pwn 0.5.425 → 0.5.426

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 30904f7cfcbec2b9dc3ae06c5cb6ef6cf1c59e711bccbc7a7302b26e21639eef
-  data.tar.gz: 7e4c812591317c30242e558bf924d2eacd96563dbfea75ebf07161435c7c1720
+  metadata.gz: d6bbdb81c1c0df4969edc99d219a625265fa48d5af722628a2a77d3ead2741cb
+  data.tar.gz: 68e09e473021b7b574074f737c066e06cc0276171eb74f99f9c8495f34a8825d
 SHA512:
-  metadata.gz: 2fffe14cfa05fb8960ab0551de18171f02643b4162d3ee9e06ab60adb081345f71b6c8c9409555f010762d356f419445a7358e3ccf3e501b53131cac7579b94f
-  data.tar.gz: 6795f441e69e5ec1b7bd43831bf273aec2596565ecd8734618a293c82f0fd360a16a1378399c72d1468d89bcd42c276f4b5d217a960d5d46525cfa15a80859d9
+  metadata.gz: 3e279405371694e5d6c602a869662fab95ebdd18f7b207734a6023a4c0d2d98a3ddf903f03f150d966c14fbb02a7e9dda36ad8eef77850eacebf870179c5ff56
+  data.tar.gz: e832fd158b5427c267e6240d8c7473d766ce1a9fdc53c5ff3353e08933cc4f3c2e2cc45a93f6b270092d6b38e1ccacc2d4a437fdc7983c201c71cb68dcc978d5

data/Gemfile

@@ -90,7 +90,7 @@ gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.1'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.15.1'
-gem 'selenium-devtools', '0.139.0'
+gem 'selenium-devtools', '0.140.0'
 # gem 'serialport', '1.3.2'
 # gem 'sinatra', '4.0.0'
 gem 'slack-ruby-client', '3.0.0'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.425]:001 >>> PWN.help
+pwn[v0.5.426]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.425]:001 >>> PWN.help
+pwn[v0.5.426]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.425]:001 >>> PWN.help
+pwn[v0.5.426]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn

@@ -14,16 +14,8 @@ OptionParser.new do |options|
     opts[:yaml_config_path] = p
   end
 
-  options.on('-dPATH', '--decryptor=PATH', '<Optional - File Containing Decryption Key && IV>') do |d|
-    opts[:decryption_file] = d
-  end
-
-  options.on('-kKEY', '--decryption-key=KEY', '<Optional - Decryption Key>') do |k|
-    opts[:key] = k
-  end
-
-  options.on('-iIV', '--decryption-iv=PATH', '<Optional - Decryption IV>') do |i|
-    opts[:iv] = i
+  options.on('-dPATH', '--yaml-decryptor=PATH', '<Optional - Out-of-Band YAML File with :key && :iv>') do |d|
+    opts[:yaml_decryptor_path] = d
   end
 end.parse!
 

data/lib/pwn/ai.rb

@@ -9,7 +9,7 @@ module PWN
     autoload :Ollama, 'pwn/ai/ollama'
     autoload :OpenAI, 'pwn/ai/open_ai'
 
-    # Display a List of Every PWN::Plugins Module
+    # Display a List of Every PWN::AI Module
 
