pwn 0.5.499 → 0.5.500
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.rubocop.yml +1 -1
- data/CHANGELOG_BETWEEN_TAGS.txt +185 -181
- data/README.md +3 -3
- data/lib/pwn/plugins/burp_suite.rb +8 -5
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: d4e35c7fd4e41e696ef0f0b90af0f55ed19d4b4b1c73d68c5d4c5673209722a5
|
|
4
|
+
data.tar.gz: 158ccd66f0f801b39f89299cd7d63dcd06ba305985e7f5d4f42e9524ec736ed4
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 18e6f6fe91d1905925e329bf13e31012f567aac1b28665b103ab30c9e59eb7fde260e947609742bf0870ef567d6a8bd116a6b978f30c0402e6e774a9f5ae0747
|
|
7
|
+
data.tar.gz: efcb72944474de6722c6895eed5212de6ff4ea888a08d6e20a483e31e31624db8b655ea03db74dc749d0ff066564c0ca0701c0dca35b776e0d660b74e68eef75
|
data/.rubocop.yml
CHANGED
data/CHANGELOG_BETWEEN_TAGS.txt
CHANGED
|
@@ -1,181 +1,185 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
1
|
+
412035f PWN::Plugins::BurpSuite module - implment sitemap analysis (in addition to proxy history) in AI introspection thread to update notes and highlight accordingly.
|
|
2
|
+
a1cfa2c Merge pull request #896 from ninp0/master
|
|
3
|
+
4558fad PWN::Plugins::BurpSuite module - remove sitemap introspection for now, and cleanup the proxy_history thread to begin supporting introspection within sitemap, repeater, etc.
|
|
4
|
+
91e4ca5 Merge pull request #895 from ninp0/master
|
|
5
|
+
8dc34fd PWN::Plugins::BurpSuite module - implement introspection within sitemap and proxy history
|
|
6
|
+
009fb44 PWN::Plugins::BurpSuite module - #bugfix when passing system_role_content while AI introspection is enabled in PWN::Env
|
|
7
|
+
28441d2 Merge pull request #894 from ninp0/master
|
|
8
|
+
72d8ff9 PWN::Plugins::TransparentBrowser && PWN::Plugins::BurpSuite modules - implement PWN::AI::Introspection.reflect_on when introspection is enabled in PWN::Env
|
|
9
|
+
03d46de Merge pull request #893 from ninp0/master
|
|
10
|
+
8258b7a PWN::Plugins::TransparentBrowser module - hardcode system_role_content for PWN::AI::Introscpection.reflect_on within #debugger method. Increase efficiency of #step method ass well
|
|
11
|
+
a348af6 Merge pull request #892 from ninp0/master
|
|
12
|
+
b0bbbf5 PWN::Plugins::REPL - #cleaner_rx
|
|
13
|
+
54cd690 Merge pull request #891 from ninp0/master
|
|
14
|
+
1a065fa PWN::Plugins::REPL - #cleaner_rx
|
|
15
|
+
b5f2ce2 Merge pull request #890 from ninp0/master
|
|
16
|
+
03a72da Gemfile - update to latest versions
|
|
17
|
+
782f35b Merge pull request #889 from ninp0/master
|
|
18
|
+
9609d5c Merge branch 'master' of ssh://github.com/ninp0/pwn
|
|
19
|
+
9e62d59 Gemfile - update to latest versions
|
|
20
|
+
58cad93 Merge pull request #888 from ninp0/master
|
|
21
|
+
90e13ba Merge branch 'master' of ssh://github.com/ninp0/pwn
|
|
22
|
+
9b753c1 Merge pull request #887 from ninp0/master
|
|
23
|
+
9f2bdaf PWN::Plugins::REPL - #minor_tweaks
|
|
24
|
+
568c036 PWN::Plugins::REPL - #minor_tweaks
|
|
25
|
+
f4eaf17 Merge pull request #886 from ninp0/master
|
|
26
|
+
8c7a913 Gemfile - update to latest versions
|
|
27
|
+
88be485 Merge branch 'master' of ssh://github.com/ninp0/pwn
|
|
28
|
+
bb79392 PWN::Plugins::REPL - #minor_tweaks
|
|
29
|
+
f28f339 Merge pull request #885 from ninp0/master
|
|
30
|
+
87e8956 PWN::Plugins::REPL - #minor_tweaks
|
|
31
|
+
09946fc Merge pull request #884 from ninp0/master
|
|
32
|
+
6107861 PWN::Plugins::REPL - #minor_tweaks
|
|
33
|
+
90a2b27 Merge pull request #883 from ninp0/master
|
|
34
|
+
7d2735f PWN::Plugins::REPL - #minor_tweaks
|
|
35
|
+
e12cc3c Merge pull request #882 from ninp0/master
|
|
36
|
+
1eb75ce PWN::Plugins::REPL - #minor_tweaks
|
|
37
|
+
8ed262e PWN::Plugins::REPL - UI tweaks, cleaner interface
|
|
38
|
+
59c9ec6 Merge pull request #881 from ninp0/master
|
|
39
|
+
5aa6cb5 PWN::Plugins::JiraDataCenter - move begin/rescue logic from clone_issue method to create_issue method (i.e. retrieving newly createed issue && reattempting to create an issue when Jira throws errors about unlicensed fields.
