pwn 0.5.508 → 0.5.509

data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml

@@ -1,42 +0,0 @@
-<?xml version='1.0' encoding='UTF-8'?>
-<project>
-  <actions/>
-  <description></description>
-  <keepDependencies>false</keepDependencies>
-  <properties>
-    <jenkins.model.BuildDiscarderProperty>
-      <strategy class="hudson.tasks.LogRotator">
-        <daysToKeep>-1</daysToKeep>
-        <numToKeep>9</numToKeep>
-        <artifactDaysToKeep>-1</artifactDaysToKeep>
-        <artifactNumToKeep>-1</artifactNumToKeep>
-      </strategy>
-    </jenkins.model.BuildDiscarderProperty>
-  </properties>
-  <scm class="hudson.scm.NullSCM"/>
-  <canRoam>true</canRoam>
-  <disabled>false</disabled>
-  <blockBuildWhenDownstreamBuilding>false</blockBuildWhenDownstreamBuilding>
-  <blockBuildWhenUpstreamBuilding>false</blockBuildWhenUpstreamBuilding>
-  <triggers/>
-  <concurrentBuild>false</concurrentBuild>
-  <builders>
-    <hudson.tasks.Shell>
-      <command>/bin/bash --login -c &quot;cd $PWN_ROOT &amp;&amp; ./vagrant/provisioners/wpscan.rb&quot;</command>
-    </hudson.tasks.Shell>
-  </builders>
-  <publishers>
-    <hudson.plugins.logparser.LogParserPublisher plugin="log-parser@2.0">
-      <unstableOnWarning>true</unstableOnWarning>
-      <failBuildOnError>true</failBuildOnError>
-      <showGraphs>true</showGraphs>
-      <parsingRulesPath>$PWN_ROOT/userland/$PWN_PROVIDER/jenkins/log_parser_rules/self_update.rules</parsingRulesPath>
-      <useProjectRule>false</useProjectRule>
-    </hudson.plugins.logparser.LogParserPublisher>
-  </publishers>
-  <buildWrappers>
-    <hudson.plugins.ansicolor.AnsiColorBuildWrapper plugin="ansicolor@0.5.0">
-      <colorMapName>xterm</colorMapName>
-    </hudson.plugins.ansicolor.AnsiColorBuildWrapper>
-  </buildWrappers>
-</project>

data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules

@@ -1,5 +0,0 @@
-# Arachni found something if the console output contains [+]
-warning /^\[\+\] [1-9][0-9]{1,} issues were detected\./
-
-# Success if 0 issues were detected
-info /^\[\+\] 0 issues were detected\.$/

data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules

@@ -1,2 +0,0 @@
-# Warn when an x has been identified in console output for any test case (implies security pattern matched)
-warning /\=\>(.+x.*)(?=complete.)/

data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules

@@ -1,14 +0,0 @@
-#ok /not really/
-
-# match line containing 'error', case-insensitive
-error /(?i)(^|\s)error(:|\s)/
-
-# match line containing 'warning', case-insensitive
-warning /(?i)(^|\s)warning(:|\s)/
-
-# create a quick access link to lines in the report containing 'INFO'
-info /INFO/
-
-# each line containing 'BUILD' represents the start of a section for grouping errors and warnings found after the line.
-# also creates a quick access link.
-start /BUILD/

data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules

@@ -1,8 +0,0 @@
-# Fail
-error /("grade"(:\s+|:)("D\+"|"D"|"D-"|"F")|Certificate not valid for domain name|Unable to connect to the server)/
-
-# Warn as TLS Certs Begin to Degrade
-warning /"grade"(:\s+|:)("B\+"|"B"|"B-"|"C\+"|"C"|"C-")/
-
-# Build Success
-info /"grade"(:\s+|:)("A\+"|"A"|"A-")/

data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules

@@ -1,9 +0,0 @@
-# FYI: Prone to false positives
-# Mark Build as Failed if the Following Generic Strings are Discovered
-error /(?i)(error|stacktrace|exception):/
-
-# Mark Build as Unstable if the Following Generic Strings are Discovered
-warning /(?i)warning:/
-
-# Build Success
-info /.*/

data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules

@@ -1,2 +0,0 @@
-# wpscan found something if the console output contains [+]
-warning /\[\!\].+$/

data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE

@@ -1,8 +0,0 @@
-user: 'pwnadmin'
-pass: 'changeme'
-fullname: 'changeme'
-email: 'changeme@pwn.local'
-ssh_keygen_pass: 'changeme'
-#jenkins_job_credentials:
-#  - { ssh_username: 'changeme', description: 'changeme', credential_id: '000000001' }
-#  - { ssh_username: 'changeme', description: 'changeme', credential_id: '000000002' }

data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE

@@ -1,5 +0,0 @@
-domains: 
-  - jenkins.DOMAIN
-  - openvas.DOMAIN
-  - sast.DOMAIN
-email: youremail@DOMAIN

data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE

@@ -1,4 +0,0 @@
-msfrpcd_host: '127.0.0.1'
-port: 55553
-username: 'pwnadmin'
-password: 'changeme'

data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE

@@ -1,15 +0,0 @@
-access_key: 'ACCESS_KEY'
-secret_key: 'SECRET_KEY'
-credentials:
-  add:
-    Host:
-      Windows:
-      - domain: 'dc.local'
-        username: 'USERNAME'
-        auth_method: 'Password'
-        password: 'PASSWORD'
-plugins:
-  Web Servers:
-    individual:
-      '11213': enabled
-      '18261': enabled

data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE

@@ -1,2 +0,0 @@
-user: 'pwnadmin'
-pass: 'changeme'

data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE

@@ -1,3 +0,0 @@
-text_field(id: 'username').wait_until(&:present?).set('<target username>')
-text_field(id: 'password').wait_until(&:present?).set(PWN::Plugins::AuthenticationHelper.mask_password))
-button(name: 'login').wait_until(&:present?).click!

data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE

@@ -1,2 +0,0 @@
-user: 'pwnadmin'
-pass: 'changeme'

data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE

@@ -1,52 +0,0 @@
-ipinfodb_api_key: ""
-bing_api_key: ""
-shodan_api_key: ""
-shodan_api_key: ""
-google_api_key: ""
-google_cse_key: ""
-builtwith_api_key: ""
-bing_api_key: ""
-github_api_key: ""
-hashes_api_key: ""
-github_api_key: ""
-linkedin_api_key: ""
-linkedin_secret_key: ""
-bing_api_key: ""
-jigsaw_username_key: ""
-jigsaw_password_key: ""
-jigsaw_api_key: ""
-jigsaw_username_key: ""
-jigsaw_password_key: ""
-jigsaw_api_key: ""
-jigsaw_api_key: ""
-shodan_api_key: ""
-flickr_api_key: ""
-twitter_api_key: ""
-twitter_secret_key: ""
-google_api_key: ""
-instagram_api_key: ""
-instagram_secret_key: ""
-shodan_api_key: ""
-github_api_key: ""
-fullcontact_api_key: ""
-github_api_key: ""
-censysio_id_key: ""
-censysio_secret_key: ""
-pwnedlist_api_key: ""
-pwnedlist_secret_key: ""
-pwnedlist_iv_key: ""
-pwnedlist_api_key: ""
-pwnedlist_secret_key: ""
-pwnedlist_iv_key: ""
-pwnedlist_api_key: ""
-pwnedlist_secret_key: ""
-pwnedlist_api_key: ""
-pwnedlist_secret_key: ""
-pwnedlist_api_key: ""
-pwnedlist_secret_key: ""
-twitter_api_key: ""
-twitter_secret_key: ""
-twitter_api_key: ""
-twitter_secret_key: ""
-github_api_key: ""
-

data/etc/userland/vmware/vagrant.yaml.EXAMPLE

@@ -1,5 +0,0 @@
-vagrant_vmware_license: "/tmp/license.lic"
-cpus: 1
-memory: 4096
-hostname: pwndeployed.pwn.local
-diskMB: 36864

data/find_latest_gem_versions_per_Gemfile.sh

@@ -1,19 +0,0 @@
-#!/bin/bash --login
-export rvmsudo_secure_path=1
-rvmsudo gem update --system
-
-cat Gemfile | awk '{print $2}' | grep -E "^'.+$" | grep -v -e rubygems.org | while read gem; do 
-  this_gem=`echo $gem | sed "s/'//g" | sed 's/\,//g'`
-  latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
-  echo "${this_gem} => $latest_version"
-  if [[ $this_gem == 'activesupport' ]]; then
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '<${latest_version}'/g" Gemfile
-  elif [[ $this_gem == 'bundler' ]]; then
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=${latest_version}'/g" Gemfile
-  elif [[ $this_gem == 'json' ]]; then
-    # Shakes fist at selenium-webdriver
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=2.13.2'/g" Gemfile
-  else
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '${latest_version}'/g" Gemfile
-  fi
-done

data/git_commit_test_reinit_gem.sh

@@ -1,57 +0,0 @@
-#!/bin/bash --login
-usage() {
-  echo "USAGE: ${0} '<full name>' <email address> '<git commit comments>'"
-  exit 1
-}
-
-if (( $# == 3 )); then
-  # Default Strategy is to merge codebase
-  git config pull.rebase false
-  git config commit.gpgsign true
-  git pull
-  git add . --all
-  echo 'Updating Gems to Latest Versions in Gemfile...'
-  ./find_latest_gem_versions_per_Gemfile.sh
-  if [[ $? -ne 0 ]]; then
-    echo 'ERROR: find_latest_gem_versions_per_Gemfile.sh failed!'
-    exit 1
-  fi
-
-  pwn_autoinc_version
-  if [[ $? -ne 0 ]]; then
-    echo 'ERROR: pwn_autoinc_version failed! Investigate and bump pwn version manually.'
-    exit 1
-  fi
-
-  # Generate RDoc JSONL for fine-tunning LLMs
-  pwn_rdoc_to_jsonl --rdoc-root-dir '/opt/pwn/rdoc/PWN' --jsonl-results '/opt/pwn/third_party/pwn_rdoc.jsonl'
-
-  # Tag for every 100 commits (i.e. 0.1.100, 0.1.200, etc)
-  tag_this_version_bool=`ruby -r 'pwn' -e 'if (PWN::VERSION.split(".")[-1].to_i + 1) % 100 == 0; then print true; else print false; end'`
-  if [[ $tag_this_version_bool == 'true' ]]; then
-    last_tag=$(git tag | tail -n 1)
-    git log $last_tag.. --oneline > CHANGELOG_BETWEEN_TAGS.txt
-  fi
-
-  git commit -a -S --author="${1} <${2}>" -m "${3}"
-  ./update_pwn.sh
-  if [[ $? -ne 0 ]]; then
-    echo 'ERROR: update_pwn.sh failed!'
-    exit 1
-  fi
-
-  latest_gem=$(ls pkg/*.gem)
-  if [[ $latest_gem != "" ]]; then
-    echo "Pushing ${latest_gem} to RubyGems.org..."
-    rvmsudo gem push $latest_gem
-  fi
-
-  if [[ $tag_this_version_bool == 'true' ]]; then
-    this_version=`ruby -r 'pwn' -e 'print PWN::VERSION'`
-    echo "Tagging: ${this_version}"
-    git tag $this_version
-    git push origin $this_version
-  fi
-else
-  usage
-fi

