pwn 0.5.509 → 0.5.510

data/lib/pwn/www/wayback_machine.rb

@@ -0,0 +1,113 @@
+# frozen_string_literal: true
+
+module PWN
+  module WWW
+    # This plugin supports Wayback Machine actions.
+    module WaybackMachine
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::WaybackMachine.open(
+      #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
+      # )
+
+      public_class_method def self.open(opts = {})
+        browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
+
+        browser = browser_obj[:browser]
+        browser.goto('https://web.archive.org')
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::WaybackMachine.search(
+      #   browser_obj: 'required - browser_obj returned from #open method',
+      #   q: 'required - search string'
+      # )
+
+      public_class_method def self.search(opts = {})
+        browser_obj = opts[:browser_obj]
+        q = opts[:q].to_s
+
+        browser = browser_obj[:browser]
+        browser.text_field(name: 'query').wait_until(&:present?).set(q).submit
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::WaybackMachine.timetravel(
+      #   browser_obj: 'required - browser_obj returned from #open method',
+      #   uri: 'required - URI (e.g. https://example.com)',
+      #   date: 'optional - date in YYYYMMDD format (Defaults to today)'
+      # )
+
+      public_class_method def self.timetravel(opts = {})
+        browser_obj = opts[:browser_obj]
+        uri = opts[:uri].to_s
+        date = opts[:date] ||= Time.now.strftime('%Y%m%d')
+
+        browser = browser_obj[:browser]
+        browser.goto("https://web.archive.org/web/#{date}/#{uri}")
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::WaybackMachine.close(
+      #   browser_obj: 'required - browser_obj returned from #open method'
+      # )
+
+      public_class_method def self.close(opts = {})
+        browser_obj = opts[:browser_obj]
+        PWN::Plugins::TransparentBrowser.close(
+          browser_obj: browser_obj
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          browser_obj = #{self}.open(
+            browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+            proxy: 'optional - scheme://proxy_host:port || tor'
+          )
+
+          browser_obj = #{self}.search(
+            browser_obj: 'required - browser_obj returned from #open method',
+            q: 'required search string'
+          )
+
+          browser_obj = #{self}.timetravel(
+            browser_obj: 'required - browser_obj returned from #open method',
+            uri: 'required - URI (e.g. https://example.com)',
+            date: 'optional - date in YYYYMMDD format (Defaults to today)'
+          )
+
+          browser_obj = #{self}.close(
+            browser_obj: 'required - browser_obj returned from #open method',
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/www/youtube.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+module PWN
+  module WWW
+    # This plugin supports Youtube actions.
+    module Youtube
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::Youtube.open(
+      #   browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+      #   proxy: 'optional - scheme://proxy_host:port || tor'
+      # )
+
+      public_class_method def self.open(opts = {})
+        browser_obj = PWN::Plugins::TransparentBrowser.open(opts)
+
+        browser = browser_obj[:browser]
+        browser.goto('https://www.youtube.com')
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::Youtube.search(
+      #   browser_obj: 'required - browser_obj returned from #open method',
+      #   q: 'required - search string'
+      # )
+
+      public_class_method def self.search(opts = {})
+        browser_obj = opts[:browser_obj]
+        q = opts[:q].to_s
+
+        browser = browser_obj[:browser]
+        browser.text_field(name: 'search_query').wait_until(&:present?).set(q)
+        browser.button(id: 'search-btn').click!
+
+        browser_obj
+      rescue StandardError => e
+        raise e
+      end
+
+      # Supported Method Parameters::
+      # browser_obj = PWN::WWW::Youtube.close(
+      #   browser_obj: 'required - browser_obj returned from #open method'
+      # )
+
+      public_class_method def self.close(opts = {})
+        browser_obj = opts[:browser_obj]
+        PWN::Plugins::TransparentBrowser.close(
+          browser_obj: browser_obj
+        )
+      rescue StandardError => e
+        raise e
+      end
+
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+
+      # Display Usage for this Module
+
+      public_class_method def self.help
+        puts "USAGE:
+          browser_obj = #{self}.open(
+            browser_type: 'optional - :firefox|:chrome|:ie|:headless (Defaults to :firefox)',
+            proxy: 'optional - scheme://proxy_host:port || tor'
+          )
+
+          browser_obj = #{self}.search(
+            browser_obj: 'required - browser_obj returned from #open method',
+            q: 'required search string'
+          )
+
+          browser_obj = #{self}.close(
+            browser_obj: 'required - browser_obj returned from #open method',
+          )
+
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/www.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+module PWN
+  # This file, using the autoload directive loads WWW modules
+  # into memory only when they're needed. For more information, see:
+  # http://www.rubyinside.com/ruby-techniques-revealed-autoload-1652.html
+  module WWW
+    autoload :AppCobaltIO, 'pwn/www/app_cobalt_io'
+    autoload :Bing, 'pwn/www/bing'
+    autoload :BugCrowd, 'pwn/www/bug_crowd'
+    autoload :Checkip, 'pwn/www/checkip.rb'
+    autoload :CoinbasePro, 'pwn/www/coinbase_pro.rb'
+    autoload :Duckduckgo, 'pwn/www/duckduckgo'
+    autoload :Facebook, 'pwn/www/facebook'
+    autoload :Google, 'pwn/www/google'
+    autoload :HackerOne, 'pwn/www/hacker_one'
+    autoload :Linkedin, 'pwn/www/linkedin'
+    autoload :Pastebin, 'pwn/www/pastebin'
+    autoload :Pandora, 'pwn/www/pandora'
+    autoload :Paypal, 'pwn/www/paypal'
+    autoload :Synack, 'pwn/www/synack'
+    autoload :Torch, 'pwn/www/torch'
+    autoload :TradingView, 'pwn/www/trading_view'
+    autoload :Twitter, 'pwn/www/twitter'
+    autoload :Uber, 'pwn/www/uber'
+    autoload :Upwork, 'pwn/www/upwork'
+    autoload :WaybackMachine, 'pwn/www/wayback_machine'
+    autoload :Youtube, 'pwn/www/youtube'
+
+    # Display a List of Every PWN::WWW Module
+
+    public_class_method def self.help
+      constants.sort
+    end
+  end
+end