|
|
40
|
+
341eb8e Merge pull request #880 from ninp0/master
|
|
41
|
+
f25eac0 PWN::Plugins::JiraDataCenter - eliminate redudant call to return issue at the end of clone_issue method. Just return the issue returned by the create_issue method
|
|
42
|
+
fa9b2c5 PWN::Plugins::REPL - flexible from in pwn-mesh
|
|
43
|
+
8e1ad4d Merge pull request #879 from ninp0/master
|
|
44
|
+
e8b1b60 PWN::Plugins::JiraDataCenter - ommit fields that are currently unlicensed
|
|
45
|
+
eba30bc Merge pull request #878 from ninp0/master
|
|
46
|
+
ba06ea5 PWN::Plugins::JiraDataCenter - ommit fields that are currently unlicensed
|
|
47
|
+
12a9337 Merge pull request #877 from ninp0/master
|
|
48
|
+
a5b3468 PWN::Plugins::JiraDataCenter - attachment #bugfix in #clone_issus method
|
|
49
|
+
c03b0fd Merge pull request #876 from ninp0/master
|
|
50
|
+
1ea9554 PWN::Plugins::REPL module - pwn-mesh command >>> implement send only capability via MQTT
|
|
51
|
+
9e671ce Gemfile - pull in latest
|
|
52
|
+
7f61639 Merge pull request #875 from ninp0/master
|
|
53
|
+
075ad68 PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method #bugfixes #include_attachment_cloning
|
|
54
|
+
730fc9a Merge branch 'master' of ssh://github.com/ninp0/pwn
|
|
55
|
+
6f73b37 PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method #bugfixes #include_attachment_cloning
|
|
56
|
+
21a4560 PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method #bugfixes #include_attachment_cloning
|
|
57
|
+
f734ae2 PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method #bugfixes
|
|
58
|
+
46e8712 Merge pull request #874 from ninp0/master
|
|
59
|
+
fb74590 PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method #bugfixes
|
|
60
|
+
c3cd819 Merge pull request #873 from ninp0/master
|
|
61
|
+
5ac6fbe PWN::Plugins::JiraDataCenter module - another clone_issue fix attempt and more robust get_issue_type_metadata method
|
|
62
|
+
f18a29f Merge pull request #872 from ninp0/master
|
|
63
|
+
8ff89a7 PWN::Plugins::JiraServer module - attempt to drastically simplify #clone_issue method #robocop_fix
|
|
64
|
+
72ac3ce Merge pull request #871 from ninp0/master
|
|
65
|
+
2962423 PWN::Plugins::JiraServer module - attempt to drastically simplify #clone_issue method
|
|
66
|
+
85635ba Merge pull request #870 from ninp0/master
|
|
67
|
+
384e884 PWN::Plugins::JiraServer module - attempt to drastically simplify #clone_issue method
|
|
68
|
+
5c20154 Merge pull request #869 from ninp0/master
|
|
69
|
+
f9d6edf PWN::Plugins::JiraServer module - begin implementing better logic for dealing with incompatible fields when cloning an issue
|
|
70
|
+
6e00e9c Merge pull request #868 from ninp0/master
|
|
71
|
+
868527e PWN::Plugins::JiraServer module - filter out incompatible fields when cloning an issue
|
|
72
|
+
c2c6a17 Merge pull request #867 from ninp0/master
|
|
73
|
+
b3fa3ff PWN::Plugins::JiraServer module - implement #clone_issue method #bugfixes
|
|
74
|
+
dcc64de Merge pull request #866 from ninp0/master
|
|
75
|
+
de4aade PWN::Plugins::JiraServer module - implement #clone_issue method
|
|
76
|
+
4dab4cc Merge pull request #865 from ninp0/master
|
|
77
|
+
9d2ea0d PWN::Plugins::JiraServer module - #race_condition_bugfix when returning new issue from #create_issue method
|
|
78
|
+
46b9458 Merge pull request #864 from ninp0/master
|
|
79
|
+
d478fd1 PWN::Plugins::JiraServer module - credential management overhaul / rely upon pwn-vault for credential management #bugfix
|
|
80
|
+
fd0aeb7 Merge pull request #863 from ninp0/master
|
|
81
|
+
2e51b55 PWN::Plugins::JiraServer module - credential management overhaul / rely upon pwn-vault for credential management.
