pwn 0.5.421 → 0.5.423

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f3e5df4c5f4c7eab586af5e5024ae1df3c00f2c885e44636e436ae501fce3530
-  data.tar.gz: 369de672a50ea1efcf94b84290a51698808efa5042d978bcd66061f4e4ba9ec2
+  metadata.gz: f8098304b98e5388c044eb9ff8b9a5bee04075d7a5ccadac260f7a974eb55c15
+  data.tar.gz: 4f19ff9ea53d7d4114ae6cbfb2a79fd34f1910d3202f209454645998665a7525
 SHA512:
-  metadata.gz: a6fef6398ffebead215a4bdafd99691a8a14be0048944e76aa9c6e85f0964749724fbb9d9d8116a57157ef62baebd522ed1eced64d8bf801ed279efd3d92d213
-  data.tar.gz: 9a8bd528fb55e9ada542ed214697df963c18b12a8d2b831b50ca6c1326f8229478abf3a884db281e30d0234b96c741f2215021e50dba85f3bf3b937de76e84d8
+  metadata.gz: 69952d0e0101a72ef4b08f5d6da5b0d9d034d080b7bfafedf751a8c2cbbb1119593dba7162b733652ab7ae5f02585a6a4ae13272905182cf8437adda621f6efc
+  data.tar.gz: b7fc21ff696a807e7e65aec231457224eea412620cf3052d6b5233b6618f83c5b3cfebe2ab1341a2072111d5eb97def1d82a6c57aec9da6fc83870ba4dcea2c6

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.421]:001 >>> PWN.help
+pwn[v0.5.423]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.421]:001 >>> PWN.help
+pwn[v0.5.423]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.421]:001 >>> PWN.help
+pwn[v0.5.423]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/repl.rb

@@ -8,96 +8,6 @@ module PWN
   module Plugins
     # This module contains methods related to the pwn REPL Driver.
     module REPL
-      # Supported Method Parameters::
-      # PWN::Plugins::REPL.load_config(
-      #    pi: 'required - Pry Instance object',
-      #    yaml_config_path: 'required - full path to pwn.yaml file',
-      #    decryption_file: 'optional - full path to decryption YAML file'
-      #  )
-      public_class_method def self.load_config(opts = {})
-        yaml_config_path = opts[:yaml_config_path]
-
-        return false unless yaml_config_path
-
-        pi = opts[:pi] ||= Pry
-        raise "ERROR: #{yaml_config_path} does not exist." unless File.exist?(yaml_config_path)
-
-        is_encrypted = PWN::Plugins::Vault.file_encrypted?(file: yaml_config_path)
-
-        if is_encrypted
-          # TODO: Implement "something you know, something you have, && something you are?"
-          decryption_file = opts[:decryption_file] ||= "#{Dir.home}/pwn.decryptor.yaml"
-          raise "ERROR: #{decryption_file} does not exist." unless File.exist?(decryption_file)
-
-          yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true)
-
-          key = opts[:key] ||= yaml_decryptor[:key] ||= ENV.fetch('PWN_DECRYPTOR_KEY')
-          key = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption Key') if key.nil?
-
-          iv = opts[:iv] ||= yaml_decryptor[:iv] ||= ENV.fetch('PWN_DECRYPTOR_IV')
-          iv = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption IV') if iv.nil?
-
-          yaml_config = PWN::Plugins::Vault.dump(
-            file: yaml_config_path,
-            key: key,
-            iv: iv
-          )
-        else
-          yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
-        end
-        pi.config.p = yaml_config
-        Pry.config.p = yaml_config
-
-        valid_ai_engines = %i[
-          grok
-          openai
-          ollama
-        ]
-        ai_engine = yaml_config[:ai_engine].to_s.downcase.to_sym
-
-        raise "ERROR: Unsupported AI Engine: #{ai_engine} in #{yaml_config_path}.  Supported AI Engines:\n#{valid_ai_engines.inspect}" unless valid_ai_engines.include?(ai_engine)
-
-        pi.config.pwn_ai_engine = ai_engine
-        Pry.config.pwn_ai_engine = ai_engine
-
-        pi.config.pwn_ai_base_uri = pi.config.p[ai_engine][:base_uri]
-        Pry.config.pwn_ai_base_uri = pi.config.pwn_ai_base_uri
-
-        pi.config.pwn_ai_key = pi.config.p[ai_engine][:key]
-        Pry.config.pwn_ai_key = pi.config.pwn_ai_key
-
-        pi.config.pwn_ai_model = pi.config.p[ai_engine][:model]
-        Pry.config.pwn_ai_model = pi.config.pwn_ai_model
-
-        pi.config.pwn_ai_system_role_content = pi.config.p[ai_engine][:system_role_content]
-        Pry.config.pwn_ai_system_role_content = pi.config.pwn_ai_system_role_content
-
-        pi.config.pwn_ai_temp = pi.config.p[ai_engine][:temp]
-        Pry.config.pwn_ai_temp = pi.config.pwn_ai_temp
-
-        pi.config.pwn_asm_arch = pi.config.p[:asm][:arch]
-        Pry.config.pwn_asm_arch = pi.config.pwn_asm_arch
-
-        pi.config.pwn_asm_endian = pi.config.p[:asm][:endian]
-        Pry.config.pwn_asm_endian = pi.config.pwn_asm_endian
-
-        pi.config.pwn_irc = pi.config.p[:irc]
-        Pry.config.pwn_irc = pi.config.pwn_irc
-
-        pi.config.pwn_hunter = pi.config.p[:hunter][:api_key]
-        Pry.config.pwn_hunter = pi.config.pwn_hunter
-
-        pi.config.pwn_shodan = pi.config.p[:shodan][:api_key]
-        Pry.config.pwn_shodan = pi.config.pwn_shodan
-
-        pi.config.reload_config = false
-        Pry.config.reload_config = false
-
-        true
-      rescue StandardError => e
-        raise e
-      end
-
       # Supported Method Parameters::
       # PWN::Plugins::REPL.refresh_ps1_proc(
       #   mode: 'required - :splat or nil'
@@ -107,7 +17,7 @@ module PWN
         mode = opts[:mode]
 
