pwn 0.5.418 → 0.5.420

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca843067a55f8abc4c2744c560005ae75c44e0d07bad83839c48759e746ac6bc
-  data.tar.gz: 6577dab55259135b26811501b909b391f343986ea197294f9439b951430a1f8a
+  metadata.gz: 2d5a855c21b43563e86f8f7d578a31990e8839790b19fe10361069a5d0c20047
+  data.tar.gz: 629dc874fe7bf352464c17444fb08a1f8bcf7e02707922436b33c3daad121639
 SHA512:
-  metadata.gz: 9d52aa68e7783c6e320a0cf860f2dc5bb562edade1aace4605541123895adf7d13cd0981f125aec2f6363fbd8776213ac7f17d44a85d7d81729c050118391263
-  data.tar.gz: 879351a157b957060cb663b34f1d3364afda5253b4eac0e724383967e06e541e0ab27bb715b99e6c95582fca775dd5492d63397013db6ef2d9ad0cf133a41c2a
+  metadata.gz: 830c7ef71de941f149f46cb7c9aedde2403f40e5c95b0cd424ab2d934a64a889239d1f25d1b0ccd7018d6eccfb1687003c422c5301beb99e3d7f4fceb4f22ece
+  data.tar.gz: cc6ea4c493558334130b7236da4cb547df6ee63e97b7c6c6597027ff1a7c4c1d69187399180b35e24443f43272a473d8f3338d7ebb89f31883b055d8b77d761e

data/.rubocop.yml

@@ -18,7 +18,7 @@ Metrics/CyclomaticComplexity:
 Metrics/MethodLength:
   Max: 564
 Metrics/ModuleLength:
-  Max: 1000
+  Max: 1107
 Metrics/PerceivedComplexity:
   Max: 156
 Style/HashEachMethods:

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '8.0.2.1'
+gem 'activesupport', '8.0.3'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.3.0'
@@ -33,7 +33,7 @@ gem 'ffi', '1.17.2'
 gem 'fftw3', '0.3'
 gem 'gdb', '1.0.0'
 gem 'gem-wrappers', '1.4.0'
-gem 'geocoder', '1.8.5'
+gem 'geocoder', '1.8.6'
 gem 'gist', '6.0.0'
 gem 'gruff', '0.29.0'
 # gem 'hidapi', '0.1.9'
@@ -41,14 +41,14 @@ gem 'htmlentities', '4.3.4'
 gem 'ipaddress', '0.8.3'
 gem 'jenkins_api_client2', '1.9.0'
 gem 'js-beautify', '0.1.8'
-gem 'json', '2.14.1'
+gem 'json', '2.15.0'
 gem 'jsonpath', '1.1.5'
 gem 'json_schemer', '2.4.0'
 gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '1.0.2'
 gem 'mail', '2.8.1'
-gem 'meshtastic', '0.0.125'
+gem 'meshtastic', '0.0.126'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.21.3'
 gem 'msfrpc-client', '1.1.2'
@@ -93,10 +93,10 @@ gem 'savon', '2.15.1'
 gem 'selenium-devtools', '0.139.0'
 # gem 'serialport', '1.3.2'
 # gem 'sinatra', '4.0.0'
-gem 'slack-ruby-client', '2.7.0'
+gem 'slack-ruby-client', '3.0.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.4'
-gem 'sqlite3', '2.7.3'
+gem 'sqlite3', '2.7.4'
 gem 'thin', '2.0.1'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.418]:001 >>> PWN.help
+pwn[v0.5.420]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.418]:001 >>> PWN.help
+pwn[v0.5.420]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.418]:001 >>> PWN.help
+pwn[v0.5.420]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -360,7 +360,8 @@ module PWN
       # Supported Method Parameters::
       # json_sitemap = PWN::Plugins::BurpSuite.get_sitemap(
       #   burp_obj: 'required - burp_obj returned by #start method',
-      #   keyword: 'optional - keyword to filter sitemap entries (default: nil)'
+      #   keyword: 'optional - keyword to filter sitemap entries (default: nil)',
+      #   return_as: 'optional - :base64 or :har (defaults to :base64)'
       # )
 
       public_class_method def self.get_sitemap(opts = {})
@@ -368,6 +369,7 @@ module PWN
         rest_browser = burp_obj[:rest_browser]
         mitm_rest_api = burp_obj[:mitm_rest_api]
         keyword = opts[:keyword]
+        return_as = opts[:return_as] ||= :base64
 
         rest_call = "http://#{mitm_rest_api}/sitemap"
 
