pwn 0.5.471 → 0.5.474

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 93a5c7a3a8bbb7534d1af6b0e7acb1a2f4468bd0a0dd1e613d85dfc051c8c839
-  data.tar.gz: f65767723f2d0f6c90a97caae612d9e7806b9925b7277dbcf0eacb8f621c3a37
+  metadata.gz: 205b293783f7b7ba571878bd22b91df82b690ae650e25c3482ac9b05efda23d3
+  data.tar.gz: e619b23e3c6eb018e2e24b35e16402da95e942b9c248976b67c3baa4669ea27e
 SHA512:
-  metadata.gz: 4f97be5a6be3e05223f8720ec0fd6619bba8c5bae1b814e4f90e746b0d5cf57814b9b2d6e6ae7657df5d7aa78a1c10f0f8e305ac657d9654cb58788099f32dbf
-  data.tar.gz: '03809a0e80825ce97be5c82444a4370c94b663a8d5942e015ee4b88d81465e10a6b09d189c6abd43df823927b407eeb6d8244b3cb356ea2bd6598a695b3cab1f'
+  metadata.gz: ca6eb9d45d2bda968d5def83735281b76da7474594c39ea544566cf55f2c94adc3b54c8696f279666026e179a42202573336709f27fd1008cbba6541f870b09b
+  data.tar.gz: 334999ee78694482ddbc78eca1c649ecb2067559af70d16c1d5dace058a782dafcfacb3d8e7fc70514b80f65fe62e1763f6209950a04956222e9760607040108

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '8.0.3'
+gem 'activesupport', '<8.1.0'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.3.0'
@@ -48,7 +48,7 @@ gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.8.1'
-gem 'meshtastic', '0.0.126'
+gem 'meshtastic', '0.0.132'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.21.3'
 gem 'msfrpc-client', '1.1.2'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.471]:001 >>> PWN.help
+pwn[v0.5.474]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.471]:001 >>> PWN.help
+pwn[v0.5.474]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.471]:001 >>> PWN.help
+pwn[v0.5.474]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/find_latest_gem_versions_per_Gemfile.sh

@@ -6,7 +6,9 @@ cat Gemfile | awk '{print $2}' | grep -E "^'.+$" | grep -v -e rubygems.org | whi
   this_gem=`echo $gem | sed "s/'//g" | sed 's/\,//g'`
   latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
   echo "${this_gem} => $latest_version"
-  if [[ $this_gem == 'bundler' ]]; then
+  if [[ $this_gem == 'activesupport' ]]; then
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '<${latest_version}'/g" Gemfile
+  elif [[ $this_gem == 'bundler' ]]; then
     sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=${latest_version}'/g" Gemfile
   elif [[ $this_gem == 'json' ]]; then
     # Shakes fist at selenium-webdriver

data/lib/pwn/config.rb

@@ -100,20 +100,22 @@ module PWN
             mqtt: {
               host: 'mqtt.meshtastic.org',
               port: 1883,
+              tls: false,
               user: 'meshdev',
               pass: 'large4cats'
             },
             channel: {
+              active: 'LongFast',
               LongFast: {
                 psk: 'AQ==',
                 region: 'US/<STATE>',
-                channel_topic: '2/e/#',
+                topic: '2/e/#',
                 channel_num: 8
               },
               PWN: {
                 psk: 'required - PSK for pwn channel',
                 region: 'US/<STATE>',
-                channel_topic: '2/e/PWN/#',
+                topic: '2/e/PWN/#',
                 channel_num: 99
               }
             }

data/lib/pwn/plugins/monkey_patch.rb

@@ -81,8 +81,8 @@ module PWN
             exec_hook :after_read, eval_string, self
 
             begin
-              complete_expr = true if config.pwn_ai || config.pwn_asm
-              complete_expr = Pry::Code.complete_expression?(@eval_string) unless config.pwn_ai || config.pwn_asm
+              complete_expr = true if config.pwn_ai || config.pwn_asm || config.pwn_mesh
+              complete_expr = Pry::Code.complete_expression?(@eval_string) unless config.pwn_ai || config.pwn_asm || config.pwn_mesh
             rescue SyntaxError => e
               output.puts e.message.gsub(/^.*syntax error, */, 'SyntaxError: ')
               reset_eval_string
@@ -93,7 +93,8 @@ module PWN
                                          @eval_string.empty? ||
                                          @eval_string =~ /\A *#.*\n\z/ ||
                                          config.pwn_ai ||
-                                         config.pwn_asm
+                                         config.pwn_asm ||
+                                         config.pwn_mesh
 