|
|
82
|
+
ee231d7 Merge pull request #862 from ninp0/master
|
|
83
|
+
4dbb1c1 PWN::Config && PWN::Plugins::Vault modules - ensure permissions for YAML config are 0600 and decryptor are 0400 by default
|
|
84
|
+
4471061 Merge pull request #861 from ninp0/master
|
|
85
|
+
b7a1ae0 PWN::Config module - refactor #default_env is encrypted by default
|
|
86
|
+
2309a44 Merge pull request #860 from ninp0/master
|
|
87
|
+
0c4c4f0 PWN::Config module - #bugfixes / PWN::Driver module - initial commit to auto-initialize PWN::Env, implement standard options, and reduce redundant driver code
|
|
88
|
+
1642f77 Merge pull request #859 from ninp0/master
|
|
89
|
+
e96a868 PWN::Plugins::Assembly, PWN::Plugins::TransparentBrowser, PWN::SAST::PomVersion, PWN::SAST::TestCaseEngine, && PWN::AI::Instrospection modules - simplify intrumentation for implementing AI introspection into modules && instrument aforementioned modules with AI introspection
|
|
90
|
+
bca35f1 PWN::Plugins::Assembly, PWN::Plugins::TransparentBrowser, PWN::SAST::PomVersion, PWN::SAST::TestCaseEngine, && PWN::AI::Instrospection modules - simplify intrumentation for implementing AI introspection into modules && instrument aforementioned modules with AI introspection
|
|
91
|
+
096bc34 Merge pull request #858 from ninp0/master
|
|
92
|
+
79d2b64 PWN::Plugins::TransparentBrowser module - #bugfix in `browser_type: :chrome` when `devtools: true`
|
|
93
|
+
40e0dbe Merge pull request #857 from ninp0/master
|
|
94
|
+
94633d9 PWN::SAST::TestCaseEngine - Change default rdoc FQDN to https://www.rubydoc.info
|
|
95
|
+
97a9a17 PWN::SAST::UseAfterFree module - initial commit
|
|
96
|
+
0b0bdab Merge pull request #856 from ninp0/master
|
|
97
|
+
ce3bc17 PWN::Blockchain::BTC - #bugfixes in #get_block_details method
|
|
98
|
+
bed84e1 PWN::Blockchain::BTC - add get_transactions method
|
|
99
|
+
0d4f60e PWN::Blockchain::BTC - implement the means to interact with private BTC nodes to eliminate HTTP 429 (rate limiting) issues
|
|
100
|
+
5c8c210 Merge pull request #855 from ninp0/master
|
|
101
|
+
2c69b53 PWN::Plugins::MonkeyPatch module - update monkey patch for Pry that properly handles splat mode for Hashes just as it does for Arrays and Strings
|
|
102
|
+
b58e591 Merge pull request #854 from ninp0/master
|
|
103
|
+
06916e5 PWN::SAST::* modules - continued overhaul / #bugfixes
|
|
104
|
+
f7090f9 PWN::SAST::* modules - reduce redundant code in #scan methods and centralize test case execution within PWN::SAST::TestCaseEngine module
|
|
105
|
+
3dc7714 Merge pull request #853 from ninp0/master
|
|
106
|
+
1f26cd3 PWN module - Initialize PWN::Env[:driver_opts] key for easier / standardized approach for driver development, options parsing, and custom environmental configs via --pwn-env --pwn-dec #rubocop_fix
|
|
107
|
+
d9a0435 Merge pull request #852 from ninp0/master
|
|
108
|
+
ba40358 PWN module - Initialize PWN::Env[:driver_opts] key for easier / standardized approach for driver development, options parsing, and custom environmental configs via --pwn-env --pwn-dec
|
|
109
|
+
f4d2cbb Merge pull request #851 from ninp0/master
|
|
110
