pwn 0.5.451 → 0.5.453

data/lib/pwn/config.rb

@@ -26,69 +26,71 @@ module PWN
       "
       env = {
         ai: {
-          active: 'grok',
+          active: "'grok'",
           introspection: false,
           grok: {
-            base_uri: 'optional - Base URI for Grok - Use private base OR defaults to https://api.x.ai/v1',
-            key: 'required - OpenAI API Key',
-            model: 'optional - Grok model to use',
-            system_role_content: 'You are an ethically hacking OpenAI agent.',
-            temp: 'optional - OpenAI temperature'
+            base_uri: "'optional - Base URI for Grok - Use private base OR defaults to https://api.x.ai/v1'",
+            key: "'required - OpenAI API Key'",
+            model: "'optional - Grok model to use'",
+            system_role_content: "'You are an ethically hacking OpenAI agent.'",
+            temp: "'optional - OpenAI temperature'"
           },
           openai: {
-            base_uri: 'optional - Base URI for OpenAI - Use private base OR defaults to https://api.openai.com/v1',
-            key: 'required - OpenAI API Key',
-            model: 'optional - OpenAI model to use',
-            system_role_content: 'You are an ethically hacking OpenAI agent.',
-            temp: 'optional - OpenAI temperature'
+            base_uri: "'optional - Base URI for OpenAI - Use private base OR defaults to https://api.openai.com/v1'",
+            key: "'required - OpenAI API Key'",
+            model: "'optional - OpenAI model to use'",
+            system_role_content: "'You are an ethically hacking OpenAI agent.'",
+            temp: "'optional - OpenAI temperature'"
           },
           ollama: {
-            base_uri: 'required - Base URI for Open WebUI - e.g. https://ollama.local',
-            key: 'required - Open WebUI API Key Under Settings  >> Account >> JWT Token',
-            model: 'required - Ollama model to use',
-            system_role_content: 'You are an ethically hacking Ollama agent.',
-            temp: 'optional - Ollama temperature'
+            base_uri: "'required - Base URI for Open WebUI - e.g. https://ollama.local'",
+            key: "'required - Open WebUI API Key Under Settings  >> Account >> JWT Token'",
+            model: "'required - Ollama model to use'",
+            system_role_content: "'You are an ethically hacking Ollama agent.'",
+            temp: "'optional - Ollama temperature'"
           }
         },
-        asm: { arch: PWN::Plugins::DetectOS.arch, endian: PWN::Plugins::DetectOS.endian },
-        blockchain: {
-          bitcoin: {
-            rpc_host: 'localhost',
-            rpc_port: 8332,
-            rpc_user: 'bitcoin RPC Username',
-            rpc_pass: 'bitcoin RPC Password'
-          }
-        },
-        irc: {
-          ui_nick: '_human_',
-          shared_chan: '#pwn',
-          ai_agent_nicks: {
-            browser: {
-              pwn_rb: '/opt/pwn/lib/pwn/plugins/transparent_browser.rb',
-              system_role_content: 'You are a browser.  You are a web browser that can be controlled by a human or AI agent'
-            },
-            nimjeh: {
-              pwn_rb: '',
-              system_role_content: 'You are a sarcastic hacker.  You find software zero day vulnerabilities. This involves analyzing source code, race conditions, application binaries, and network protocols from an offensive security perspective.'
-            },
-            nmap: {
-              pwn_rb: '/opt/pwn/lib/pwn/plugins/nmap_it.rb',
-              system_role_content: 'You are a network scanner.  You are a network scanner that can be controlled by a human or AI agent'
-            },
-            shodan: {
-              pwn_rb: '/opt/pwn/lib/pwn/plugins/shodan.rb',
-              system_role_content: 'You are a passive reconnaissance agent.  You are a passive reconnaissance agent that can be controlled by a human or AI agent'
+        plugins: {
+          asm: { arch: "'#{PWN::Plugins::DetectOS.arch}'", endian: "'#{PWN::Plugins::DetectOS.endian}'" },
+          blockchain: {
+            bitcoin: {
+              rpc_host: "'localhost'",
+              rpc_port: 8332,
+              rpc_user: "'bitcoin RPC Username'",
+              rpc_pass: "'bitcoin RPC Password'"
             }
-          }
-        },
-        hunter: { api_key: 'hunter.how API Key' },
-        meshtastic: {
-          psks: {
-            LongFast: 'AQ==',
-            PWN: 'required - PSK for pwn channel'
-          }
-        },
-        shodan: { api_key: 'SHODAN API Key' }
+          },
+          irc: {
+            ui_nick: '_human_',
+            shared_chan: '#pwn',
+            ai_agent_nicks: {
+              browser: {
+                pwn_rb: '/opt/pwn/lib/pwn/plugins/transparent_browser.rb',
+                system_role_content: 'You are a browser.  You are a web browser that can be controlled by a human or AI agent'
+              },
+              nimjeh: {
+                pwn_rb: '',
+                system_role_content: 'You are a sarcastic hacker.  You find software zero day vulnerabilities. This involves analyzing source code, race conditions, application binaries, and network protocols from an offensive security perspective.'
+              },
+              nmap: {
+                pwn_rb: '/opt/pwn/lib/pwn/plugins/nmap_it.rb',
+                system_role_content: 'You are a network scanner.  You are a network scanner that can be controlled by a human or AI agent'
+              },
+              shodan: {
+                pwn_rb: '/opt/pwn/lib/pwn/plugins/shodan.rb',
+                system_role_content: 'You are a passive reconnaissance agent.  You are a passive reconnaissance agent that can be controlled by a human or AI agent'
+              }
+            }
+          },
+          hunter: { api_key: 'hunter.how API Key' },
+          meshtastic: {
+            psks: {
+              LongFast: 'AQ==',
+              PWN: 'required - PSK for pwn channel'
+            }
+          },
+          shodan: { api_key: 'SHODAN API Key' }
+        }
       }
       # Remove beginning colon from key names
       yaml_env = YAML.dump(env).gsub(/^(\s*):/, '\1')