data/lib/pwn.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'pwn/version'
+require 'yaml'
+
+# Thank you for choosing the Continuous Security Integrtion Framework!
+# Your Source for Source Code Analysis, Vulnerability Scanning, Exploitation,
+# & General Security Testing in a Continuous Integration Environment
+module PWN
+  $stdout.sync = true # < Ensure that all print statements output progress in realtime
+  $stdout.flush       # < Ensure that all print statements output progress in realtime
+  autoload :AI, 'pwn/ai'
+  autoload :AWS, 'pwn/aws'
+  autoload :Banner, 'pwn/banner'
+  autoload :Blockchain, 'pwn/blockchain'
+  autoload :Config, 'pwn/config'
+  autoload :Driver, 'pwn/driver'
+  autoload :FFI, 'pwn/ffi'
+  autoload :Plugins, 'pwn/plugins'
+  autoload :Reports, 'pwn/reports'
+  autoload :SAST, 'pwn/sast'
+  autoload :SDR, 'pwn/sdr'
+  autoload :WWW, 'pwn/www'
+
+  # Initialize Options for Drivers
+
+  PWN::Config.init_driver_options
+
+  # Display a List of Every PWN Module
+
+  public_class_method def self.help
+    constants.sort
+  end
+
+rescue StandardError => e
+  puts e.backtrace
+  raise e
+end