|
+
3ff6722 PWN::AI::* modules - Implement HTTP 429 response handling to deal w/ multi-threaded pwn_sast Driver
|
|
111
|
+
927374a Merge pull request #850 from ninp0/master
|
|
112
|
+
172c98c pwn_sast Driver - #bugfix when passing in custom --pwn-env && --pwn-dec parameters
|
|
113
|
+
3b4b176 Merge pull request #849 from ninp0/master
|
|
114
|
+
7117649 PWN::Reports::SAST - move ai_introspection logic to PWN::SAST::* modules to dramatically increase result generation #bugfixes and #enhancements
|
|
115
|
+
a6b632f Merge pull request #848 from ninp0/master
|
|
116
|
+
7791f5b PWN::Reports::SAST - move ai_introspection logic to PWN::SAST::* modules to dramatically increase result generation
|
|
117
|
+
5d79b84 Merge pull request #847 from ninp0/master
|
|
118
|
+
5e5d069 Create default encrypted ~/.pwn/pwn.yaml && ~/.pwn/pwn.decryptor.yaml if they dont exist during first run of pwn prototyping driver
|
|
119
|
+
e8ae9ac Merge pull request #846 from ninp0/master
|
|
120
|
+
9d4a253 PWN::Reports::SAST && PWN::AI::Introspection modules - #bugfix to pass in request parameter. PWN::Config module - leverage PWN::AI.help to define valid AI engines
|
|
121
|
+
dd4945e config_spec - #bugfix in method call
|
|
122
|
+
46e5669 Merge pull request #845 from ninp0/master
|
|
123
|
+
cdf908f PWN::AI::Instrospection module - initial commit. #freeze contents of PWN::Env (Replaced PWN::CONFIG) unless PWN::Config.refresh_env is called. Update PWN::REPL module to use PWN::Env instead of decprecated pry_instance.config.pwn Hash
|
|
124
|
+
6ff2b17 Merge pull request #844 from ninp0/master
|
|
125
|
+
99c4f0b Begin implementing AI introspection throughout PWN. Also create PWN::Config module which maintains PWN::CONFIG constant #spec_bugfix
|
|
126
|
+
b4be7d4 Merge pull request #843 from ninp0/master
|
|
127
|
+
5231947 Begin implementing AI introspection throughout PWN. Also create PWN::Config module which maintains PWN::CONFIG constant #bugfix
|
|
128
|
+
13d0ed8 Begin implementing AI introspection throughout PWN. Also create PWN::Config module which maintains PWN::CONFIG constant
|
|
129
|
+
954462f Merge pull request #842 from ninp0/master
|
|
130
|
+
9bb42bb Update format of etc/pwn.yaml.EXAMPLE #non_backwards_compat_change, PWN::Reports::REPL && PWN::Plugins::Vault modules - begin rolling out Vault configuration convention, AI introspection, and the pwn prototyping driver / repl to have its respective history reside in ~/.pwn/pwn_history
|
|
131
|
+
c7c7cdb Merge pull request #841 from ninp0/master
|
|
132
|
+
280c348 PWN::Reports::SAST module - update request to include more context for LLM to analyze
|
|
133
|
+
01a445d Merge pull request #840 from ninp0/master
|
|
134
|
+
f939b6c PWN::Plugins::REPL && PWN::Plugins::Vault modules - multiple bugfixes around reloading pwn.yaml config
|
|
135
|
+
d552591 PWN::Blockchain module namespace - Initial commit of namespace and _VERY LIMITED_ PWN::Blockchain::BTC && PWN::Blockchain::ETH modules
|
|
136
|
+
e06f3d6 Merge pull request #839 from ninp0/master
|
|
137
|
+
c881c49 PWN::Plugins::REPL module - create .pwn directory if it doesnt exist #bugfix