@@ -385,6 +387,151 @@ module PWN
           end
         end
 
+        if return_as == :har
+          # Convert to HAR format
+          har_entries = sitemap_arr.map do |site|
+            decoded_request = Base64.strict_decode64(site[:request])
+
+            # Parse request head and body
+            if decoded_request.include?("\r\n\r\n")
+              request_head, request_body = decoded_request.split("\r\n\r\n", 2)
+            else
+              request_head = decoded_request
+              request_body = ''
+            end
+            request_lines = request_head.split("\r\n")
+            request_line = request_lines.shift
+            method, full_path, http_version = request_line.split(' ', 3)
+            headers = {}
+            request_lines.each do |line|
+              next if line.empty?
+
+              key, value = line.split(': ', 2)
+              headers[key] = value if key && value
+            end
+
+            host = headers['Host'] || raise('No Host header found in request')
+            scheme = 'http' # Hardcoded as protocol is not available; consider enhancing if available in site
+            url = "#{scheme}://#{host}#{full_path}"
+            uri = URI.parse(url)
+            query_string = uri.query ? URI.decode_www_form(uri.query).map { |k, v| { name: k, value: v.to_s } } : []
+
+            request_headers_size = request_head.bytesize + 4 # Account for \r\n\r\n
+            request_body_size = request_body.bytesize
+
+            request_obj = {
+              method: method,
+              url: uri.to_s,
+              httpVersion: http_version,
+              headers: headers.map { |k, v| { name: k, value: v } },
+              queryString: query_string,
+              headersSize: request_headers_size,
+              bodySize: request_body_size
+            }
+
+            if request_body_size.positive?
+              mime_type = headers['Content-Type'] || 'application/octet-stream'
+              post_data = {
+                mimeType: mime_type,
+                text: request_body
+              }
+              post_data[:params] = URI.decode_www_form(request_body).map { |k, v| { name: k, value: v.to_s } } if mime_type.include?('x-www-form-urlencoded')
+              request_obj[:postData] = post_data
+            end
+
+            if site[:response]
+              decoded_response = Base64.strict_decode64(site[:response])
+
+              # Parse response head and body
+              if decoded_response.include?("\r\n\r\n")
+                response_head, response_body = decoded_response.split("\r\n\r\n", 2)
+              else
+                response_head = decoded_response
+                response_body = ''
+              end
+              response_lines = response_head.split("\r\n")
+              status_line = response_lines.shift
+              version, status_str, status_text = status_line.split(' ', 3)
+              status = status_str.to_i
+              status_text ||= ''
+              response_headers = {}
+              response_lines.each do |line|
+                next if line.empty?
+
+                key, value = line.split(': ', 2)
+                response_headers[key] = value if key && value
+              end
+
+              response_headers_size = response_head.bytesize + 4 # Account for \r\n\r\n
+              response_body_size = response_body.bytesize
+              mime_type = response_headers['Content-Type'] || 'text/plain'
+
+              response_obj = {
+                status: status,
+                statusText: status_text,
+                httpVersion: version,
+                headers: response_headers.map { |k, v| { name: k, value: v } },
+                content: {
+                  size: response_body_size,
+                  mimeType: mime_type,
+                  text: response_body
+                },
+                redirectURL: response_headers['Location'] || '',
+                headersSize: response_headers_size,
+                bodySize: response_body_size
+              }
+            else
+              response_obj = {
+                status: 0,
+                statusText: 'No response',
+                httpVersion: 'unknown',
+                headers: [],
+                content: {
+                  size: 0,
+                  mimeType: 'text/plain',
+                  text: ''
+                },
+                redirectURL: '',
+                headersSize: -1,
+                bodySize: 0
+              }
+            end
+
+            {
+              startedDateTime: Time.now.iso8601,
+              time: 0,
+              request: request_obj,
+              response: response_obj,
+              cache: {},
+              timings: {
+                send: 0,
+                wait: 0,
+                receive: 0
+              },
+              pageref: 'page_1'
+            }
+          end
+
+          har_log = {
+            log: {
+              version: '1.2',
+              creator: {
+                name: 'BurpSuite via PWN::Plugins::BurpSuite',
+                version: '1.0'
+              },
+              pages: [{
+                startedDateTime: Time.now.iso8601,
+                id: 'page_1',
+                title: 'Sitemap Export',
+                pageTimings: {}
+              }],
+              entries: har_entries
+            }
+          }
+
+          sitemap_arr = har_log
+        end
+
         sitemap_arr.uniq
       rescue StandardError => e
         stop(burp_obj: burp_obj) unless burp_obj.nil?
@@ -1357,7 +1504,8 @@ module PWN
 