data/packer/daemons/msfrpcd.rb

@@ -0,0 +1,64 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'yaml'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-aACTION', '--action=ACTION', '<Required - Daemon Action start|reload|stop>') { |a| opts[:action] = a }
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+action = opts[:action].to_s.scrub.to_sym
+
+def start
+  if ENV.fetch('PWN_ROOT')
+    pwn_root = ENV.fetch('PWN_ROOT')
+  elsif Dir.exist?('/pwn')
+    pwn_root = '/pwn'
+  else
+    pwn_root = Dir.pwd
+  end
+
+  pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+  metasploit_root = '/opt/metasploit-framework-dev'
+
+  msfrpcd_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml")
+  msfrpcd_host = msfrpcd_config['msfrpcd_host'].to_s.scrub.strip.chomp
+  msfrpcd_port = msfrpcd_config['port'].to_i
+  msfrpcd_user = msfrpcd_config['username'].to_s.scrub.chomp # Don't strip leading space
+  msfrpcd_pass = msfrpcd_config['password'].to_s.scrub.chomp # Don't strip leading space
+  system("#{metasploit_root}/msfrpcd -a '#{msfrpcd_host}' -p #{msfrpcd_port} -U '#{msfrpcd_user}' -P '#{msfrpcd_pass}'")
+  puts 'complete.'
+end
+
+def reload
+  stop
+  sleep 9
+  start
+end
+
+def stop
+  system("ps -ef | grep msfrpcd | grep -v grep | awk '{print $2}' | while read pid; do kill -9 $pid; done")
+end
+
+case action
+when :start
+  start
+when :reload
+  reload
+when :stop
+  stop
+else
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end

data/packer/daemons/openvas.rb

@@ -0,0 +1,51 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'yaml'
+require 'optparse'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-aACTION', '--action=ACTION', '<Required - Daemon Action start|restart|stop>') { |a| opts[:action] = a }
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+action = opts[:action].to_s.scrub.to_sym
+
+def start
+  puts system('/etc/init.d/openvas-manager start')
+  puts system('/etc/init.d/openvas-scanner start')
+  puts system('/etc/init.d/greenbone-security-assistant start')
+end
+
+def restart
+  stop
+  sleep 3
+  start
+end
+
+def stop
+  puts system('/etc/init.d/greenbone-security-assistant stop')
+  puts system('/etc/init.d/openvas-scanner stop')
+  puts system('/etc/init.d/openvas-manager stop')
+end
+
+case action
+when :start
+  start
+when :restart
+  restart
+when :stop
+  stop
+else
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end

data/packer/deploy_docker_containers.sh

@@ -0,0 +1,9 @@
+#!/bin/bash --login
+cd $PWN_ROOT/packer && ./deploy_packer_box.sh | grep docker | awk '{print $1}' | while read c; do 
+  echo "BUILDING / DEPLOYING ${c}..."
+  ./deploy_packer_box.sh $c latest
+  docker images -a | grep -v -e REPOSITORY -e pwn_prototyper -e kali-linux-docker | awk '{print $3}' | while read i; do    docker rmi --force $i
+  done
+  sleep 9
+done
+docker system prune -f