|
|
138
|
+
54a8aac Merge pull request #838 from ninp0/master
|
|
139
|
+
1e67aae PWN::Plugins::REPL module - create .pwn directory if it doesnt exist
|
|
140
|
+
564d720 Merge pull request #837 from ninp0/master
|
|
141
|
+
92cf453 PWN::Plugins::REPL module - convention over configuation when you want to load your configuration without having to configure the convention :P
|
|
142
|
+
ab03252 Merge pull request #836 from ninp0/master
|
|
143
|
+
8a51f7e PWN::Plugins::REPL module - move method to refresh pwn.yaml config to PWN::Plugins::Vault module
|
|
144
|
+
0cf013f Merge pull request #835 from ninp0/master
|
|
145
|
+
5c5d2fc Standardize all modules within PWN::AI namespace to use :base_uri parameter. Update etc/pwn.yaml.example to reflect this functionality. Update PWN::Plugins::REPL && PWN::Plugins::Vault modules to support pwn.yaml reload if the config is edited.
|
|
146
|
+
494cc09 Merge pull request #834 from ninp0/master
|
|
147
|
+
0fa8e0a PWN::Plugins::BurpSuite module - implement return_as parameter within #get_sitemap method with :har choice (defaults to :base64). PWN::Plugins::Zaproxy module - #bugfix in #get_sitemap method
|
|
148
|
+
6ec31ce PWN::Plugins::BurpSuite module - implement return_as parameter within #get_sitemap method with :har choice (defaults to :base64). PWN::Plugins::Zaproxy module - #bugfix in #get_sitemap method
|
|
149
|
+
4245c0e Merge pull request #833 from ninp0/master
|
|
150
|
+
2d14a54 PWN::Reports::SAST module and pwn_sast Driver - change default --ai-system-content value in an effort for AI to provide better contextual assessments of anti-pattern results.
|
|
151
|
+
1483544 Merge pull request #832 from ninp0/master
|
|
152
|
+
6848a23 PWN::WWW::HackerOne module - #bugfixes in #get_bounty_programs method #convert_to_graphql_query
|
|
153
|
+
9c58555 Merge pull request #831 from ninp0/master
|
|
154
|
+
0d81a36 Merge branch '0dayInc:master' into master
|
|
155
|
+
380493f PWN::Plugins::BurpSuite module - #bugfix in #get_sitemap method when returning subset of sitemap via #keyword parameter
|
|
156
|
+
a7c9538 Merge pull request #830 from ninp0/master
|
|
157
|
+
2873f32 PWN::Plugins::BurpSuite module - #bugfix in #get_sitemap method when returning subset of sitemap via #keyword parameter
|
|
158
|
+
7402465 Merge pull request #829 from ninp0/master
|
|
159
|
+
4f93681 PWN::Plugins::Zaproxy module - remove isolated variable
|
|
160
|
+
d4c1857 Merge pull request #828 from ninp0/master
|
|
161
|
+
b76054b PWN::Plugins::Zaproxy module - simplify obtaining sitemap / sitemap subset #rubocop_fixes
|
|
162
|
+
95fe7a6 PWN::Plugins::BurpSuite && PWN::Plugins::Zaproxy modules - simplify obtaining sitemap / sitemap subset
|
|
163
|
+
19a207f Merge pull request #827 from ninp0/master
|
|
164
|
+
a2105c5 pwn_zaproxy_rest_api_scan Driver - pass additional_http_headers to #import_openapi_to_sitemap method
|
|
165
|
+
719a2f6 Merge pull request #826 from ninp0/master
|
|
166
|
+
8a2220a PWN::Plugins::BurpSuite && PWN::Plugins::Zaproxy modules / pwn_burp_suite_pro_active_* && pwn_zaproxy_active_* Drivers - cleaner headless handling, code cleanup, etc.