     public_class_method def self.help
       constants.sort

data/lib/pwn/blockchain/btc.rb

@@ -0,0 +1,160 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'rest-client'
+require 'tty-spinner'
+
+module PWN
+  module Blockchain
+    # This plugin interacts with BitCoin's Blockchain API.
+    module BTC
+      # Supported Method Parameters::
+      # btc_rest_call(
+      #   http_method: 'optional HTTP method (defaults to GET)
+      #   rest_call: 'required rest call to make per the schema',
+      #   params: 'optional params passed in the URI or HTTP Headers',
+      #   http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST',
+      #   timeout: 'optional timeout in seconds (defaults to 180)',
+      #   spinner: 'optional - display spinner (defaults to false)'
+      # )
+
+      private_class_method def self.btc_rest_call(opts = {})
+        http_method = if opts[:http_method].nil?
+                        :get
+                      else
+                        opts[:http_method].to_s.scrub.to_sym
+                      end
+
+        base_uri = 'https://api.blockcypher.com/v1/btc/'
+        rest_call = opts[:rest_call].to_s.scrub
+        params = opts[:params]
+        headers = { content_type: 'application/json; charset=UTF-8' }
+
+        http_body = opts[:http_body]
+        http_body ||= {}
+
+        timeout = opts[:timeout]
+        timeout ||= 180
+
+        spinner = opts[:spinner] || false
+
+        browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)
+        rest_client = browser_obj[:browser]::Request
+
+        if spinner
+          spin = TTY::Spinner.new(format: :dots)
+          spin.auto_spin
+        end
+
+        retries = 0
+        case http_method
+        when :delete, :get
+          headers[:params] = params
+          response = rest_client.execute(
+            method: http_method,
+            url: "#{base_uri}#{rest_call}",
+            headers: headers,
+            verify_ssl: false,
+            timeout: timeout
+          )
+
+        when :post
+          if http_body.key?(:multipart)
+            headers[:content_type] = 'multipart/form-data'
+
+            response = rest_client.execute(
+              method: http_method,
+              url: "#{base_uri}#{rest_call}",
+              headers: headers,
+              payload: http_body,
+              verify_ssl: false,
+              timeout: timeout
+            )
+          else
+            response = rest_client.execute(
+              method: http_method,
+              url: "#{base_uri}#{rest_call}",
+              headers: headers,
+              payload: http_body.to_json,
+              verify_ssl: false,
+              timeout: timeout
+            )
+          end
+
+        else
+          raise "Unsupported HTTP Method #{http_method} for #{self} Plugin"
+        end
+
+        response
+      rescue RestClient::ExceptionWithResponse => e
+        case e.http_code
+        when 400, 404
+          "#{e.http_code} #{e.message}: #{e.response.body}"
+        else
+          raise e
+        end
+      rescue StandardError => e
+        raise e
+      ensure
+        spin.stop if spinner
+      end
+
+      # Supported Method Parameters::
+      # latest_block = PWN::Blockchain::BTC.get_latest_block(
+      #   token: 'optional - API token for higher rate limits'
+      # )
+
+      public_class_method def self.get_latest_block(opts = {})
+        params = {}
+        params[:token] = opts[:token] if opts[:token]
+
+        rest_call = 'main'
+        response = btc_rest_call(rest_call: rest_call, params: params)
+
+        JSON.parse(response.body, symbolize_names: true)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Blockchain::BTC.get_block_details(
+      #   height: 'required - block height number',
+      #   token: 'optional - API token for higher rate limits'
+      # )
+      public_class_method def self.get_block_details(opts = {})
+        height = opts[:height]
+        params = {}
+        params[:token] = opts[:token] if opts[:token]
+
+        rest_call = "main/blocks/#{height}"
+        response = btc_rest_call(rest_call: rest_call, params: params)
+
+        JSON.parse(response.body, symbolize_names: true)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          latest_block = #{self}.get_latest_block
+
+          block_details = #{self}.get_block_details(
+            height: 'required - block height number'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/blockchain/eth.rb