data/packer/deploy_packer_box.sh

@@ -0,0 +1,87 @@
+#!/bin/bash --login
+provider_type=$1
+box_version=$2
+debug=false
+export PACKER_LOG=1
+set -e
+
+function usage() {
+  echo -e "USAGE: ${0} \ \n\taws_ami |\n\tdocker_pwn_prototyper |\n\tdocker_pwn_fuzz_net_app_proto |\n\tdocker_pwn_transparent_browser |\n\tdocker_pwn_sast |\n\tdocker_pwn_www_checkip |\n\tkvm |\n\tvirtualbox |\n\tvmware\n>\n<box version || container tag to build (e.g. 2020.2.1 || latest)> <debug>"
+  exit 1
+}
+
+function pack() {
+  provider_type=$1
+  packer_provider_template=$2
+  debug=$3
+  packer_secrets='packer_secrets.json'
+
+  if $debug; then
+    packer build \
+      -debug \
+      -only $provider_type \
+      -var "box_version=${box_version}" \
+      -var-file=$packer_secrets \
+      $packer_provider_template
+  else
+    packer build \
+      -only $provider_type \
+      -var "box_version=${box_version}" \
+      -var-file=$packer_secrets \
+      $packer_provider_template
+  fi 
+}
+
+if [[ $# < 2 ]]; then
+  usage
+fi
+
+if [[ $3 != '' ]]; then
+  debug=true
+fi
+
+case $provider_type in
+  "aws_ami")
+    # Create Service Role for vmimport per instructions here:
+    # https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-image-import.html
+    echo $debug
+    pack amazon-ebs kali_rolling_aws_ami.json $debug
+    ;;
+  "docker_pwn_prototyper")
+    pack docker docker/kali_rolling_docker_pwn_prototyper.json $debug
+    ;;
+  "docker_pwn_fuzz_net_app_proto")
+    pack docker docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json $debug
+    ;;
+  "docker_pwn_transparent_browser")
+    pack docker docker/kali_rolling_docker_pwn_transparent_browser.json $debug
+    ;;
+  "docker_pwn_sast")
+    pack docker docker/kali_rolling_docker_pwn_sast.json $debug
+    ;;
+  "docker_pwn_www_checkip")
+    pack docker docker/kali_rolling_docker_pwn_www_checkip.json $debug
+    ;;
+  "kvm")
+    rm kali_rolling_qemu_kvm_xen.box || true
+    pack qemu kali_rolling_qemu_kvm_xen.json $debug
+    vagrant box remove pwn/kali_rolling --provider=qemu || true
+    vagrant box add --box-version $box_version pwn/kali_rolling
+    ;;
+  "virtualbox")
+    rm kali_rolling_virtualbox.box || true
+    pack virtualbox-iso kali_rolling_virtualbox.json $debug
+    vagrant box remove pwn/kali_rolling --provider=virtualbox || true
+    vagrant box add --box-version $box_version pwn/kali_rolling
+    ;;
+  "vmware")
+    echo $debug
+    rm kali_rolling_vmware.box || true
+    pack vmware-iso kali_rolling_vmware.json $debug
+    vagrant box remove pwn/kali_rolling --provider=vmware_desktop || true
+    vagrant box add --box-version $box_version pwn/kali_rolling
+    ;;
+  *)
+    usage
+    exit 1
+esac

data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json

@@ -0,0 +1,44 @@
+{
+  "variables": {
+    "docker_hub_user": "{{env `DOCKER_HUB_USER`}}",
+    "docker_hub_pass": "{{env `DOCKER_HUB_PASS`}}"
+  },
+  "builders": [{
+    "type": "docker",
+    "image": "0dayinc/pwn_prototyper",
+    "commit": true,
+    "pull": false,
+    "run_command": [
+      "--detach",
+      "--interactive",
+      "--tty",
+      "--entrypoint=/bin/bash",
+      "{{.Image}}"
+    ]
+  }],
+  "provisioners": [{
+    "type": "shell",
+    "environment_vars": [
+      "PWN_PROVIDER=docker"
+    ],
+    "scripts": [
+      "provisioners/postgresql.sh"
+    ],
+    "pause_before": "1s"
+  }],
+  "post-processors": [
+    [
+      {
+        "type": "docker-tag",
+        "repository": "0dayinc/pwn_fuzz_net_app_proto",
+        "tag": "latest"
+      },
+      {
+        "type": "docker-push",
+        "login": true,
+        "login_username": "{{user `docker_hub_user`}}",
+        "login_password": "{{user `docker_hub_pass`}}"
+      }
+    ]
+  ]
+}

data/packer/docker/kali_rolling_docker_pwn_prototyper.json

@@ -0,0 +1,48 @@
+{
+  "variables": {
+    "docker_hub_user": "{{env `DOCKER_HUB_USER`}}",
+    "docker_hub_pass": "{{env `DOCKER_HUB_PASS`}}"
+  },
+  "builders": [{
+    "type": "docker",
+    "image": "kalilinux/kali-rolling",
+    "commit": true,
+    "run_command": [
+      "--detach",
+      "--interactive",
+      "--tty",
+      "--entrypoint=/bin/bash",
+      "{{.Image}}"
+    ]
+  }],
+  "provisioners": [{
+    "type": "shell",
+    "environment_vars": [
+      "PWN_PROVIDER=docker"
+    ],
+    "scripts": [
+      "provisioners/upload_globals.sh",
+      "provisioners/init_image.sh",
+      "provisioners/docker_rvm.sh",
+      "provisioners/docker_bashrc.sh",
+      "provisioners/ruby.sh",
+      "provisioners/pwn.sh"
+    ],
+    "pause_before": "1s"
+  }],
+  "post-processors": [
+    [
+      {
+        "type": "docker-tag",
+        "repository": "0dayinc/pwn_prototyper",
+        "tag": "latest"
+      },
+      {
+        "type": "docker-push",
+        "login": true,
+        "login_username": "{{user `docker_hub_user`}}",
+        "login_password": "{{user `docker_hub_pass`}}"
+      }
+    ]
+  ]
+}

data/packer/docker/kali_rolling_docker_pwn_sast.json

@@ -0,0 +1,44 @@
+{
+  "variables": {
+    "docker_hub_user": "{{env `DOCKER_HUB_USER`}}",
+    "docker_hub_pass": "{{env `DOCKER_HUB_PASS`}}"
+  },
+  "builders": [{
+    "type": "docker",
+    "image": "0dayinc/pwn_prototyper",
+    "commit": true,
+    "pull": false,
+    "run_command": [
+      "--detach",
+      "--interactive",
+      "--tty",
+      "--entrypoint=/bin/bash",
+      "{{.Image}}"
+    ]
+  }],
+  "provisioners": [{
+    "type": "shell",
+    "environment_vars": [
+      "PWN_PROVIDER=docker"
+    ],
+    "scripts": [
+      "provisioners/postgresql.sh"
+    ],
+    "pause_before": "1s"
+  }],
+  "post-processors": [
+    [
+      {
+        "type": "docker-tag",
+        "repository": "0dayinc/pwn_sast",
+        "tag": "latest"
+      },
+      {
+        "type": "docker-push",
+        "login": true,
+        "login_username": "{{user `docker_hub_user`}}",
+        "login_password": "{{user `docker_hub_pass`}}"
+      }
+    ]
+  ]
+}

data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json

@@ -0,0 +1,46 @@
+{
+  "variables": {
+    "docker_hub_user": "{{env `DOCKER_HUB_USER`}}",
+    "docker_hub_pass": "{{env `DOCKER_HUB_PASS`}}"
+  },
+  "builders": [{
+    "type": "docker",
+    "image": "0dayinc/pwn_prototyper",
+    "commit": true,
+    "pull": false,
+    "run_command": [
+      "--detach",
+      "--interactive",
+      "--tty",
+      "--entrypoint=/bin/bash",
+      "{{.Image}}"
+    ]
+  }],
+  "provisioners": [{
+    "type": "shell",
+    "environment_vars": [
+      "PWN_PROVIDER=docker"
+    ],
+    "scripts": [
+      "provisioners/chrome.sh",
+      "provisioners/firefox.sh",
+      "provisioners/geckodriver.sh"
+    ],
+    "pause_before": "1s"
+  }],
+  "post-processors": [
+    [
+      {
+        "type": "docker-tag",
+        "repository": "0dayinc/pwn_transparent_browser",
+        "tag": "latest"
+      },
+      {
+        "type": "docker-push",
+        "login": true,
+        "login_username": "{{user `docker_hub_user`}}",
+        "login_password": "{{user `docker_hub_pass`}}"
+      }
+    ]
+  ]
+}