pwn 0.5.508 → 0.5.509

data/lib/pwn/sast/keystore.rb

@@ -1,75 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify weak
-    # passwords/configurations around key stores.
-    module Keystore
-      # Supported Method Parameters::
-      # PWN::SAST::Keystore.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -Fin \
-          -e 'keystore' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e.mesasge
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'CRYPTOGRAPHIC KEY ESTABLISHMENT AND MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-12',
-          cwe_id: '522',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/522.html'
-        }
-      rescue StandardError => e
-        raise e.mesasge
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/local_storage.rb

@@ -1,77 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify any localStorage function/method
-    # declarations within source code in an effort to
-    # determine if XSS is possible
-    module LocalStorage
-      # Supported Method Parameters::
-      # PWN::SAST::LocalStorage.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -n \
-          -e 'localStorage.getItem(' \
-          -e 'localStorage.setItem(' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '79',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/location_hash.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify any location.hash function/method
-    # declarations within source code in an effort to
-    # determine if XSS is possible
-    module LocationHash
-      # Supported Method Parameters::
-      # PWN::SAST::LocationHash.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -n \
-          -e 'location.hash' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '79',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/log4j.rb

@@ -1,78 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify command
-    # execution residing within Java source code.
-    module Log4J
-      # Supported Method Parameters::
-      # PWN::SAST::Log4J.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -Fin \
-          -e 'log4j' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        include_extensions = %w[.java .class .jar .war .ear .nar .properties .aj .jsp .jspx .jstm .jsptml .jnlp .jad .ser .gsp]
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          include_extensions: include_extensions,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'DEVELOPER SECURITY AND PRIVACY ARCHITECTURE AND DESIGN',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SA-17',
-          cwe_id: '502',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/502.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/logger.rb

@@ -1,90 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify whether sensitive
-    # artifacts such as passwords, pre-auth tokens, etc are persisted
-    # to log files (which may lead to unauthorized access).
-    module Logger
-      # Supported Method Parameters::
-      # PWN::SAST::Logger.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -Fin \
-          -e '.warn' \
-          -e '.info' \
-          -e '.error' \
-          -e '.debug' {PWN_SAST_SRC_TARGET} > /dev/null | grep -i \
-          -e log | grep -i \
-          -e pass \
-          -e pwd \
-          -e saml \
-          -e uri \
-          -e url \
-          -e auth \
-          -e cred \
-          -e token \
-          -e session \
-          -e key
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-28',
-          cwe_id: '779',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/779.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/md5.rb

@@ -1,75 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify MD5 hash related objects, methods, classes, etc.
-    # to determine if deprecated hashing is still supported.
-    module MD5
-      # Supported Method Parameters::
-      # PWN::SAST::MD5.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -in \
-          -e 'md5' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-28',
-          cwe_id: '328',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/328.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/outer_html.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify any outerHTML function/method
-    # declarations within source code in an effort to
-    # determine if XSS is possible.
-    module OuterHTML
-      # Supported Method Parameters::
-      # PWN::SAST::OuterHTML.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -n \
-          -e 'outerHTML' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '79',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/padding_oracle.rb

@@ -1,72 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify padding oracle vulnerabilities involving weak CBC block cipher padding.
-    module PaddingOracle
-      # Supported Method Parameters::
-      # PWN::SAST::PaddingOracle.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        # TODO: Include regex to search for weak CBC block cipher padding
-        test_case_filter = "
-          grep -Ein \
-          -e 'AES/CBC/PKCS' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used to dictate Security Control Requirements for a Given SAST module.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'PUBLIC KEY INFRASTRUCTURE CERTIFICATES',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-17',
-          cwe_id: '310',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/310.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/password.rb

@@ -1,75 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify hard-code/plain-text
-    # passwords within source code.
-    module Password
-      # Supported Method Parameters::
-      # PWN::SAST::Password.scan(
-      #   :dir_path => 'optional path to dir defaults to .'
-      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = %(
-          grep -Ein \
-          -e "password(\\s=|=)" \
-          -e "passwd(\\s=|=)" \
-          -e "pass(\\s=|=)" \
-          -e "password:\\s" \
-          -e "pwd(\\s=|=)" {PWN_SAST_SRC_TARGET} 2> /dev/null
-        )
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-28',
-          cwe_id: '540',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/540.html'
-        }
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end