|
|
167
|
+
3a2981f Merge pull request #825 from ninp0/master
|
|
168
|
+
74cc01c pwn_zaproxy_rest_api_scan Driver - pass the api_key to #start method && headless #bugixes in zaproxy/burpsuite pro drivers
|
|
169
|
+
6311bbc Merge pull request #824 from ninp0/master
|
|
170
|
+
e1cb1fa PWN::Plugins::Zaproxy module - session #bugfixes and enhancements when running headless
|
|
171
|
+
27a7794 Merge pull request #823 from ninp0/master
|
|
172
|
+
f3a3dea PWN::Plugins::Zaproxy module - enhance search capability within #find_har_entries method
|
|
173
|
+
bb9e7ae Merge pull request #822 from ninp0/master
|
|
174
|
+
c82f6e1 PWN::Plugins::Zaproxy && PWN::Plugins::BurpSuite modules - multiple #bugfixes and enhancements
|
|
175
|
+
1caf1a0 Merge pull request #821 from ninp0/master
|
|
176
|
+
62aa5a8 PWN::Plugins::Zaproxy module - implement methods: #get_sitemap, #add_requester_tab, && multiple #bugfixes
|
|
177
|
+
32be1d5 Merge pull request #820 from ninp0/master
|
|
178
|
+
f754d75 pwn_zaproxy_active_rest_api_scan Driver - implement --additional_http_headers parameter #bugfix
|
|
179
|
+
dfba781 Merge pull request #819 from ninp0/master
|
|
180
|
+
ab7f1f7 pwn_zaproxy_active_rest_api_scan Driver - implement --additional_http_headers parameter
|
|
181
|
+
fc1ef3b Merge pull request #818 from ninp0/master
|
|
182
|
+
feb3be9 pwn_zaproxy_active_scan Driver - implement --in_scope and --exclude_paths parameters
|
|
183
|
+
cff0a5c Merge pull request #817 from ninp0/master
|
|
184
|
+
6b81168 PWN::Plugins::BurpSuite module - Implement CRUD methods for repeater
|
|
185
|
+
78a943c Merge pull request #816 from ninp0/master
|
data/README.md
CHANGED
|
@@ -37,7 +37,7 @@ $ cd /opt/pwn
|
|
|
37
37
|
$ ./install.sh
|
|
38
38
|
$ ./install.sh ruby-gem
|
|
39
39
|
$ pwn
|
|
40
|
-
pwn[v0.5.
|
|
40
|
+
pwn[v0.5.500]:001 >>> PWN.help
|
|
41
41
|
```
|
|
42
42
|
|
|
43
43
|
[](https://youtu.be/G7iLUY4FzsI)
|
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
|
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
|
53
53
|
$ gem install --verbose pwn
|
|
54
54
|
$ pwn
|
|
55
|
-
pwn[v0.5.
|
|
55
|
+
pwn[v0.5.500]:001 >>> PWN.help
|
|
56
56
|
```
|
|
57
57
|
|
|
58
58
|
If you're using a multi-user install of RVM do:
|
|
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
|
|
|
62
62
|
$ rvmsudo gem uninstall --all --executables pwn
|
|
63
63
|
$ rvmsudo gem install --verbose pwn
|
|
64
64
|
$ pwn
|
|
65
|
-
pwn[v0.5.
|
|
65
|
+
pwn[v0.5.500]:001 >>> PWN.help
|
|
66
66
|
```
|
|
67
67
|
|
|
68
68
|
PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`. The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
|
|
@@ -170,11 +170,14 @@ module PWN
|
|
|
170
170
|
response = Base64.strict_decode64(response)
|
|
171
171
|
|
|
172
172
|
# If sitemap comment and highlight color exists, use that instead of re-analyzing
|
|
173
|
-
sitemap_entry =
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
173
|
+
sitemap_entry = nil
|
|
174
|
+
if sitemap.any?
|
|
175
|
+
sitemap_entry = sitemap.find do |site|
|
|
176
|
+
site[:http_service][:host] == host &&
|
|
177
|
+
site[:http_service][:port] == port &&
|
|
178
|
+
site[:http_service][:protocol] == protocol &&
|
|
179
|
+
site[:request] == entry[:request]
|
|
180
|
+
end
|
|
178
181
|
end
|
|
179
182
|
|
|
180
183
|
if sitemap_entry.nil?
|
data/lib/pwn/version.rb
CHANGED