pwn 0.5.435 → 0.5.437

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 546f4e3bfd971104add0ac67ed3021ffa01634666ebb1cee86a409380d11d6df
-  data.tar.gz: 236a1e0e2a04bf58be219b55fe046b6da559ca77ae7ace6ba3e98a6233ffe84a
+  metadata.gz: dc4595f20cb20cc81eb1633ea84a91a9d3fd7ab8c7a17b718ec2ba15451412d5
+  data.tar.gz: 991eb600f873d5f1ad790ade4791dcacedd3eecab8e6375bb646a3a3c4979afb
 SHA512:
-  metadata.gz: f330e88a01859a80bf9bc355c2812593969d34d42239976ac0e9e0f991d3f5ca93499919466cfb57e3135ed936a87b826be3e4a69b4bc7ceaa7bff7f2e1bc202
-  data.tar.gz: 4051a95e8a16ee97832d28400078f561e4dbc46094b6ebfea952756315d22227af99af0324b70af73256ecd4733b3bf38b7c66c277a00ce3e293251b7856d41e
+  metadata.gz: 289bb8fafb11ccc48cd7335fbbbc451f9629414f2c7d4f47913d2568649ae63b57d36cf3e5d8711bb38dd8ce59741f629d27a264aa4879daca55d851a635e430
+  data.tar.gz: fc6256cc8b76c11f1286531e97c762572bda96fe337b73a905e30941fedc7978ce69886cf1f77a8895ee2284cdf624fe732df1407f36027f70ffaceb5ad1eee2

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.435]:001 >>> PWN.help
+pwn[v0.5.437]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.435]:001 >>> PWN.help
+pwn[v0.5.437]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.435]:001 >>> PWN.help
+pwn[v0.5.437]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/config.rb

@@ -6,6 +6,101 @@ require 'yaml'
 module PWN
   # Used to manage PWN configuration settings within PWN drivers.
   module Config
+    # Supported Method Parameters::
+    # env = PWN::Config.minimal_env
+    public_class_method def self.minimal_env(opts = {})
+      pwn_env_path = opts[:pwn_env_path]
+      pwn_dec_path = "#{File.dirname(pwn_env_path)}/pwn.decryptor.yaml"
+
+      puts "
+        [*] NOTICE:
+        1. Writing minimal PWN::Env to:
+           #{pwn_env_path}
+        2. Your decryptor file will be written to:
+           #{pwn_dec_path}
+        3. Use the pwn-vault command in the pwn prototyping driver to update:
+           #{pwn_env_path}
+        4. For optimal security, it's recommended to move:
+           #{pwn_dec_path}
+           to a secure location and use the --pwn-dec parameter for PWN drivers.
+      "
+      env = {
+        ai: {
+          active: 'grok',
+          introspection: false,
+          grok: {
+            base_uri: 'optional - Base URI for Grok - Use private base OR defaults to https://api.x.ai/v1',
+            key: 'required - OpenAI API Key',
+            model: 'optional - Grok model to use',
+            system_role_content: 'You are an ethically hacking OpenAI agent.',
+            temp: 'optional - OpenAI temperature'
+          },
+          openai: {
+            base_uri: 'optional - Base URI for OpenAI - Use private base OR defaults to https://api.openai.com/v1',
+            key: 'required - OpenAI API Key',
+            model: 'optional - OpenAI model to use',
+            system_role_content: 'You are an ethically hacking OpenAI agent.',
+            temp: 'optional - OpenAI temperature'
+          },
+          ollama: {
+            base_uri: 'required - Base URI for Open WebUI - e.g. https://ollama.local',
+            key: 'required - Open WebUI API Key Under Settings  >> Account >> JWT Token',
+            model: 'required - Ollama model to use',
+            system_role_content: 'You are an ethically hacking Ollama agent.',
+            temp: 'optional - Ollama temperature'
+          }
+        },
+        asm: { arch: PWN::Plugins::DetectOS.arch, endian: PWN::Plugins::DetectOS.endian },
+        irc: {
+          ui_nick: '_human_',
+          shared_chan: '#pwn',
+          ai_agent_nicks: {
+            browser: {
+              pwn_rb: '/opt/pwn/lib/pwn/plugins/transparent_browser.rb',
+              system_role_content: 'You are a browser.  You are a web browser that can be controlled by a human or AI agent'
+            },
+            nimjeh: {
+              pwn_rb: '',
+              system_role_content: 'You are a sarcastic hacker.  You find software zero day vulnerabilities. This involves analyzing source code, race conditions, application binaries, and network protocols from an offensive security perspective.'
+            },
+            nmap: {
+              pwn_rb: '/opt/pwn/lib/pwn/plugins/nmap_it.rb',
+              system_role_content: 'You are a network scanner.  You are a network scanner that can be controlled by a human or AI agent'
+            },
+            shodan: {
+              pwn_rb: '/opt/pwn/lib/pwn/plugins/shodan.rb',
+              system_role_content: 'You are a passive reconnaissance agent.  You are a passive reconnaissance agent that can be controlled by a human or AI agent'
+            }
+          }
+        },
+        hunter: { api_key: 'hunter.how API Key' },
+        meshtastic: {
+          psks: {
+            LongFast: 'AQ==',
+            PWN: 'required - PSK for pwn channel'
+          }
+        },
+        shodan: { api_key: 'SHODAN API Key' }
+      }
+      # Remove beginning colon from key names
+      yaml_env = YAML.dump(env).gsub(/^(\s*):/, '\1')
+      File.write(pwn_env_path, yaml_env)
+
+      env[:pwn_env_path] = pwn_env_path
+      env[:pwn_dec_path] = pwn_dec_path
+
+      PWN::Plugins::Vault.create(
+        file: pwn_env_path,
+        decryptor_file: pwn_dec_path
+      )
+
+      Pry.config.refresh_pwn_env = false if defined?(Pry)
+      PWN.send(:remove_const, :Env) if PWN.const_defined?(:Env)
+      PWN.const_set(:Env, env.freeze)
+    rescue StandardError => e
+      raise e
+    end
+
     # Supported Method Parameters::
     # PWN::Config.refresh_env(
     #   pwn_env_path: 'optional - Path to pwn.yaml file.  Defaults to ~/.pwn/pwn.yaml',
@@ -17,7 +112,7 @@ module PWN
       FileUtils.mkdir_p(pwn_env_root)
 