         proc do |_target_self, _nest_level, pi|
-          load_config(opts) if Pry.config.reload_config
+          PWN::Plugins::Vault.refresh_config_for_repl(opts) if Pry.config.refresh_config
 
           pi.config.pwn_repl_line += 1
           line_pad = format(
@@ -547,6 +457,36 @@ module PWN
           end
         end
 
+        Pry::Commands.create_command 'pwn-vault-edit' do
+          description 'Edit the pwn.yaml configuration file.'
+
+          def process
+            pi = pry_instance
+            yaml_config_path = pi.config.yaml_config_path ||= "#{Dir.home}/pwn.yaml"
+            unless File.exist?(yaml_config_path)
+              puts "ERROR: pwn.yaml not found: #{yaml_config_path}"
+              return
+            end
+
+            decryption_file = pi.config.decryption_file ||= "#{Dir.home}/pwn.decryptor.yaml"
+            unless File.exist?(decryption_file)
+              puts "ERROR: pwn.decryptor.yaml not found: #{decryption_file}"
+              return
+            end
+            decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+            key = decryptor[:key]
+            iv = decryptor[:iv]
+
+            PWN::Plugins::Vault.edit(
+              file: yaml_config_path,
+              key: key,
+              iv: iv
+            )
+          rescue StandardError => e
+            raise e
+          end
+        end
+
         Pry::Commands.create_command 'toggle-pwn-ai-debug' do
           description 'Display the response_history object while using pwn.ai'
 
@@ -597,7 +537,10 @@ module PWN
         # Initialize pwn.yaml Configuration using :before_session Hook
         Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
           opts[:pi] = pi
-          load_config(opts)
+          Pry.config.yaml_config_path = opts[:yaml_config_path]
+          Pry.config.decryption_file = opts[:decryption_file]
+
+          PWN::Plugins::Vault.refresh_config_for_repl(opts)
         end
 
         Pry.config.hooks.add_hook(:after_read, :pwn_asm_hook) do |request, pi|
@@ -742,6 +685,8 @@ module PWN
         # Monkey Patch Pry, add commands, && hooks
         PWN::Plugins::MonkeyPatch.pry
         add_commands
+        opts[:yaml_config_path] ||= "#{Dir.home}/pwn.yaml"
+        opts[:decryption_file] ||= "#{Dir.home}/pwn.decryptor.yaml"
         add_hooks(opts)
 
         # Define PS1 Prompt

data/lib/pwn/plugins/vault.rb

@@ -172,8 +172,8 @@ module PWN
         relative_editor = File.basename(editor)
         system(relative_editor, file)
 