               # A bug in jruby makes java.lang.Exception not rescued by
               # `rescue Pry::RescuableException` clause.
@@ -116,10 +117,12 @@ module PWN
                 reset_eval_string
 
                 result = evaluate_ruby(eval_string) unless config.pwn_ai ||
-                                                           config.pwn_asm
+                                                           config.pwn_asm ||
+                                                           config.pwn_mesh
 
                 result = eval_string if config.pwn_ai ||
-                                        config.pwn_asm
+                                        config.pwn_asm ||
+                                        config.pwn_mesh
               rescue Pry::RescuableException, *jruby_exceptions => e
                 # Eliminate following warning:
                 # warning: singleton on non-persistent Java type X

data/lib/pwn/plugins/repl.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'fileutils'
+require 'meshtastic'
 require 'pry'
 require 'tty-prompt'
 require 'yaml'
@@ -62,6 +63,18 @@ module PWN
             end
           end
 
+          if pi.config.pwn_mesh
+            active_channel = PWN::Env[:plugins][:meshtastic][:channel][:active].to_s.to_sym
+            region = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:region]
+            topic = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:topic]
+            channel_num = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:channel_num]
+
+            pi.config.prompt_name = "pwn.mesh:#{region}/#{topic}:#{channel_num}"
+            name = "\001\e[1m\002\001\e[32m\002#{pi.config.prompt_name}\001\e[0m\002"
+            dchars = "\001\e[32m\002>>>\001\e[33m\002"
+            dchars = "\001\e[33m\002***\001\e[33m\002" if mode == :splat
+          end
+
           "#{name}[#{version}]:#{line_count} #{dchars} ".to_s.scrub
         end
       rescue StandardError => e
@@ -417,7 +430,37 @@ module PWN
         end
 
         Pry::Commands.create_command 'pwn-mesh' do
-          description 'Initiate pwn.mesh network interface.'
+          description 'Communicate with Meshtastic network within pwn REPL.'
+
+          def process
+            pi = pry_instance
+            pi.config.pwn_mesh = true
+            meshtastic_env = PWN::Env[:plugins][:meshtastic]
+
+            mqtt_env = meshtastic_env[:mqtt]
+            host = mqtt_env[:host]
+            port = mqtt_env[:port]
+            tls = mqtt_env[:tls]
+            username = mqtt_env[:user]
+            password = mqtt_env[:pass]
+
+            mqtt_obj = Meshtastic::MQTT.connect(
+              host: host,
+              port: port,
+              tls: tls,
+              username: username,
+              password: password
+            )
+            PWN.const_set(:MqttObj, mqtt_obj)
+
+            active_channel = meshtastic_env[:channel][:active].to_s.to_sym
+            channel_env = meshtastic_env[:channel][active_channel]
+            psk = channel_env[:psk]
+            region = channel_env[:region]
+            topic = channel_env[:topic]
+          rescue StandardError => e
+            raise e
+          end
         end
 