       pwn_env_path = opts[:pwn_env_path] ||= "#{pwn_env_root}/pwn.yaml"
-      return {} unless File.exist?(pwn_env_path)
+      return minimal_env(pwn_env_path: pwn_env_path) unless File.exist?(pwn_env_path)
 
       is_encrypted = PWN::Plugins::Vault.file_encrypted?(file: pwn_env_path)
 
@@ -76,8 +171,7 @@ module PWN
       env[:pwn_env_path] = pwn_env_path
       env[:pwn_dec_path] = pwn_dec_path if is_encrypted
 
-      Pry.config.refresh = false if defined?(Pry)
-
+      Pry.config.refresh_pwn_env = false if defined?(Pry)
       PWN.send(:remove_const, :Env) if PWN.const_defined?(:Env)
       PWN.const_set(:Env, env.freeze)
     rescue StandardError => e
@@ -96,6 +190,10 @@ module PWN
 
     public_class_method def self.help
       puts "USAGE:
+        #{self}.minimal_env(
+          pwn_env_path: 'optional - Path to pwn.yaml file.  Defaults to ~/.pwn/pwn.yaml'
+        )
+
         #{self}.refresh_env(
           pwn_env_path: 'optional - Path to pwn.yaml file.  Defaults to ~/.pwn/pwn.yaml',
           pwn_dec_path: 'optional - Path to pwn.decryptor.yaml file.  Defaults to ~/.pwn/pwn.decryptor.yaml'

data/lib/pwn/plugins/repl.rb

@@ -18,7 +18,7 @@ module PWN
         mode = opts[:mode]
 
         proc do |_target_self, _nest_level, pi|
-          PWN::Config.refresh_env(opts) if Pry.config.refresh
+          PWN::Config.refresh_env(opts) if Pry.config.refresh_pwn_env
 
           pi.config.pwn_repl_line += 1
           line_pad = format(
@@ -530,8 +530,8 @@ module PWN
         # Define REPL Hooks
         # Welcome Banner Hook
         Pry.config.hooks.add_hook(:before_session, :welcome) do |output, _binding, _pi|
-          PWN::Config.refresh_env(opts)
           output.puts PWN::Banner.welcome
+          PWN::Config.refresh_env(opts)
         end
 
         Pry.config.hooks.add_hook(:after_read, :pwn_asm_hook) do |request, pi|

data/lib/pwn/plugins/vault.rb

@@ -37,19 +37,27 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::Vault.create(
-      #   file: 'required - encrypted file to create'
+      #   file: 'required - encrypted file to create',
+      #   decryptor_file: 'optional - file to save the key && iv values'
       # )
 
       public_class_method def self.create(opts = {})
         file = opts[:file].to_s.scrub if File.exist?(opts[:file].to_s.scrub)
+        decryptor_file = opts[:decryptor_file]
 
         cipher = OpenSSL::Cipher.new('aes-256-cbc')
         key = Base64.strict_encode64(cipher.random_key)
         iv = Base64.strict_encode64(cipher.random_iv)
 
-        puts 'Please store the Key && IV in a secure location as they are required for decryption.'
-        puts "Key: #{key}"
-        puts "IV: #{iv}"
+        if decryptor_file
+          decryptor_hash = { key: key, iv: iv }
+          yaml_decryptor = YAML.dump(decryptor_hash).gsub(/^(\s*):/, '\1')
+          File.write(decryptor_file, yaml_decryptor)
+        else
+          puts 'Please store the Key && IV in a secure location as they are required for decryption.'
+          puts "Key: #{key}"
+          puts "IV: #{iv}"
+        end
 
         encrypt(
           file: file,
@@ -173,7 +181,7 @@ module PWN
         system(relative_editor, file)
 
         # If the Pry object exists, set refresh_config to true
-        Pry.config.refresh = true if defined?(Pry)
+        Pry.config.refresh_pwn_env = true if defined?(Pry)
 
         encrypt(
           file: file,
@@ -253,7 +261,8 @@ module PWN
           )
 
           #{self}.create(
-            file: 'required - file to encrypt'
+            file: 'required - file to encrypt',
+            decryptor_file: 'optional - file to save the key && iv values'
           )
 
           #{self}.decrypt(

data/lib/pwn/reports/sast.rb

@@ -25,62 +25,55 @@ module PWN
         }
         report_name = opts[:report_name] ||= File.basename(Dir.pwd)
 