           json_sitemap = #{self}.get_sitemap(
             burp_obj: 'required - burp_obj returned by #start method',
-            keyword: 'optional - keyword to filter sitemap results (default: nil)'
+            keyword: 'optional - keyword to filter sitemap results (default: nil)',
+            return_as: 'optional - :base64 or :har (defaults to :base64)'
           )
 
           json_sitemap = #{self}.add_to_sitemap(

data/lib/pwn/plugins/zaproxy.rb

@@ -206,6 +206,7 @@ module PWN
         api_key = zap_obj[:api_key].to_s.scrub
         keyword = opts[:keyword]
         return_as = opts[:return_as] ||= :base64
+        raise 'ERROR: return_as must be :base64 or :har' unless %i[base64 har].include?(return_as)
 
         entries = []
         start = 0
@@ -229,16 +230,16 @@ module PWN
           start += count
         end
 
-        case return_as
-        when :har
-          if keyword
-            entries = har_sitemap.select do |site|
-              json_request = site[:request].to_json
-              json_request.include?(keyword)
-            end
+        if keyword
+          entries = har_sitemap.select do |site|
+            json_request = site[:request].to_json
+            json_request.include?(keyword)
           end
-        when :base64
+        end
+
+        if return_as == :base64
           # Deduplicate entries based on method + url
+          base64_entries = []
           entries.each do |entry|
             entry_hash = {}
             req = entry[:request]
@@ -279,17 +280,9 @@ module PWN
             entry_hash[:request] = encoded_req
             entry_hash[:response] = encoded_res
             entry_hash[:http_service] = http_service
-            entries.push(entry_hash)
+            base64_entries.push(entry_hash)
           end
-
-          if keyword
-            entries = entries.select do |site|
-              deccoded_request = Base64.strict_decode64(site[:request])
-              deccoded_request.include?(keyword)
-            end
-          end
-        else
-          raise "ERROR: Invalid return_as option #{return_as}.  Valid options are :base64 or :har"
+          entries = base64_entries
         end
 
         entries.uniq

data/lib/pwn/reports/sast.rb

@@ -20,7 +20,7 @@ module PWN
       #   ai_key: 'optional -  AI Key/Token for Respective AI Engine',
       #   ai_fqdn: 'optional -  AI FQDN (Only Required for "ollama" AI Engine)',
       #   ai_system_role_content: 'optional - AI System Role Content (Defaults to "Confidence score of 0-10 this is vulnerable (0 being not vulnerable, moving upwards in confidence of exploitation). Provide additional context to assist penetration tester assessment.")',
-      #   ai_temp: 'optional - AI Temperature (Defaults to 0.9)'
+      #   ai_temp: 'optional - AI Temperature (Defaults to 0.1)'
       # )
 
       public_class_method def self.generate(opts = {})
@@ -45,7 +45,7 @@ module PWN
 
           ai_key = opts[:ai_key] ||= PWN::Plugins::AuthenticationHelper.mask_password(prompt: "#{ai_engine} Token")
           ai_system_role_content = opts[:ai_system_role_content] ||= 'Confidence score of 0-10 this is vulnerable (0 being not vulnerable, moving upwards in confidence of exploitation). Provide additional context to assist penetration tester assessment.'
-          ai_temp = opts[:ai_temp] ||= 0.9
+          ai_temp = opts[:ai_temp] ||= 0.1
 