@@ -0,0 +1,160 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'rest-client'
+require 'tty-spinner'
+
+module PWN
+  module Blockchain
+    # This plugin interacts with BitCoin's Blockchain API.
+    module ETH
+      # Supported Method Parameters::
+      # eth_rest_call(
+      #   http_method: 'optional HTTP method (defaults to GET)
+      #   rest_call: 'required rest call to make per the schema',
+      #   params: 'optional params passed in the URI or HTTP Headers',
+      #   http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST',
+      #   timeout: 'optional timeout in seconds (defaults to 180)',
+      #   spinner: 'optional - display spinner (defaults to false)'
+      # )
+
+      private_class_method def self.eth_rest_call(opts = {})
+        http_method = if opts[:http_method].nil?
+                        :get
+                      else
+                        opts[:http_method].to_s.scrub.to_sym
+                      end
+
+        base_uri = 'https://api.blockcypher.com/v1/eth/'
+        rest_call = opts[:rest_call].to_s.scrub
+        params = opts[:params]
+        headers = { content_type: 'application/json; charset=UTF-8' }
+
+        http_body = opts[:http_body]
+        http_body ||= {}
+
+        timeout = opts[:timeout]
+        timeout ||= 180
+
+        spinner = opts[:spinner] || false
+
+        browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)
+        rest_client = browser_obj[:browser]::Request
+
+        if spinner
+          spin = TTY::Spinner.new(format: :dots)
+          spin.auto_spin
+        end
+
+        retries = 0
+        case http_method
+        when :delete, :get
+          headers[:params] = params
+          response = rest_client.execute(
+            method: http_method,
+            url: "#{base_uri}#{rest_call}",
+            headers: headers,
+            verify_ssl: false,
+            timeout: timeout
+          )
+
+        when :post
+          if http_body.key?(:multipart)
+            headers[:content_type] = 'multipart/form-data'
+
+            response = rest_client.execute(
+              method: http_method,
+              url: "#{base_uri}#{rest_call}",
+              headers: headers,
+              payload: http_body,
+              verify_ssl: false,
+              timeout: timeout
+            )
+          else
+            response = rest_client.execute(
+              method: http_method,
+              url: "#{base_uri}#{rest_call}",
+              headers: headers,
+              payload: http_body.to_json,
+              verify_ssl: false,
+              timeout: timeout
+            )
+          end
+
+        else
+          raise "Unsupported HTTP Method #{http_method} for #{self} Plugin"
+        end
+
+        response
+      rescue RestClient::ExceptionWithResponse => e
+        case e.http_code
+        when 400, 404
+          "#{e.http_code} #{e.message}: #{e.response.body}"
+        else
+          raise e
+        end
+      rescue StandardError => e
+        raise e
+      ensure
+        spin.stop if spinner
+      end
+
+      # Supported Method Parameters::
+      # latest_block = PWN::Blockchain::ETH.get_latest_block(
+      #   token: 'optional - API token for higher rate limits'
+      # )
+
+      public_class_method def self.get_latest_block(opts = {})
+        params = {}
+        params[:token] = opts[:token] if opts[:token]
+
+        rest_call = 'main'
+        response = eth_rest_call(rest_call: rest_call, params: params)
+
+        JSON.parse(response.body, symbolize_names: true)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # PWN::Blockchain::ETH.get_block_details(
+      #   height: 'required - block height number',
+      #   token: 'optional - API token for higher rate limits'
+      # )
+      public_class_method def self.get_block_details(opts = {})
+        height = opts[:height]
+        params = {}
+        params[:token] = opts[:token] if opts[:token]
+
+        rest_call = "main/blocks/#{height}"
+        response = eth_rest_call(rest_call: rest_call, params: params)
+
+        JSON.parse(response.body, symbolize_names: true)
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          latest_block = #{self}.get_latest_block
+
+          block_details = #{self}.get_block_details(
+            height: 'required - block height number'
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/blockchain.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module PWN
+  # This file, using the autoload directive loads SP plugins
+  # into memory only when they're needed. For more information, see:
+  # http://www.rubyinside.com/ruby-techniques-revealed-autoload-1652.html
+  module Blockchain
+    autoload :BTC, 'pwn/blockchain/btc'
+    autoload :ETH, 'pwn/blockchain/eth'
+
+    # Display a List of Every PWN::Blockchain Module
+
+    public_class_method def self.help
+      constants.sort
+    end
+  end
+end

data/lib/pwn/plugins/repl.rb

@@ -469,12 +469,13 @@ module PWN
               return
             end
 
-            decryption_file = pi.config.decryption_file ||= "#{Dir.home}/.pwn/pwn.decryptor.yaml"
-            unless File.exist?(decryption_file)
-              puts "ERROR: pwn.decryptor.yaml not found: #{decryption_file}"
+            yaml_decryptor_path = pi.config.yaml_decryptor_path ||= "#{Dir.home}/.pwn/pwn.decryptor.yaml"
+            unless File.exist?(yaml_decryptor_path)
+              puts "ERROR: pwn.decryptor.yaml not found: #{yaml_decryptor_path}"
               return
             end
-            decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+
+            decryptor = YAML.load_file(yaml_decryptor_path, symbolize_names: true)
             key = decryptor[:key]
             iv = decryptor[:iv]
 
@@ -539,7 +540,7 @@ module PWN
         Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
           opts[:pi] = pi
           Pry.config.yaml_config_path = opts[:yaml_config_path]
-          Pry.config.decryption_file = opts[:decryption_file]
+          Pry.config.yaml_decryptor_path = opts[:yaml_decryptor_path]
 