data/install.sh

@@ -1,177 +0,0 @@
-#!/bin/bash --login
-if [[ -d '/opt/pwn' ]]; then
-  pwn_root='/opt/pwn' 
-else
-  pwn_root="${PWN_ROOT}"
-fi
-
-date -u +%Y-%m-%d_%H.%M.%S
-debug=$2
-pwn_deploy_type=$1
-os=$(uname -s)
-
-# TODO: Check that all configs exist
-# MAKE .EXAMPLE and actual file the same
-# if they're the same size prompt user to 
-# configure
-# TODO: install ansible in this script if not installed
-# to take advantage of encrypted configs early on
-
-function usage() {
-  echo $"Usage: $0 <aws | docker_pwn_prototyper | docker_pwn_fuzz_net_app_proto | docker_pwn_transparent_browser | docker_pwn_sast | docker_pwn_www_checkip | ruby-gem | virtualbox | virtualbox-gui | vmware-fusion | vmware-fusion-gui | vmware-workstation | vmware-workstation-gui | vsphere>"
-  date -u +%Y-%m-%d_%H.%M.%S
-  exit 1
-}
-
-function deploy_docker_container() {
-  export PWN_PROVIDER="docker"
-  
-  if [[ $debug == '' ]]; then
-    vagrant up --provider=docker
-  else
-    vagrant up --provider=docker --debug
-  fi
-
-}
-
-if [[ $# != 1  ]] && [[ $# != 2 ]]; then
-  usage
-fi
-
-case $pwn_deploy_type in
-  "aws") 
-    export PWN_PROVIDER="aws"
-    if [[ -e "./etc/userland/aws/vagrant.yaml" ]]; then
-      vagrant plugin install vagrant-reload
-      vagrant plugin install vagrant-aws
-      vagrant plugin install vagrant-aws-dns
-      vagrant box add dummy https://github.com/mitchellh/vagrant-aws/raw/master/dummy.box --force
-      if [[ $debug == '' ]]; then
-        vagrant up --provider=aws
-      else
-        vagrant up --provider=aws --debug
-      fi
-    else
-      echo "ERROR: Missing vagrant.yaml Config"
-      echo "Use ./etc/userland/aws/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/aws/vagrant.yaml"
-    fi
-    ;;
-  "kvm")
-    # TODO: Coming soon
-    echo "Coming soon..."
-    ;;
-  "docker_pwn_prototyper")
-    export DOCKER_CONTAINER_TARGET="docker_pwn_prototyper"
-    deploy_docker_container
-    ;;
-  "docker_pwn_fuzz_net_app_proto")
-    export DOCKER_CONTAINER_TARGET="docker_pwn_fuzz_net_app_proto"
-    deploy_docker_container
-    ;;
-  "docker_pwn_transparent_browser")
-    export DOCKER_CONTAINER_TARGET="docker_pwn_transparent_browser"
-    deploy_docker_container
-    ;;
-  "docker_pwn_sast")
-    export DOCKER_CONTAINER_TARGET="docker_pwn_sast"
-    deploy_docker_container
-    ;;
-  "docker_pwn_www_checkip")
-    export DOCKER_CONTAINER_TARGET="docker_pwn_www_checkip"
-    deploy_docker_container
-    ;;
-  "ruby-gem")
-    export PWN_PROVIDER="ruby-gem"
-    ./packer/provisioners/upload_globals.sh
-    ./packer/provisioners/rvm.sh
-    ./packer/provisioners/bashrc.sh
-    ./packer/provisioners/ruby.sh
-    ./packer/provisioners/pwn.sh
-    ;;
-  "virtualbox"|"virtualbox-gui")
-    if [[ -e "./etc/userland/virtualbox/vagrant.yaml" ]]; then
-      export PWN_PROVIDER="virtualbox"
-      if [[ $pwn_deploy_type == "virtualbox-gui" ]]; then
-        export VAGRANT_GUI="true"
-      fi
-      if [[ $debug == '' ]]; then
-        vagrant up --provider=virtualbox
-      else
-        vagrant up --provider=virtualbox --debug
-      fi
-    else
-      echo "ERROR: Missing vagrant.yaml Config"
-      echo "Use ./etc/userland/virtualbox/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/virtualbox/vagrant.yaml"
-    fi
-    ;;
-  "vmware-fusion"|"vmware-fusion-gui"|"vmware-workstation"|"vmware-workstation-gui")
-    if [[ -e "./etc/userland/vmware/vagrant.yaml" ]]; then
-      export PWN_PROVIDER="vmware"
-      license_file=$(ruby -e "require 'yaml'; print YAML.load_file('./etc/userland/vmware/vagrant.yaml')['vagrant_vmware_license']")
-      vagrant plugin install vagrant-vmware-desktop
-      vagrant plugin license vagrant-vmware-desktop $license_file
-      
-      case $pwn_deploy_type in
-        "vmware-fusion"|"vmware-fusion-gui")
-          if [[ $pwn_deploy_type == "vmware-fusion-gui" ]]; then
-            export VAGRANT_GUI="true"
-          fi
-
-          if [[ $debug == '' ]]; then
-            vagrant up --provider=vmware_fusion
-          else
-            vagrant up --provider=vmware_fusion --debug
-          fi
-          ;;
-        "vmware-workstation"|"vmware-workstation-gui")
-          if [[ $pwn_deploy_type == "vmware-workstation-gui" ]]; then
-            export VAGRANT_GUI="true"
-          fi
-
-          if [[ $debug == '' ]]; then
-            vagrant up --provider=vmware_workstation
-          else
-            vagrant up --provider=vmware_workstation --debug
-          fi
-          ;;        
-      esac
-    else
-      echo "ERROR: Missing vagrant.yaml Config"
-      echo "Use ./etc/userland/vmware/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/vmware/vagrant.yaml"
-    fi
-    ;;
-  "vsphere")
-    export PWN_PROVIDER="vmware"
-    vmx=$(find ${pwn_root}/.vagrant/machines/default/ -name packer-vmware-iso.vmx | grep vmware)
-    if [[ -e $vmx ]]; then
-      vagrant status | grep running
-      if [[ $? == 0 ]]; then
-        vagrant halt
-      fi
-      vmx_basename=$(basename $vmx)
-      ova="$HOME/${vmx_basename}.ova"
-      ovftool $vmx $ova
-      if [[ $? == 0 ]]; then
-        echo "vSphere Image: ${ova}"
-        echo "Ready for deployment."
-      else
-        echo "There was an issue with the ovftool command."
-        echo "Ensure the VM is powered down and ovftool is in your path (i.e. Symlink to /usr/local/bin)"
-      fi
-    else
-      echo "ERROR: VMware VMX file for PWN is missing."
-      echo "HINTS: Before running ${0} vsphere"
-      echo "Run one of the following to deploy the local VMX necessary to create the vSphere OVA file:"
-      echo "${0} vmware-fusion"
-      echo "${0} vmware-fusion-gui"
-      echo "${0} vmware-workstation"
-      echo "${0} vmware-workstation-gui"
-      echo -e "Implement all of your userland requirements, update your SSH keys (if applicable), and try again.\n"
-      echo "Good Luck!"
-    fi
-    ;;
-  *)
-    usage
-    ;;
-esac
-date -u +%Y-%m-%d_%H.%M.%S