pwn 0.5.509 → 0.5.510

data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml

@@ -0,0 +1,42 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<project>
+  <actions/>
+  <description></description>
+  <keepDependencies>false</keepDependencies>
+  <properties>
+    <jenkins.model.BuildDiscarderProperty>
+      <strategy class="hudson.tasks.LogRotator">
+        <daysToKeep>-1</daysToKeep>
+        <numToKeep>9</numToKeep>
+        <artifactDaysToKeep>-1</artifactDaysToKeep>
+        <artifactNumToKeep>-1</artifactNumToKeep>
+      </strategy>
+    </jenkins.model.BuildDiscarderProperty>
+  </properties>
+  <scm class="hudson.scm.NullSCM"/>
+  <canRoam>true</canRoam>
+  <disabled>false</disabled>
+  <blockBuildWhenDownstreamBuilding>false</blockBuildWhenDownstreamBuilding>
+  <blockBuildWhenUpstreamBuilding>false</blockBuildWhenUpstreamBuilding>
+  <triggers/>
+  <concurrentBuild>false</concurrentBuild>
+  <builders>
+    <hudson.tasks.Shell>
+      <command>/bin/bash --login -c &quot;cd $PWN_ROOT &amp;&amp; ./vagrant/provisioners/wpscan.rb&quot;</command>
+    </hudson.tasks.Shell>
+  </builders>
+  <publishers>
+    <hudson.plugins.logparser.LogParserPublisher plugin="log-parser@2.0">
+      <unstableOnWarning>true</unstableOnWarning>
+      <failBuildOnError>true</failBuildOnError>
+      <showGraphs>true</showGraphs>
+      <parsingRulesPath>$PWN_ROOT/userland/$PWN_PROVIDER/jenkins/log_parser_rules/self_update.rules</parsingRulesPath>
+      <useProjectRule>false</useProjectRule>
+    </hudson.plugins.logparser.LogParserPublisher>
+  </publishers>
+  <buildWrappers>
+    <hudson.plugins.ansicolor.AnsiColorBuildWrapper plugin="ansicolor@0.5.0">
+      <colorMapName>xterm</colorMapName>
+    </hudson.plugins.ansicolor.AnsiColorBuildWrapper>
+  </buildWrappers>
+</project>

data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules

@@ -0,0 +1,5 @@
+# Arachni found something if the console output contains [+]
+warning /^\[\+\] [1-9][0-9]{1,} issues were detected\./
+
+# Success if 0 issues were detected
+info /^\[\+\] 0 issues were detected\.$/

data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules

@@ -0,0 +1,2 @@
+# Warn when an x has been identified in console output for any test case (implies security pattern matched)
+warning /\=\>(.+x.*)(?=complete.)/

data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules

@@ -0,0 +1,14 @@
+#ok /not really/
+
+# match line containing 'error', case-insensitive
+error /(?i)(^|\s)error(:|\s)/
+
+# match line containing 'warning', case-insensitive
+warning /(?i)(^|\s)warning(:|\s)/
+
+# create a quick access link to lines in the report containing 'INFO'
+info /INFO/
+
+# each line containing 'BUILD' represents the start of a section for grouping errors and warnings found after the line.
+# also creates a quick access link.
+start /BUILD/

data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules

@@ -0,0 +1,8 @@
+# Fail
+error /("grade"(:\s+|:)("D\+"|"D"|"D-"|"F")|Certificate not valid for domain name|Unable to connect to the server)/
+
+# Warn as TLS Certs Begin to Degrade
+warning /"grade"(:\s+|:)("B\+"|"B"|"B-"|"C\+"|"C"|"C-")/
+
+# Build Success
+info /"grade"(:\s+|:)("A\+"|"A"|"A-")/

data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules

@@ -0,0 +1,9 @@
+# FYI: Prone to false positives
+# Mark Build as Failed if the Following Generic Strings are Discovered
+error /(?i)(error|stacktrace|exception):/
+
+# Mark Build as Unstable if the Following Generic Strings are Discovered
+warning /(?i)warning:/
+
+# Build Success
+info /.*/

data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules

@@ -0,0 +1,2 @@
+# wpscan found something if the console output contains [+]
+warning /\[\!\].+$/

data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE

@@ -0,0 +1,8 @@
+user: 'pwnadmin'
+pass: 'changeme'
+fullname: 'changeme'
+email: 'changeme@pwn.local'
+ssh_keygen_pass: 'changeme'
+#jenkins_job_credentials:
+#  - { ssh_username: 'changeme', description: 'changeme', credential_id: '000000001' }
+#  - { ssh_username: 'changeme', description: 'changeme', credential_id: '000000002' }