           puts "Analyzing source code using AI engine: #{ai_engine}\nModel: #{ai_model}\nSystem Role Content: #{ai_system_role_content}\nTemperature: #{ai_temp}"
         end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.418'
+  VERSION = '0.5.420'
 end

data/third_party/pwn_rdoc.jsonl

@@ -1069,7 +1069,7 @@
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.generate`: Supported Method Parameters\n\nPWN::Reports::Phone.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.help Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::SAST.authors Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
-{"messages":[{"role":"user","content":"PWN::Reports::SAST.generate Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.generate`: Supported Method Parameters\n\nPWN::Reports::SAST.generate(\n\ndir_path: 'optional - Directory path to save the report (defaults to .)',\nresults_hash: 'optional - Hash containing the results of the SAST analysis (defaults to empty hash structure)',\nreport_name: 'optional - Name of the report file (defaults to current directory name)',\nai_engine: 'optional - AI engine to use for analysis (:grok, :ollama, or :openai)',\nai_model: 'optionnal - AI Model to Use for Respective AI Engine (e.g., grok-4i-0709, chargpt-4o-latest, llama-3.1, etc.)',\nai_key: 'optional -  AI Key/Token for Respective AI Engine',\nai_fqdn: 'optional -  AI FQDN (Only Required for \"ollama\" AI Engine)',\nai_system_role_content: 'optional - AI System Role Content (Defaults to \"Is this code vulnerable or a false positive?  Valid responses are only: \"VULNERABLE\" or \"FALSE+\". DO NOT PROVIDE ANY OTHER TEXT OR EXPLANATIONS.\")',\nai_temp: 'optional - AI Temperature (Defaults to 0.9)'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Reports::SAST.generate Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.generate`: Supported Method Parameters\n\nPWN::Reports::SAST.generate(\n\ndir_path: 'optional - Directory path to save the report (defaults to .)',\nresults_hash: 'optional - Hash containing the results of the SAST analysis (defaults to empty hash structure)',\nreport_name: 'optional - Name of the report file (defaults to current directory name)',\nai_engine: 'optional - AI engine to use for analysis (:grok, :ollama, or :openai)',\nai_model: 'optionnal - AI Model to Use for Respective AI Engine (e.g., grok-4i-0709, chargpt-4o-latest, llama-3.1, etc.)',\nai_key: 'optional -  AI Key/Token for Respective AI Engine',\nai_fqdn: 'optional -  AI FQDN (Only Required for \"ollama\" AI Engine)',\nai_system_role_content: 'optional - AI System Role Content (Defaults to \"Confidence score of 0-10 this is vulnerable (0 being not vulnerable, moving upwards in confidence of exploitation). Provide additional context to assist penetration tester assessment.\")',\nai_temp: 'optional - AI Temperature (Defaults to 0.9)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::SAST.help Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.authors Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.generate Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.generate`: Supported Method Parameters\n\nPWN::Reports::URIBuster.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.418
+  version: 0.5.420
 platform: ruby
 authors:
 - 0day Inc.
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.2.1
+        version: 8.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 8.0.2.1
+        version: 8.0.3
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -309,14 +309,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.8.5
+        version: 1.8.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.8.5
+        version: 1.8.6
 - !ruby/object:Gem::Dependency
   name: gist
   requirement: !ruby/object:Gem::Requirement
@@ -407,14 +407,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.1
+        version: 2.15.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.14.1
+        version: 2.15.0
 - !ruby/object:Gem::Dependency
   name: jsonpath
   requirement: !ruby/object:Gem::Requirement
@@ -505,14 +505,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.125
+        version: 0.0.126
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.125
+        version: 0.0.126
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -1065,14 +1065,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 3.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.0
+        version: 3.0.0
 - !ruby/object:Gem::Dependency
   name: socksify
   requirement: !ruby/object:Gem::Requirement
@@ -1107,14 +1107,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.3
+        version: 2.7.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.7.3
+        version: 2.7.4
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement