pwn 0.5.508 → 0.5.509

data/lib/pwn/sast/cmd_execution_scala.rb

@@ -1,80 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify command
-    # execution residing within scala source code.
-    module CmdExecutionScala
-      # Supported Method Parameters::
-      # PWN::SAST::CmdExecutionScala.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -Fn \
-          -e 'Process(' \
-          -e '.!' \
-          -e '.!!' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        include_extensions = %w[.scala .sc .sbt .class .jar .war .tasty .scala.html .scala.js .scala.txt .properties]
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          include_extensions: include_extensions,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
-          cwe_id: '78',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/csrf.rb

@@ -1,74 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify indicators of improper
-    # CSRF protection.  If nothing appears in the report,
-    # this may be an indicator of NO CSRF protection.
-    module CSRF
-      # Supported Method Parameters::
-      # PWN::SAST::CSRF.scan(
-      #   :dir_path => 'optional path to dir defaults to .'
-      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -ni \
-          -e 'csrf' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '352',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/352.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/deserial_java.rb

@@ -1,85 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify if source may
-    # result in exposing the Java application to deserialization vulnerabilities.
-    # For more information see:
-    # https://cheatsheetseries.owasp.org/cheatsheets/Deserialization_Cheat_Sheet.html
-    module DeserialJava
-      # Supported Method Parameters::
-      # PWN::SAST::DeserialJava.scan(
-      #   :dir_path => 'optional path to dir defaults to .'
-      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -in \
-          -e readObject \
-          -e XMLdecoder \
-          -e fromXML \
-          -e readObjectNodData \
-          -e readResolve \
-          -e readExternal \
-          -e readUnshared \
-          -e Serializable {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        include_extensions = %w[.java .class .jar .war .ear .nar .properties .aj .jsp .jspx .jstm .jsptml .jnlp .jad .ser .gsp]
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          include_extensions: include_extensions,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'INFORMATION INPUT VALIDATION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
-          cwe_id: '502',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/502.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/emoticon.rb

@@ -1,82 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify portions of
-    # code marked by developers as interesting for whatever reason.
-    module Emoticon
-      # Supported Method Parameters::
-      # PWN::SAST::Emoticon.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -Fn \
-          -e ':-)' \
-          -e ';-)' \
-          -e ':-P' \
-          -e ':-D' \
-          -e '\_o_/' \
-          -e '\_O_/' \
-          -e '\_0_/' \
-          -e ':-O' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'LEAST PRIVILEGE',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-06',
-          cwe_id: '546',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/546.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/eval.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify any eval function/method
-    # declarations within source code in an effort to
-    # determine if arbitrary command/code execution is possible
-    module Eval
-      # Supported Method Parameters::
-      # PWN::SAST::Eval.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -n \
-          -e 'eval(' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '95',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/95.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/factory.rb

@@ -1,79 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify if source may
-    # result in exposing the application to XXE vulnerabilities.
-    # For more information see:
-    # https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing
-    module Factory
-      # Supported Method Parameters::
-      # PWN::SAST::Factory.scan(
-      #   :dir_path => 'optional path to dir defaults to .'
-      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -in \
-          -e DocumentBuilderFactory \
-          -e XMLInputFactory \
-          -e SAXParserFactory {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-        include_extensions = %w[.java .class .jar .war .ear .nar .properties .aj .jsp .jspx .jstm .jsptml .jnlp .jad .ser .gsp]
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          include_extensions: include_extensions,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'DEVELOPER CONFIGURATION MANAGEMENT',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SA-10',
-          cwe_id: '611',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/611.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/http_authorization_header.rb

@@ -1,80 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify hard-code/plain-text
-    # passwords within source code.
-    module HTTPAuthorizationHeader
-      # Supported Method Parameters::
-      # PWN::SAST::HTTPAuthorizationHeader.scan(
-      #   :dir_path => 'optional path to dir defaults to .'
-      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = %(
-          grep -Ein \
-          -e "Authorization:(\\sBasic|Basic)" \
-          -e "Authorization:(\\sBearer|Bearer)" \
-          -e "Authorization:(\\sDigest|Digest)" \
-          -e "Authorization:(\\sHOBA|HOBA)" \
-          -e "Authorization:(\\sMutual|Mutual)" \
-          -e "Authorization:(\\sNegotiate|Negotiate)" \
-          -e "Authorization:(\\sVapid|Vapid)" \
-          -e "Authorization:(\\sSCRAM|SCRAM)" \
-          -e "Authorization:(\\sAWS|AWS)" \
-          -e "authorization(\\s=|=)" {PWN_SAST_SRC_TARGET} 2> /dev/null
-        )
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'PROTECTION OF INFORMATION AT REST',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-28',
-          cwe_id: '285',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/285.html'
-        }
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            :dir_path => 'optional path to dir defaults to .',
-            :git_repo_root_uri => 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end

data/lib/pwn/sast/inner_html.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: false
-
-require 'json'
-require 'socket'
-
-module PWN
-  module SAST
-    # SAST Module used to identify any innerHTML function/method
-    # declarations within source code in an effort to
-    # determine if XSS is possible
-    module InnerHTML
-      # Supported Method Parameters::
-      # PWN::SAST::InnerHTML.scan(
-      #   dir_path: 'optional path to dir defaults to .'
-      #   git_repo_root_uri: 'optional http uri of git repo scanned'
-      # )
-
-      public_class_method def self.scan(opts = {})
-        dir_path = opts[:dir_path]
-        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
-
-        test_case_filter = "
-          grep -n \
-          -e 'innerHTML' {PWN_SAST_SRC_TARGET} 2> /dev/null
-        "
-
-        PWN::SAST::TestCaseEngine.execute(
-          test_case_filter: test_case_filter,
-          security_references: security_references,
-          dir_path: dir_path,
-          git_repo_root_uri: git_repo_root_uri
-        )
-      rescue StandardError => e
-        raise e
-      end
-
-      # Used primarily to map NIST 800-53 Revision 4 Security Controls
-      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
-      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
-      # Determine the level of Testing Coverage w/ PWN.
-
-      public_class_method def self.security_references
-        {
-          sast_module: self,
-          section: 'MALICIOUS CODE PROTECTION',
-          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-03',
-          cwe_id: '79',
-          cwe_uri: 'https://cwe.mitre.org/data/definitions/79.html'
-        }
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          sast_arr = #{self}.scan(
-            dir_path: 'optional path to dir defaults to .',
-            git_repo_root_uri: 'optional http uri of git repo scanned'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end