data/lib/pwn/plugins/assembly.rb

@@ -25,6 +25,12 @@ module PWN
 
         raise 'ERROR: opcodes parameter is required.' if opcodes.nil?
 
+        system_role_content = "Analyze the #{endian} endian #{arch} assembly opcodes below and provide a concise summary of their functionality."
+        ai_analysis = PWN::AI::Introspection.reflect_on(
+          request: opcodes,
+          system_role_content: system_role_content
+        )
+
         case arch.to_s.downcase
         when 'i386', 'i686', 'x86'
           arch_obj = Metasm::Ia32.new(endian)
@@ -109,7 +115,7 @@ module PWN
         opcodes = [opcodes].pack('H*')
         # puts opcodes.inspect
 
-        Metasm::Shellcode.disassemble(arch_obj, opcodes).to_s.squeeze("\n")
+        "#{ai_analysis}\n\n* Assembly Instructions >>>#{Metasm::Shellcode.disassemble(arch_obj, opcodes).to_s.squeeze("\n")}\n"
       rescue StandardError => e
         raise e
       end
@@ -131,6 +137,12 @@ module PWN
 
         raise 'ERROR: asm parameter is required.' if asm.nil?
 
+        system_role_content = "Analyze the #{endian} endian #{arch} assembly instructions below and provide a concise summary of their functionality."
+        ai_analysis = PWN::AI::Introspection.reflect_on(
+          request: asm,
+          system_role_content: system_role_content
+        )
+
         case arch.to_s.downcase
         when 'i386', 'i686', 'x86'
           arch_obj = Metasm::Ia32.new(endian)
@@ -175,9 +187,8 @@ module PWN
         end
 
         opcodes = Metasm::Shellcode.assemble(arch_obj, asm).encode_string
-        hex_encoded_opcodes = opcodes.bytes.map { |b| format('\x%02x', b) }.join
 
-        "\n#{hex_encoded_opcodes}\n"
+        "#{ai_analysis}\n\n* Hex-Escaped Opcodes >>>\n#{opcodes.bytes.map { |b| format('\x%02x', b) }.join}\n"
       rescue Metasm::ParseError
         puts "Invalid assembly instruction(s) provided:\n#{asm}"
         # Should we try to call opcode_to_asm here or just raise the error?

data/lib/pwn/plugins/repl.rb

@@ -34,8 +34,8 @@ module PWN
           dchars = "\001\e[33m\002***\001\e[0m\002" if mode == :splat
 
           if pi.config.pwn_asm
-            arch = PWN::Env[:asm][:arch] ||= PWN::Plugins::DetectOS.arch
-            endian = PWN::Env[:asm][:endian] ||= PWN::Plugins::DetectOS.endian
+            arch = PWN::Env[:plugins][:asm][:arch] ||= PWN::Plugins::DetectOS.arch
+            endian = PWN::Env[:plugins][:asm][:endian] ||= PWN::Plugins::DetectOS.endian
 
             pi.config.prompt_name = "pwn.asm:#{arch}/#{endian}"
             name = "\001\e[1m\002\001\e[37m\002#{pi.config.prompt_name}\001\e[0m\002"
@@ -173,10 +173,10 @@ module PWN
 
             reply = nil
             response_history = nil
-            shared_chan = PWN::Env[:irc][:shared_chan]
+            shared_chan = PWN::Env[:plugins][:irc][:shared_chan]
             mem_chan = '#mem'
-            ai_agents = PWN::Env[:irc][:ai_agent_nicks]
-            ai_agents_arr = PWN::Env[:irc][:ai_agent_nicks].keys
+            ai_agents = PWN::Env[:plugins][:irc][:ai_agent_nicks]
+            ai_agents_arr = PWN::Env[:plugins][:irc][:ai_agent_nicks].keys
             total_ai_agents = ai_agents_arr.length
             mutex = Mutex.new
             PWN::Plugins::ThreadPool.fill(
@@ -303,11 +303,6 @@ module PWN
 
                         response_history = ai_agents[dm_agent.to_sym][:response_history]
                         engine = PWN::Env[:ai][:active].to_s.downcase.to_sym
-                        base_uri = PWN::Env[:ai][engine][:base_uri]
-                        key = PWN::Env[:ai][engine][:key] ||= ''
-                        temp = PWN::Env[:ai][engine][:temp]
-                        model = PWN::Env[:ai][engine][:model]
-                        system_role_content = PWN::Env[:ai][engine][:system_role_content]
 
                         users_in_chan = PWN::Plugins::IRC.names(
                           irc_obj: irc_obj,
@@ -319,55 +314,21 @@ module PWN
                           chan: shared_chan
                         )
 
-                        system_role_content = "
-                          #{system_role_content}
-                          You joined the IRC channel #{shared_chan}
-                          with the following users: #{users_in_shared_chan}
-                        "
-
-                        system_role_content = "
-                          #{system_role_content}
-                          You also joined your own IRC channel #{chan}
-                          with the following users: #{users_in_chan}
-                        "
-
-                        system_role_content = "
-                          #{system_role_content}
-                          You can dm/collaborate/speak with users to
-                          achieve your goals using '@<nick>' in your
-                          message.
-                        "
-
                         case engine
                         when :grok
                           response = PWN::AI::Grok.chat(
-                            base_uri: base_uri,
-                            token: key,
-                            model: model,
-                            temp: temp,
-                            system_role_content: system_role_content,
                             request: request,
                             response_history: response_history,
                             spinner: false
                           )
                         when :ollama
                           response = PWN::AI::Ollama.chat(
-                            base_uri: base_uri,
-                            token: key,
-                            model: model,
-                            temp: temp,
-                            system_role_content: system_role_content,
                             request: request,
                             response_history: response_history,
                             spinner: false
                           )
                         when :openai
                           response = PWN::AI::OpenAI.chat(
-                            base_uri: base_uri,
-                            token: key,
-                            model: model,
-                            temp: temp,
-                            system_role_content: system_role_content,
                             request: request,
                             response_history: response_history,
                             spinner: false
@@ -431,7 +392,7 @@ module PWN
 
             # TODO: Use TLS for IRC Connections
             # Use an IRC nCurses CLI Client
-            ui_nick = PWN::Env[:irc][:ui_nick]
+            ui_nick = PWN::Env[:plugins][:irc][:ui_nick]
             join_channels = ai_agents_arr.map { |ai_chan| "##{ai_chan}" }.join(',')
 
             cmd0 = "/server add pwn #{host}/#{port} -notls"
@@ -535,8 +496,8 @@ module PWN
           if pi.config.pwn_asm && !request.chomp.empty?
             request = pi.input.line_buffer
 
-            arch = PWN::Env[:asm][:arch]
-            endian = PWN::Env[:asm][:endian]
+            arch = PWN::Env[:plugins][:asm][:arch]
+            endian = PWN::Env[:plugins][:asm][:endian]
 
             # Analyze request to determine if it should be processed as opcodes or asm.
             straight_hex = /^[a-fA-F0-9\s]+$/
@@ -573,22 +534,12 @@ module PWN
             request = pi.input.line_buffer.to_s
             debug = pi.config.pwn_ai_debug
             engine = PWN::Env[:ai][:active].to_s.downcase.to_sym
-            base_uri = PWN::Env[:ai][engine][:base_uri]
-            key = PWN::Env[:ai][engine][:key] ||= ''
             response_history = PWN::Env[:ai][engine][:response_history]
             speak_answer = pi.config.pwn_ai_speak
-            model = PWN::Env[:ai][engine][:model]
-            system_role_content = PWN::Env[:ai][engine][:system_role_content]
-            temp = PWN::Env[:ai][engine][:temp]
 
             case engine
             when :grok
               response = PWN::AI::Grok.chat(
-                base_uri: base_uri,
-                token: key,
-                model: model,
-                system_role_content: system_role_content,
-                temp: temp,
                 request: request.chomp,
                 response_history: response_history,
                 speak_answer: speak_answer,
@@ -596,11 +547,6 @@ module PWN
               )
             when :ollama
               response = PWN::AI::Ollama.chat(
-                base_uri: base_uri,
-                token: key,
-                model: model,
-                system_role_content: system_role_content,
-                temp: temp,
                 request: request.chomp,
                 response_history: response_history,
                 speak_answer: speak_answer,
@@ -608,11 +554,6 @@ module PWN
               )
             when :openai
               response = PWN::AI::OpenAI.chat(
-                base_uri: base_uri,
-                token: key,
-                model: model,
-                system_role_content: system_role_content,
-                temp: temp,
                 request: request.chomp,
                 response_history: response_history,
                 speak_answer: speak_answer,