-        # If the Pry object exists, set reload_config to true
-        Pry.config.reload_config = true if defined?(Pry)
+        # If the Pry object exists, set refresh_config to true
+        Pry.config.refresh_config = true if defined?(Pry)
 
         encrypt(
           file: file,
@@ -234,6 +234,95 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::Vault.refresh_config_for_repl(
+      #    yaml_config_path: 'required - full path to pwn.yaml file',
+      #    pi: 'optional - Pry instance (default: Pry)',
+      #    decryption_file: 'optional - full path to decryption YAML file'
+      #  )
+      public_class_method def self.refresh_config_for_repl(opts = {})
+        yaml_config_path = opts[:yaml_config_path]
+
+        return false unless yaml_config_path
+
+        pi = opts[:pi] ||= Pry
+        raise "ERROR: #{yaml_config_path} does not exist." unless File.exist?(yaml_config_path)
+
+        is_encrypted = PWN::Plugins::Vault.file_encrypted?(file: yaml_config_path)
+
+        if is_encrypted
+          # TODO: Implement "something you know, something you have, && something you are?"
+          decryption_file = opts[:decryption_file] ||= "#{Dir.home}/pwn.decryptor.yaml"
+          raise "ERROR: #{decryption_file} does not exist." unless File.exist?(decryption_file)
+
+          yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+
+          key = opts[:key] ||= yaml_decryptor[:key] ||= ENV.fetch('PWN_DECRYPTOR_KEY')
+          key = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption Key') if key.nil?
+
+          iv = opts[:iv] ||= yaml_decryptor[:iv] ||= ENV.fetch('PWN_DECRYPTOR_IV')
+          iv = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption IV') if iv.nil?
+
+          yaml_config = PWN::Plugins::Vault.dump(
+            file: yaml_config_path,
+            key: key,
+            iv: iv
+          )
+        else
+          yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
+        end
+        pi.config.p = yaml_config
+        Pry.config.p = yaml_config
+
+        valid_ai_engines = %i[
+          grok
+          openai
+          ollama
+        ]
+        ai_engine = yaml_config[:ai_engine].to_s.downcase.to_sym
+
+        raise "ERROR: Unsupported AI Engine: #{ai_engine} in #{yaml_config_path}.  Supported AI Engines:\n#{valid_ai_engines.inspect}" unless valid_ai_engines.include?(ai_engine)
+
+        pi.config.pwn_ai_engine = ai_engine
+        Pry.config.pwn_ai_engine = ai_engine
+
+        pi.config.pwn_ai_base_uri = pi.config.p[ai_engine][:base_uri]
+        Pry.config.pwn_ai_base_uri = pi.config.pwn_ai_base_uri
+
+        pi.config.pwn_ai_key = pi.config.p[ai_engine][:key]
+        Pry.config.pwn_ai_key = pi.config.pwn_ai_key
+
+        pi.config.pwn_ai_model = pi.config.p[ai_engine][:model]
+        Pry.config.pwn_ai_model = pi.config.pwn_ai_model
+
+        pi.config.pwn_ai_system_role_content = pi.config.p[ai_engine][:system_role_content]
+        Pry.config.pwn_ai_system_role_content = pi.config.pwn_ai_system_role_content
+
+        pi.config.pwn_ai_temp = pi.config.p[ai_engine][:temp]
+        Pry.config.pwn_ai_temp = pi.config.pwn_ai_temp
+
+        pi.config.pwn_asm_arch = pi.config.p[:asm][:arch]
+        Pry.config.pwn_asm_arch = pi.config.pwn_asm_arch
+
+        pi.config.pwn_asm_endian = pi.config.p[:asm][:endian]
+        Pry.config.pwn_asm_endian = pi.config.pwn_asm_endian
+
+        pi.config.pwn_irc = pi.config.p[:irc]
+        Pry.config.pwn_irc = pi.config.pwn_irc
+
+        pi.config.pwn_hunter = pi.config.p[:hunter][:api_key]
+        Pry.config.pwn_hunter = pi.config.pwn_hunter
+
+        pi.config.pwn_shodan = pi.config.p[:shodan][:api_key]
+        Pry.config.pwn_shodan = pi.config.pwn_shodan
+
+        Pry.config.refresh_config = false
+
+        true
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <support@0dayinc.com>
 
       public_class_method def self.authors
@@ -286,6 +375,12 @@ module PWN
             file: 'required - file to check if encrypted'
           )
 
+          #{self}.refresh_config_for_repl(
+            yaml_config_path: 'required - full path to pwn.yaml file',
+            pi: 'optional - Pry instance (default: Pry)',
+            decryption_file: 'optional - full path to decryption YAML file'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.421'
+  VERSION = '0.5.423'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.421
+  version: 0.5.423
 platform: ruby
 authors:
 - 0day Inc.