-        ai_instrospection = PWN::Env[:ai][:introspection]
-        puts "Analyzing source code using AI engine: #{engine}\nModel: #{model}\nSystem Role Content: #{system_role_content}\nTemperature: #{temp}" if ai_instrospection
-
         # Calculate percentage of AI analysis based on the number of entries
-        total_entries = results_hash[:data].sum { |entry| entry[:line_no_and_contents].size }
-        puts "Total entries to analyze: #{total_entries}" if engine
-
-        percent_complete = 0.0
-        entry_count = 0
-        spin = TTY::Spinner.new(
-          '[:spinner] Report Generation Progress: :percent_complete :entry_count of :total_entries',
-          format: :dots,
-          hide_cursor: true
-        )
-        spin.auto_spin
-
-        results_hash[:data].each do |hash_line|
-          git_repo_root_uri = hash_line[:filename][:git_repo_root_uri]
-          filename = hash_line[:filename][:entry]
-          hash_line[:line_no_and_contents].each do |src_detail|
-            entry_count += 1
-            percent_complete = (entry_count.to_f / total_entries * 100).round(2)
-            line_no = src_detail[:line_no]
-            source_code_snippet = src_detail[:contents]
-            author = src_detail[:author].to_s.scrub.chomp.strip
-
-            # TODO: >>>
-            # 1. Move PWN::AI::Introspection.reflect into each PWN::SAST::* module
-            #    This will drastically speed up the overall SAST analysis process
-            # 2. Have PWN::AI::Introspection.reflect assess test case effectiveness
-            response = nil
-            if ai_instrospection
-              request = {
-                scm_uri: "#{git_repo_root_uri}/#{filename}",
-                line: line_no,
-                source_code_snippet: source_code_snippet
-              }.to_json
-              response = PWN::AI::Introspection.reflect(request: request)
-            end
-
-            ai_analysis = nil
-            if response.is_a?(Hash)
-              ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
-              ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
-              # puts "AI Analysis Progress: #{percent_complete}% Line: #{line_no} | Author: #{author} | AI Analysis: #{ai_analysis}\n\n\n" if ai_analysis
-            end
-            # TODO: Make results prettier in the HTML report
-            src_detail[:ai_analysis] = ai_analysis.to_s.scrub.chomp.strip
-
-            spin.update(
-              percent_complete: "#{percent_complete}%",
-              entry_count: entry_count,
-              total_entries: total_entries
-            )
-          end
-        end
+        # total_entries = results_hash[:data].sum { |entry| entry[:line_no_and_contents].size }
+        # puts "Total entries to analyze: #{total_entries}" if engine
+
+        # percent_complete = 0.0
+        # entry_count = 0
+        # spin = TTY::Spinner.new(
+        #   '[:spinner] Report Generation Progress: :percent_complete :entry_count of :total_entries',
+        #   format: :dots,
+        #   hide_cursor: true
+        # )
+        # spin.auto_spin
+
+        # ai_instrospection = PWN::Env[:ai][:introspection]
+        # puts "Analyzing source code using AI engine: #{engine}\nModel: #{model}\nSystem Role Content: #{system_role_content}\nTemperature: #{temp}" if ai_instrospection
+
+        # results_hash[:data].each do |hash_line|
+        #   git_repo_root_uri = hash_line[:filename][:git_repo_root_uri]
+        #   filename = hash_line[:filename][:entry]
+        #   hash_line[:line_no_and_contents].each do |src_detail|
+        #     entry_count += 1
+        #     percent_complete = (entry_count.to_f / total_entries * 100).round(2)
+        #     line_no = src_detail[:line_no]
+        #     source_code_snippet = src_detail[:contents]
+        #     author = src_detail[:author].to_s.scrub.chomp.strip
+        #     response = nil
+        #     if ai_instrospection
+        #       request = {
+        #         scm_uri: "#{git_repo_root_uri}/#{filename}",
+        #         line: line_no,
+        #         source_code_snippet: source_code_snippet
+        #       }.to_json
+        #       response = PWN::AI::Introspection.reflect(request: request)
+        #     end
+        #     ai_analysis = nil
+        #     if response.is_a?(Hash)
+        #       ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+        #       ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+        #       puts "AI Analysis Progress: #{percent_complete}% Line: #{line_no} | Author: #{author} | AI Analysis: #{ai_analysis}\n\n\n" if ai_analysis
+        #     end
+        #     src_detail[:ai_analysis] = ai_analysis.to_s.scrub.chomp.strip
+        #    spin.update(
+        #      percent_complete: "#{percent_complete}%",
+        #      entry_count: entry_count,
+        #      total_entries: total_entries
+        #    )
+        #  end
+        # end
+
         # JSON object Completion
         # File.open("#{dir_path}/pwn_scan_git_source.json", 'w') do |f|
         #   f.print(results_hash.to_json)
@@ -467,8 +460,8 @@ module PWN
         end
       rescue StandardError => e
         raise e
-      ensure
-        spin.stop unless spin.nil?
+        # ensure
+        # spin.stop unless spin.nil?
       end
 
       # Author(s):: 0day Inc. <support@0dayinc.com>

data/lib/pwn/sast/amqp_connect_as_guest.rb

@@ -75,10 +75,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
                 current_count += 2
               end

data/lib/pwn/sast/apache_file_system_util_api.rb

@@ -75,10 +75,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/aws.rb

@@ -76,10 +76,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/banned_function_calls_c.rb

@@ -203,10 +203,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/base64.rb

@@ -74,10 +74,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/beef_hook.rb

@@ -74,10 +74,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/cmd_execution_java.rb

@@ -76,10 +76,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/cmd_execution_python.rb

@@ -78,10 +78,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/cmd_execution_ruby.rb

@@ -86,10 +86,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -76,10 +76,26 @@ module PWN
                 end
                 author ||= 'N/A'
 
+                ai_instrospection = PWN::Env[:ai][:introspection]
+                ai_analysis = nil
+                if ai_instrospection
+                  request = {
+                    scm_uri: "#{hash_line[:filename][:git_repo_root_uri]}/#{hash_line[:filename][:entry]}",
+                    line_no: line_no,
+                    source_code_snippet: contents
+                  }.to_json
+                  response = PWN::AI::Introspection.reflect(request: request)
+                  if response.is_a?(Hash)
+                    ai_analysis = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
+                    ai_analysis = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
+                  end
+                end
+
                 hash_line[:line_no_and_contents] = line_no_and_contents_arr.push(
                   line_no: line_no,
                   contents: contents,
-                  author: author
+                  author: author,
+                  ai_analysis: ai_analysis
                 )
 
                 current_count += 2