data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE

@@ -0,0 +1,5 @@
+domains: 
+  - jenkins.DOMAIN
+  - openvas.DOMAIN
+  - sast.DOMAIN
+email: youremail@DOMAIN

data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE

@@ -0,0 +1,4 @@
+msfrpcd_host: '127.0.0.1'
+port: 55553
+username: 'pwnadmin'
+password: 'changeme'

data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE

@@ -0,0 +1,15 @@
+access_key: 'ACCESS_KEY'
+secret_key: 'SECRET_KEY'
+credentials:
+  add:
+    Host:
+      Windows:
+      - domain: 'dc.local'
+        username: 'USERNAME'
+        auth_method: 'Password'
+        password: 'PASSWORD'
+plugins:
+  Web Servers:
+    individual:
+      '11213': enabled
+      '18261': enabled

data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE

@@ -0,0 +1,2 @@
+user: 'pwnadmin'
+pass: 'changeme'

data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE

@@ -0,0 +1,3 @@
+text_field(id: 'username').wait_until(&:present?).set('<target username>')
+text_field(id: 'password').wait_until(&:present?).set(PWN::Plugins::AuthenticationHelper.mask_password))
+button(name: 'login').wait_until(&:present?).click!

data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE

@@ -0,0 +1,2 @@
+user: 'pwnadmin'
+pass: 'changeme'

data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE

@@ -0,0 +1,52 @@
+ipinfodb_api_key: ""
+bing_api_key: ""
+shodan_api_key: ""
+shodan_api_key: ""
+google_api_key: ""
+google_cse_key: ""
+builtwith_api_key: ""
+bing_api_key: ""
+github_api_key: ""
+hashes_api_key: ""
+github_api_key: ""
+linkedin_api_key: ""
+linkedin_secret_key: ""
+bing_api_key: ""
+jigsaw_username_key: ""
+jigsaw_password_key: ""
+jigsaw_api_key: ""
+jigsaw_username_key: ""
+jigsaw_password_key: ""
+jigsaw_api_key: ""
+jigsaw_api_key: ""
+shodan_api_key: ""
+flickr_api_key: ""
+twitter_api_key: ""
+twitter_secret_key: ""
+google_api_key: ""
+instagram_api_key: ""
+instagram_secret_key: ""
+shodan_api_key: ""
+github_api_key: ""
+fullcontact_api_key: ""
+github_api_key: ""
+censysio_id_key: ""
+censysio_secret_key: ""
+pwnedlist_api_key: ""
+pwnedlist_secret_key: ""
+pwnedlist_iv_key: ""
+pwnedlist_api_key: ""
+pwnedlist_secret_key: ""
+pwnedlist_iv_key: ""
+pwnedlist_api_key: ""
+pwnedlist_secret_key: ""
+pwnedlist_api_key: ""
+pwnedlist_secret_key: ""
+pwnedlist_api_key: ""
+pwnedlist_secret_key: ""
+twitter_api_key: ""
+twitter_secret_key: ""
+twitter_api_key: ""
+twitter_secret_key: ""
+github_api_key: ""
+

data/etc/userland/vmware/vagrant.yaml.EXAMPLE

@@ -0,0 +1,5 @@
+vagrant_vmware_license: "/tmp/license.lic"
+cpus: 1
+memory: 4096
+hostname: pwndeployed.pwn.local
+diskMB: 36864

data/find_latest_gem_versions_per_Gemfile.sh

@@ -0,0 +1,19 @@
+#!/bin/bash --login
+export rvmsudo_secure_path=1
+rvmsudo gem update --system
+
+cat Gemfile | awk '{print $2}' | grep -E "^'.+$" | grep -v -e rubygems.org | while read gem; do 
+  this_gem=`echo $gem | sed "s/'//g" | sed 's/\,//g'`
+  latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
+  echo "${this_gem} => $latest_version"
+  if [[ $this_gem == 'activesupport' ]]; then
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '<${latest_version}'/g" Gemfile
+  elif [[ $this_gem == 'bundler' || $this_gem == 'bundler-audit' ]]; then
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=${latest_version}'/g" Gemfile
+  elif [[ $this_gem == 'json' ]]; then
+    # Shakes fist at selenium-webdriver
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=2.13.2'/g" Gemfile
+  else
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '${latest_version}'/g" Gemfile
+  fi
+done

data/git_commit_test_reinit_gem.sh

@@ -0,0 +1,57 @@
+#!/bin/bash --login
+usage() {
+  echo "USAGE: ${0} '<full name>' <email address> '<git commit comments>'"
+  exit 1
+}
+
+if (( $# == 3 )); then
+  # Default Strategy is to merge codebase
+  git config pull.rebase false
+  git config commit.gpgsign true
+  git pull
+  git add . --all
+  echo 'Updating Gems to Latest Versions in Gemfile...'
+  ./find_latest_gem_versions_per_Gemfile.sh
+  if [[ $? -ne 0 ]]; then
+    echo 'ERROR: find_latest_gem_versions_per_Gemfile.sh failed!'
+    exit 1
+  fi
+
+  pwn_autoinc_version
+  if [[ $? -ne 0 ]]; then
+    echo 'ERROR: pwn_autoinc_version failed! Investigate and bump pwn version manually.'
+    exit 1
+  fi
+
+  # Generate RDoc JSONL for fine-tunning LLMs
+  pwn_rdoc_to_jsonl --rdoc-root-dir '/opt/pwn/rdoc/PWN' --jsonl-results '/opt/pwn/third_party/pwn_rdoc.jsonl'
+
+  # Tag for every 100 commits (i.e. 0.1.100, 0.1.200, etc)
+  tag_this_version_bool=`ruby -r 'pwn' -e 'if (PWN::VERSION.split(".")[-1].to_i + 1) % 100 == 0; then print true; else print false; end'`
+  if [[ $tag_this_version_bool == 'true' ]]; then
+    last_tag=$(git tag | tail -n 1)
+    git log $last_tag.. --oneline > CHANGELOG_BETWEEN_TAGS.txt
+  fi
+
+  git commit -a -S --author="${1} <${2}>" -m "${3}"
+  ./update_pwn.sh
+  if [[ $? -ne 0 ]]; then
+    echo 'ERROR: update_pwn.sh failed!'
+    exit 1
+  fi
+
+  latest_gem=$(ls pkg/*.gem)
+  if [[ $latest_gem != "" ]]; then
+    echo "Pushing ${latest_gem} to RubyGems.org..."
+    rvmsudo gem push $latest_gem
+  fi
+
+  if [[ $tag_this_version_bool == 'true' ]]; then
+    this_version=`ruby -r 'pwn' -e 'print PWN::VERSION'`
+    echo "Tagging: ${this_version}"
+    git tag $this_version
+    git push origin $this_version
+  fi
+else
+  usage
+fi

data/install.sh

@@ -0,0 +1,177 @@
+#!/bin/bash --login
+if [[ -d '/opt/pwn' ]]; then
+  pwn_root='/opt/pwn' 
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+date -u +%Y-%m-%d_%H.%M.%S
+debug=$2
+pwn_deploy_type=$1
+os=$(uname -s)
+
+# TODO: Check that all configs exist
+# MAKE .EXAMPLE and actual file the same
+# if they're the same size prompt user to 
+# configure
+# TODO: install ansible in this script if not installed
+# to take advantage of encrypted configs early on
+
+function usage() {
+  echo $"Usage: $0 <aws | docker_pwn_prototyper | docker_pwn_fuzz_net_app_proto | docker_pwn_transparent_browser | docker_pwn_sast | docker_pwn_www_checkip | ruby-gem | virtualbox | virtualbox-gui | vmware-fusion | vmware-fusion-gui | vmware-workstation | vmware-workstation-gui | vsphere>"
+  date -u +%Y-%m-%d_%H.%M.%S
+  exit 1
+}
+
+function deploy_docker_container() {
+  export PWN_PROVIDER="docker"
+  
+  if [[ $debug == '' ]]; then
+    vagrant up --provider=docker
+  else
+    vagrant up --provider=docker --debug
+  fi
+
+}
+
+if [[ $# != 1  ]] && [[ $# != 2 ]]; then
+  usage
+fi
+
+case $pwn_deploy_type in
+  "aws") 
+    export PWN_PROVIDER="aws"
+    if [[ -e "./etc/userland/aws/vagrant.yaml" ]]; then
+      vagrant plugin install vagrant-reload
+      vagrant plugin install vagrant-aws
+      vagrant plugin install vagrant-aws-dns
+      vagrant box add dummy https://github.com/mitchellh/vagrant-aws/raw/master/dummy.box --force
+      if [[ $debug == '' ]]; then
+        vagrant up --provider=aws
+      else
+        vagrant up --provider=aws --debug
+      fi
+    else
+      echo "ERROR: Missing vagrant.yaml Config"
+      echo "Use ./etc/userland/aws/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/aws/vagrant.yaml"
+    fi
+    ;;
+  "kvm")
+    # TODO: Coming soon
+    echo "Coming soon..."
+    ;;
+  "docker_pwn_prototyper")
+    export DOCKER_CONTAINER_TARGET="docker_pwn_prototyper"
+    deploy_docker_container
+    ;;
+  "docker_pwn_fuzz_net_app_proto")
+    export DOCKER_CONTAINER_TARGET="docker_pwn_fuzz_net_app_proto"
+    deploy_docker_container
+    ;;
+  "docker_pwn_transparent_browser")
+    export DOCKER_CONTAINER_TARGET="docker_pwn_transparent_browser"
+    deploy_docker_container
+    ;;
+  "docker_pwn_sast")
+    export DOCKER_CONTAINER_TARGET="docker_pwn_sast"
+    deploy_docker_container
+    ;;
+  "docker_pwn_www_checkip")
+    export DOCKER_CONTAINER_TARGET="docker_pwn_www_checkip"
+    deploy_docker_container
+    ;;
+  "ruby-gem")
+    export PWN_PROVIDER="ruby-gem"
+    ./packer/provisioners/upload_globals.sh
+    ./packer/provisioners/rvm.sh
+    ./packer/provisioners/bashrc.sh
+    ./packer/provisioners/ruby.sh
+    ./packer/provisioners/pwn.sh
+    ;;
+  "virtualbox"|"virtualbox-gui")
+    if [[ -e "./etc/userland/virtualbox/vagrant.yaml" ]]; then
+      export PWN_PROVIDER="virtualbox"
+      if [[ $pwn_deploy_type == "virtualbox-gui" ]]; then
+        export VAGRANT_GUI="true"
+      fi
+      if [[ $debug == '' ]]; then
+        vagrant up --provider=virtualbox
+      else
+        vagrant up --provider=virtualbox --debug
+      fi
+    else
+      echo "ERROR: Missing vagrant.yaml Config"
+      echo "Use ./etc/userland/virtualbox/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/virtualbox/vagrant.yaml"
+    fi
+    ;;
+  "vmware-fusion"|"vmware-fusion-gui"|"vmware-workstation"|"vmware-workstation-gui")
+    if [[ -e "./etc/userland/vmware/vagrant.yaml" ]]; then
+      export PWN_PROVIDER="vmware"
+      license_file=$(ruby -e "require 'yaml'; print YAML.load_file('./etc/userland/vmware/vagrant.yaml')['vagrant_vmware_license']")
+      vagrant plugin install vagrant-vmware-desktop
+      vagrant plugin license vagrant-vmware-desktop $license_file
+      
+      case $pwn_deploy_type in
+        "vmware-fusion"|"vmware-fusion-gui")
+          if [[ $pwn_deploy_type == "vmware-fusion-gui" ]]; then
+            export VAGRANT_GUI="true"
+          fi
+
+          if [[ $debug == '' ]]; then
+            vagrant up --provider=vmware_fusion
+          else
+            vagrant up --provider=vmware_fusion --debug
+          fi
+          ;;
+        "vmware-workstation"|"vmware-workstation-gui")
+          if [[ $pwn_deploy_type == "vmware-workstation-gui" ]]; then
+            export VAGRANT_GUI="true"
+          fi
+
+          if [[ $debug == '' ]]; then
+            vagrant up --provider=vmware_workstation
+          else
+            vagrant up --provider=vmware_workstation --debug
+          fi
+          ;;        
+      esac
+    else
+      echo "ERROR: Missing vagrant.yaml Config"
+      echo "Use ./etc/userland/vmware/vagrant.yaml.EXAMPLE as a Template to Create ./etc/userland/vmware/vagrant.yaml"
+    fi
+    ;;
+  "vsphere")
+    export PWN_PROVIDER="vmware"
+    vmx=$(find ${pwn_root}/.vagrant/machines/default/ -name packer-vmware-iso.vmx | grep vmware)
+    if [[ -e $vmx ]]; then
+      vagrant status | grep running
+      if [[ $? == 0 ]]; then
+        vagrant halt
+      fi
+      vmx_basename=$(basename $vmx)
+      ova="$HOME/${vmx_basename}.ova"
+      ovftool $vmx $ova
+      if [[ $? == 0 ]]; then
+        echo "vSphere Image: ${ova}"
+        echo "Ready for deployment."
+      else
+        echo "There was an issue with the ovftool command."
+        echo "Ensure the VM is powered down and ovftool is in your path (i.e. Symlink to /usr/local/bin)"
+      fi
+    else
+      echo "ERROR: VMware VMX file for PWN is missing."
+      echo "HINTS: Before running ${0} vsphere"
+      echo "Run one of the following to deploy the local VMX necessary to create the vSphere OVA file:"
+      echo "${0} vmware-fusion"
+      echo "${0} vmware-fusion-gui"
+      echo "${0} vmware-workstation"
+      echo "${0} vmware-workstation-gui"
+      echo -e "Implement all of your userland requirements, update your SSH keys (if applicable), and try again.\n"
+      echo "Good Luck!"
+    fi
+    ;;
+  *)
+    usage
+    ;;
+esac
+date -u +%Y-%m-%d_%H.%M.%S