.387
+  version: 0.5.390
 platform: ruby
 authors:
 - 0day Inc.
@@ -939,14 +939,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.80.0
+        version: 1.80.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.80.0
+        version: 1.80.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1900,6 +1900,7 @@ files:
 - lib/pwn/plugins/xxd.rb
 - lib/pwn/reports.rb
 - lib/pwn/reports/fuzz.rb
+- lib/pwn/reports/html_header.rb
 - lib/pwn/reports/phone.rb
 - lib/pwn/reports/sast.rb
 - lib/pwn/reports/uri_buster.rb
@@ -2242,6 +2243,7 @@ files:
 - spec/lib/pwn/plugins/xxd_spec.rb
 - spec/lib/pwn/plugins_spec.rb
 - spec/lib/pwn/reports/fuzz_spec.rb
+- spec/lib/pwn/reports/html_header_spec.rb
 - spec/lib/pwn/reports/phone_spec.rb
 - spec/lib/pwn/reports/sast_spec.rb
 - spec/lib/pwn/reports/uri_buster_spec.rb