           PWN::Plugins::Vault.refresh_config_for_repl(opts)
         end
@@ -690,7 +691,7 @@ module PWN
         pwn_config_root = "#{Dir.home}/.pwn"
         FileUtils.mkdir_p(pwn_config_root)
         opts[:yaml_config_path] ||= "#{pwn_config_root}/pwn.yaml"
-        opts[:decryption_file] ||= "#{pwn_config_root}/pwn.decryptor.yaml"
+        opts[:yaml_decryptor_path] ||= "#{pwn_config_root}/pwn.decryptor.yaml"
 
         add_hooks(opts)
 

data/lib/pwn/plugins/vault.rb

@@ -238,7 +238,7 @@ module PWN
       # PWN::Plugins::Vault.refresh_config_for_repl(
       #    yaml_config_path: 'required - full path to pwn.yaml file',
       #    pi: 'optional - Pry instance (default: Pry)',
-      #    decryption_file: 'optional - full path to decryption YAML file'
+      #    yaml_decryptor_path: 'optional - full path to decryption YAML file'
       #  )
       public_class_method def self.refresh_config_for_repl(opts = {})
         yaml_config_path = opts[:yaml_config_path]
@@ -251,10 +251,10 @@ module PWN
 
         if is_encrypted
           # TODO: Implement "something you know, something you have, && something you are?"
-          decryption_file = opts[:decryption_file] ||= "#{Dir.home}/pwn.decryptor.yaml"
-          raise "ERROR: #{decryption_file} does not exist." unless File.exist?(decryption_file)
+          yaml_decryptor_path = opts[:yaml_decryptor_path] ||= "#{Dir.home}/.pwn/pwn.decryptor.yaml"
+          raise "ERROR: #{yaml_decryptor_path} does not exist." unless File.exist?(yaml_decryptor_path)
 
-          yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+          yaml_decryptor = YAML.load_file(yaml_decryptor_path, symbolize_names: true)
 
           key = opts[:key] ||= yaml_decryptor[:key] ||= ENV.fetch('PWN_DECRYPTOR_KEY')
           key = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption Key') if key.nil?
@@ -377,7 +377,7 @@ module PWN
           #{self}.refresh_config_for_repl(
             yaml_config_path: 'required - full path to pwn.yaml file',
             pi: 'optional - Pry instance (default: Pry)',
-            decryption_file: 'optional - full path to decryption YAML file'
+            yaml_decryptor_path: 'optional - full path to decryption YAML file'
           )
 
           #{self}.authors

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.425'
+  VERSION = '0.5.426'
 end

data/lib/pwn.rb

@@ -11,6 +11,7 @@ module PWN
   autoload :AI, 'pwn/ai'
   autoload :AWS, 'pwn/aws'
   autoload :Banner, 'pwn/banner'
+  autoload :Blockchain, 'pwn/blockchain'
   autoload :FFI, 'pwn/ffi'
   autoload :Plugins, 'pwn/plugins'
   autoload :Reports, 'pwn/reports'

data/spec/lib/pwn/blockchain/btc_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Blockchain::BTC do
+  it 'should display information for authors' do
+    authors_response = PWN::Blockchain::BTC
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Blockchain::BTC
+    expect(help_response).to respond_to :help
+  end
+end

data/spec/lib/pwn/blockchain/eth_spec.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Blockchain::ETH do
+  it 'should display information for authors' do
+    authors_response = PWN::Blockchain::ETH
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::Blockchain::ETH
+    expect(help_response).to respond_to :help
+  end
+end

data/spec/lib/pwn/blockchain_spec.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::Blockchain do
+  it 'should return data for help method' do
+    help_response = PWN::Blockchain.help
+    expect(help_response).not_to be_nil
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.425
+  version: 0.5.426
 platform: ruby
 authors:
 - 0day Inc.
@@ -1051,14 +1051,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.139.0
+        version: 0.140.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.139.0
+        version: 0.140.0
 - !ruby/object:Gem::Dependency
   name: slack-ruby-client
   requirement: !ruby/object:Gem::Requirement
@@ -1829,6 +1829,9 @@ files:
 - lib/pwn/banner/radare2.rb
 - lib/pwn/banner/radare2_ai.rb
 - lib/pwn/banner/white_rabbit.rb
+- lib/pwn/blockchain.rb
+- lib/pwn/blockchain/btc.rb
+- lib/pwn/blockchain/eth.rb
 - lib/pwn/ffi.rb
 - lib/pwn/ffi/stdio.rb
 - lib/pwn/plugins.rb
@@ -2174,6 +2177,9 @@ files:
 - spec/lib/pwn/banner/radare2_spec.rb
 - spec/lib/pwn/banner/white_rabbit_spec.rb
 - spec/lib/pwn/banner_spec.rb
+- spec/lib/pwn/blockchain/btc_spec.rb
+- spec/lib/pwn/blockchain/eth_spec.rb
+- spec/lib/pwn/blockchain_spec.rb
 - spec/lib/pwn/ffi/stdio_spec.rb
 - spec/lib/pwn/ffi_spec.rb
 - spec/lib/pwn/plugins/android_spec.rb