         Pry::Commands.create_command 'pwn-vault' do
@@ -480,6 +523,8 @@ module PWN
             pi.config.pwn_ai_debug = false if pi.config.pwn_ai_debug
             pi.config.pwn_ai_speak = false if pi.config.pwn_ai_speak
             pi.config.completer = Pry::InputCompleter
+            PWN.send(:remove_const, :MqttObj) if PWN.const_defined?(:MqttObj)
+            pi.config.pwn_mesh = false if pi.config.pwn_mesh
           end
         end
       rescue StandardError => e
@@ -597,6 +642,46 @@ module PWN
             PWN::Env[:ai][engine][:response_history] = response_history
           end
         end
+
+        Pry.config.hooks.add_hook(:after_read, :pwn_mesh_hook) do |request, pi|
+          if pi.config.pwn_mesh && !request.chomp.empty?
+            mqtt_obj = PWN.const_get(:MqttObj)
+            from = "!#{mqtt_obj.client_id}"
+            active_channel = PWN::Env[:plugins][:meshtastic][:channel][:active].to_s.to_sym
+            region = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:region]
+            topic = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:topic]
+            channel_num = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:channel_num]
+            psk = PWN::Env[:plugins][:meshtastic][:channel][active_channel][:psk]
+
+            psks = {}
+            psks[active_channel] = psk
+
+            text = pi.input.line_buffer
+            to = '!ffffffff'
+            # If text include @! with 8 byte length OR
+            if text.include?('@!')
+              to_raw = text.split('@').last.chomp[0..8]
+              # If to_raw[1..-1] is hex than set to = to_raw
+              to = to_raw if to_raw[1..-1].match?(/^[a-fA-F0-9]{8}$/)
+            end
+            puts "\nFrom: #{from}"
+            puts "To: #{to}"
+            puts "Region: #{region}"
+            puts "Topic: #{topic}"
+            puts "Channel #: #{channel_num}"
+            puts "Text: #{text}\n\n"
+            Meshtastic::MQTT.send_text(
+              mqtt_obj: mqtt_obj,
+              from: from,
+              to: to,
+              region: region,
+              topic: topic,
+              channel: channel_num,
+              text: text,
+              psks: psks
+            )
+          end
+        end
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.471'
+  VERSION = '0.5.474'
 end

data/third_party/pwn_rdoc.jsonl

@@ -737,7 +737,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::Jenkins.list_nested_jobs Usage"},{"role":"assistant","content":"`PWN::Plugins::Jenkins.list_nested_jobs`: Supported Method Parameters\n\nPWN::Plugins::Jenkins.list_nested_jobs(\n\njenkins_obj: 'required jenkins_obj returned from #connect method',\nview_path: 'required view path to list jobs'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Jenkins.list_nested_views Usage"},{"role":"assistant","content":"`PWN::Plugins::Jenkins.list_nested_views`: Supported Method Parameters\n\nPWN::Plugins::Jenkins.list_nested_views(\n\njenkins_obj: 'required jenkins_obj returned from #connect method',\nview_path: 'required view path list sub-views'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
-{"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.clone_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.clone_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraDataCenter.clone_issue(\n\nissue: 'required - issue to clone (e.g. Bug, Issue, Story, or Epic ID)'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.clone_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.clone_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraDataCenter.clone_issue(\n\nissue: 'required - issue to clone (e.g. Bug, Issue, Story, or Epic ID)',\ncopy_attachments: 'optional - boolean to indicate whether to copy attachments (Defaults to false)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.create_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.create_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraDataCenter.create_issue(\n\nproject_key: 'required - project key (e.g. PWN)',\nsummary: 'required - summary of the issue (e.g. Epic for PWN-1337)',\nissue_type: 'required - issue type (e.g. :epic, :story, :bug)',\ndescription: 'optional - description of the issue',\nepic_name: 'optional - name of the epic',\nadditional_fields: 'optional - additional fields to set in the issue (e.g. labels, components, custom fields, etc.)'\nattachments: 'optional - array of attachment paths to upload to the issue (e.g. [\"/tmp/file1.txt\", \"/tmp/file2.txt\"])',\ncomment: 'optional - comment to add to the issue (e.g. \"This is a comment\")'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.delete_attachment Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.delete_attachment`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraDataCenter.delete_attachment(\n\nid: 'required - attachment ID to delete (e.g. 10000) found in #get_issue method'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::JiraDataCenter.delete_issue Usage"},{"role":"assistant","content":"`PWN::Plugins::JiraDataCenter.delete_issue`: Supported Method Parameters\n\nissue_resp = PWN::Plugins::JiraDataCenter.delete_issue(\n\nissue: 'required - issue to delete (e.g. Bug, Issue, Story, or Epic ID)'\n\n)\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.471
+  version: 0.5.474
 platform: ruby
 authors:
 - 0day Inc.
@@ -13,16 +13,16 @@ dependencies:
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 8.0.3
+        version: 8.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "<"
       - !ruby/object:Gem::Version
-        version: 8.0.3
+        version: 8.1.0
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -519,14 +519,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.126
+        version: 0.0.132
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.126
+        version: 0.0.132
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement