pwn 0.5.509 → 0.5.510
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/FUNDING.yml +1 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
- data/.gitignore +65 -0
- data/.rubocop.yml +35 -0
- data/.rubocop_todo.yml +178 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +24 -0
- data/CHANGELOG_BETWEEN_TAGS.txt +185 -0
- data/CODE_OF_CONDUCT.md +46 -0
- data/CONTRIBUTING.md +13 -0
- data/Gemfile +107 -0
- data/LICENSE.txt +22 -0
- data/README.md +100 -0
- data/Rakefile +20 -0
- data/Vagrantfile +250 -0
- data/bin/pwn +30 -0
- data/bin/pwn_android_war_dialer +151 -0
- data/bin/pwn_autoinc_version +58 -0
- data/bin/pwn_aws_describe_resources +717 -0
- data/bin/pwn_bdba_groups +107 -0
- data/bin/pwn_bdba_scan +198 -0
- data/bin/pwn_burp_suite_pro_active_rest_api_scan +167 -0
- data/bin/pwn_burp_suite_pro_active_scan +132 -0
- data/bin/pwn_char_base64_encoding +15 -0
- data/bin/pwn_char_dec_encoding +14 -0
- data/bin/pwn_char_hex_escaped_encoding +17 -0
- data/bin/pwn_char_html_entity_encoding +15 -0
- data/bin/pwn_char_unicode_escaped_encoding +14 -0
- data/bin/pwn_char_url_encoding +15 -0
- data/bin/pwn_crt_sh +73 -0
- data/bin/pwn_defectdojo_engagement_create +148 -0
- data/bin/pwn_defectdojo_importscan +130 -0
- data/bin/pwn_defectdojo_reimportscan +118 -0
- data/bin/pwn_diff_csv_files_w_column_exclude +171 -0
- data/bin/pwn_domain_reversewhois +76 -0
- data/bin/pwn_fuzz_net_app_proto +170 -0
- data/bin/pwn_gqrx_scanner +196 -0
- data/bin/pwn_jenkins_create_job +58 -0
- data/bin/pwn_jenkins_create_view +58 -0
- data/bin/pwn_jenkins_install_plugin +83 -0
- data/bin/pwn_jenkins_thinBackup_aws_s3 +113 -0
- data/bin/pwn_jenkins_update_plugins +77 -0
- data/bin/pwn_jenkins_useradd +76 -0
- data/bin/pwn_mail_agent +114 -0
- data/bin/pwn_msf_postgres_login +28 -0
- data/bin/pwn_nessus_cloud_scan_crud +334 -0
- data/bin/pwn_nessus_cloud_vulnscan +87 -0
- data/bin/pwn_nexpose +42 -0
- data/bin/pwn_nmap_discover_tcp_udp +353 -0
- data/bin/pwn_openvas_vulnscan +104 -0
- data/bin/pwn_pastebin_sample_filter +47 -0
- data/bin/pwn_phone +129 -0
- data/bin/pwn_rdoc_to_jsonl +83 -0
- data/bin/pwn_sast +183 -0
- data/bin/pwn_serial_check_voicemail +56 -0
- data/bin/pwn_serial_msr206 +168 -0
- data/bin/pwn_serial_qualcomm_commands +16 -0
- data/bin/pwn_serial_son_micro_sm132_rfid +188 -0
- data/bin/pwn_shodan_graphql_introspection +304 -0
- data/bin/pwn_shodan_search +90 -0
- data/bin/pwn_simple_http_server +44 -0
- data/bin/pwn_web_cache_deception +205 -0
- data/bin/pwn_www_checkip +77 -0
- data/bin/pwn_www_uri_buster +363 -0
- data/bin/pwn_xss_dom_vectors +149 -0
- data/bin/pwn_zaproxy_active_rest_api_scan +159 -0
- data/bin/pwn_zaproxy_active_scan +130 -0
- data/build_pwn_gem.sh +33 -0
- data/documentation/PWN.png +0 -0
- data/documentation/PWN_Contributors_and_Users.png +0 -0
- data/documentation/fax-spectrogram.png +0 -0
- data/documentation/fax-waveform.png +0 -0
- data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt +54 -0
- data/documentation/pwn_android_war_dialer_session.png +0 -0
- data/documentation/pwn_install.png +0 -0
- data/documentation/pwn_wallpaper.jpg +0 -0
- data/documentation/ringing-spectrogram.png +0 -0
- data/documentation/ringing-waveform.png +0 -0
- data/etc/systemd/msfrpcd.service +12 -0
- data/etc/systemd/openvas.service +14 -0
- data/etc/userland/aws/apache2/jenkins_443.conf +90 -0
- data/etc/userland/aws/apache2/jenkins_80.conf +7 -0
- data/etc/userland/aws/apache2/openvas_443.conf +87 -0
- data/etc/userland/aws/apache2/openvas_80.conf +7 -0
- data/etc/userland/aws/apache2/sast_443.conf +87 -0
- data/etc/userland/aws/apache2/sast_80.conf +9 -0
- data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/aws/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/aws/jenkins/jenkins +81 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/aws/vagrant.yaml.EXAMPLE +35 -0
- data/etc/userland/docker/apache2/jenkins_443.conf +90 -0
- data/etc/userland/docker/apache2/jenkins_80.conf +7 -0
- data/etc/userland/docker/apache2/openvas_443.conf +87 -0
- data/etc/userland/docker/apache2/openvas_80.conf +7 -0
- data/etc/userland/docker/apache2/sast_443.conf +87 -0
- data/etc/userland/docker/apache2/sast_80.conf +9 -0
- data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/docker/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/docker/jenkins/jenkins +81 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/qemu/apache2/jenkins_443.conf +90 -0
- data/etc/userland/qemu/apache2/jenkins_80.conf +7 -0
- data/etc/userland/qemu/apache2/openvas_443.conf +87 -0
- data/etc/userland/qemu/apache2/openvas_80.conf +7 -0
- data/etc/userland/qemu/apache2/sast_443.conf +87 -0
- data/etc/userland/qemu/apache2/sast_80.conf +9 -0
- data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/qemu/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/qemu/jenkins/jenkins +81 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/ruby-gem/apache2/jenkins_443.conf +90 -0
- data/etc/userland/ruby-gem/apache2/jenkins_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/openvas_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/openvas_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/sast_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/sast_80.conf +9 -0
- data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/ruby-gem/jenkins/jenkins +81 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/apache2/jenkins_443.conf +90 -0
- data/etc/userland/virtualbox/apache2/jenkins_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/openvas_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/openvas_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/sast_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/sast_80.conf +9 -0
- data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/virtualbox/jenkins/jenkins +81 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/apache2/jenkins_443.conf +90 -0
- data/etc/userland/vmware/apache2/jenkins_80.conf +7 -0
- data/etc/userland/vmware/apache2/openvas_443.conf +87 -0
- data/etc/userland/vmware/apache2/openvas_80.conf +7 -0
- data/etc/userland/vmware/apache2/sast_443.conf +87 -0
- data/etc/userland/vmware/apache2/sast_80.conf +9 -0
- data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/vmware/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/vmware/jenkins/jenkins +81 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/vmware/vagrant.yaml.EXAMPLE +5 -0
- data/find_latest_gem_versions_per_Gemfile.sh +19 -0
- data/git_commit_test_reinit_gem.sh +57 -0
- data/install.sh +177 -0
- data/lib/pwn/ai/grok.rb +258 -0
- data/lib/pwn/ai/introspection.rb +100 -0
- data/lib/pwn/ai/ollama.rb +260 -0
- data/lib/pwn/ai/open_ai.rb +807 -0
- data/lib/pwn/ai.rb +19 -0
- data/lib/pwn/aws/acm.rb +92 -0
- data/lib/pwn/aws/api_gateway.rb +92 -0
- data/lib/pwn/aws/app_stream.rb +92 -0
- data/lib/pwn/aws/application_auto_scaling.rb +92 -0
- data/lib/pwn/aws/application_discovery_service.rb +92 -0
- data/lib/pwn/aws/auto_scaling.rb +92 -0
- data/lib/pwn/aws/batch.rb +92 -0
- data/lib/pwn/aws/budgets.rb +92 -0
- data/lib/pwn/aws/cloud_formation.rb +92 -0
- data/lib/pwn/aws/cloud_front.rb +92 -0
- data/lib/pwn/aws/cloud_hsm.rb +92 -0
- data/lib/pwn/aws/cloud_search.rb +92 -0
- data/lib/pwn/aws/cloud_search_domain.rb +92 -0
- data/lib/pwn/aws/cloud_trail.rb +92 -0
- data/lib/pwn/aws/cloud_watch.rb +92 -0
- data/lib/pwn/aws/cloud_watch_events.rb +92 -0
- data/lib/pwn/aws/cloud_watch_logs.rb +92 -0
- data/lib/pwn/aws/code_build.rb +92 -0
- data/lib/pwn/aws/code_commit.rb +92 -0
- data/lib/pwn/aws/code_deploy.rb +92 -0
- data/lib/pwn/aws/code_pipeline.rb +92 -0
- data/lib/pwn/aws/cognito_identity.rb +92 -0
- data/lib/pwn/aws/cognito_identity_provider.rb +92 -0
- data/lib/pwn/aws/cognito_sync.rb +92 -0
- data/lib/pwn/aws/config_service.rb +92 -0
- data/lib/pwn/aws/data_pipleline.rb +92 -0
- data/lib/pwn/aws/database_migration_service.rb +92 -0
- data/lib/pwn/aws/device_farm.rb +92 -0
- data/lib/pwn/aws/direct_connect.rb +92 -0
- data/lib/pwn/aws/directory_service.rb +92 -0
- data/lib/pwn/aws/dynamo_db.rb +92 -0
- data/lib/pwn/aws/dynamo_db_streams.rb +92 -0
- data/lib/pwn/aws/ec2.rb +92 -0
- data/lib/pwn/aws/ecr.rb +92 -0
- data/lib/pwn/aws/ecs.rb +92 -0
- data/lib/pwn/aws/efs.rb +92 -0
- data/lib/pwn/aws/elasti_cache.rb +92 -0
- data/lib/pwn/aws/elastic_beanstalk.rb +89 -0
- data/lib/pwn/aws/elastic_load_balancing.rb +92 -0
- data/lib/pwn/aws/elastic_load_balancing_v2.rb +92 -0
- data/lib/pwn/aws/elastic_transcoder.rb +92 -0
- data/lib/pwn/aws/elasticsearch_service.rb +92 -0
- data/lib/pwn/aws/emr.rb +92 -0
- data/lib/pwn/aws/firehose.rb +92 -0
- data/lib/pwn/aws/game_lift.rb +92 -0
- data/lib/pwn/aws/glacier.rb +92 -0
- data/lib/pwn/aws/health.rb +92 -0
- data/lib/pwn/aws/iam.rb +200 -0
- data/lib/pwn/aws/import_export.rb +92 -0
- data/lib/pwn/aws/inspector.rb +92 -0
- data/lib/pwn/aws/iot.rb +92 -0
- data/lib/pwn/aws/iot_data_plane.rb +92 -0
- data/lib/pwn/aws/kinesis.rb +92 -0
- data/lib/pwn/aws/kinesis_analytics.rb +92 -0
- data/lib/pwn/aws/kms.rb +92 -0
- data/lib/pwn/aws/lambda.rb +92 -0
- data/lib/pwn/aws/lambda_preview.rb +92 -0
- data/lib/pwn/aws/lex.rb +92 -0
- data/lib/pwn/aws/lightsail.rb +92 -0
- data/lib/pwn/aws/machine_learning.rb +92 -0
- data/lib/pwn/aws/marketplace_commerce_analytics.rb +92 -0
- data/lib/pwn/aws/marketplace_metering.rb +92 -0
- data/lib/pwn/aws/ops_works.rb +92 -0
- data/lib/pwn/aws/ops_works_cm.rb +92 -0
- data/lib/pwn/aws/pinpoint.rb +92 -0
- data/lib/pwn/aws/polly.rb +92 -0
- data/lib/pwn/aws/rds.rb +92 -0
- data/lib/pwn/aws/redshift.rb +92 -0
- data/lib/pwn/aws/rekognition.rb +92 -0
- data/lib/pwn/aws/route53.rb +92 -0
- data/lib/pwn/aws/route53_domains.rb +92 -0
- data/lib/pwn/aws/s3.rb +92 -0
- data/lib/pwn/aws/service_catalog.rb +92 -0
- data/lib/pwn/aws/ses.rb +92 -0
- data/lib/pwn/aws/shield.rb +92 -0
- data/lib/pwn/aws/simple_db.rb +92 -0
- data/lib/pwn/aws/sms.rb +92 -0
- data/lib/pwn/aws/snowball.rb +92 -0
- data/lib/pwn/aws/sns.rb +92 -0
- data/lib/pwn/aws/sqs.rb +92 -0
- data/lib/pwn/aws/ssm.rb +92 -0
- data/lib/pwn/aws/states.rb +92 -0
- data/lib/pwn/aws/storage_gateway.rb +92 -0
- data/lib/pwn/aws/sts.rb +63 -0
- data/lib/pwn/aws/support.rb +92 -0
- data/lib/pwn/aws/swf.rb +92 -0
- data/lib/pwn/aws/waf.rb +92 -0
- data/lib/pwn/aws/waf_regional.rb +92 -0
- data/lib/pwn/aws/workspaces.rb +92 -0
- data/lib/pwn/aws/x_ray.rb +92 -0
- data/lib/pwn/aws.rb +105 -0
- data/lib/pwn/banner/anon.rb +50 -0
- data/lib/pwn/banner/bubble.rb +42 -0
- data/lib/pwn/banner/cheshire.rb +58 -0
- data/lib/pwn/banner/code_cave.rb +1035 -0
- data/lib/pwn/banner/dont_panic.rb +52 -0
- data/lib/pwn/banner/f_society.rb +60 -0
- data/lib/pwn/banner/fork_bomb.rb +39 -0
- data/lib/pwn/banner/jmp_esp.rb +44 -0
- data/lib/pwn/banner/matrix.rb +206 -0
- data/lib/pwn/banner/ninja.rb +55 -0
- data/lib/pwn/banner/off_the_air.rb +73 -0
- data/lib/pwn/banner/pirate.rb +62 -0
- data/lib/pwn/banner/radare2.rb +41 -0
- data/lib/pwn/banner/radare2_ai.rb +116 -0
- data/lib/pwn/banner/white_rabbit.rb +55 -0
- data/lib/pwn/banner.rb +108 -0
- data/lib/pwn/blockchain/btc.rb +282 -0
- data/lib/pwn/blockchain/eth.rb +160 -0
- data/lib/pwn/blockchain.rb +17 -0
- data/lib/pwn/config.rb +304 -0
- data/lib/pwn/driver.rb +85 -0
- data/lib/pwn/ffi/stdio.rb +41 -0
- data/lib/pwn/ffi.rb +16 -0
- data/lib/pwn/plugins/android.rb +1617 -0
- data/lib/pwn/plugins/assembly.rb +275 -0
- data/lib/pwn/plugins/authentication_helper.rb +86 -0
- data/lib/pwn/plugins/baresip.rb +708 -0
- data/lib/pwn/plugins/basic_auth.rb +63 -0
- data/lib/pwn/plugins/beef.rb +312 -0
- data/lib/pwn/plugins/black_duck_binary_analysis.rb +790 -0
- data/lib/pwn/plugins/burp_suite.rb +2208 -0
- data/lib/pwn/plugins/bus_pirate.rb +147 -0
- data/lib/pwn/plugins/char.rb +474 -0
- data/lib/pwn/plugins/credit_card.rb +105 -0
- data/lib/pwn/plugins/dao_ldap.rb +131 -0
- data/lib/pwn/plugins/dao_mongo.rb +96 -0
- data/lib/pwn/plugins/dao_postgres.rb +224 -0
- data/lib/pwn/plugins/dao_sqlite3.rb +125 -0
- data/lib/pwn/plugins/defect_dojo.rb +841 -0
- data/lib/pwn/plugins/detect_os.rb +71 -0
- data/lib/pwn/plugins/ein.rb +141 -0
- data/lib/pwn/plugins/file_fu.rb +93 -0
- data/lib/pwn/plugins/fuzz.rb +204 -0
- data/lib/pwn/plugins/git.rb +159 -0
- data/lib/pwn/plugins/github.rb +137 -0
- data/lib/pwn/plugins/hacker_one.rb +154 -0
- data/lib/pwn/plugins/hunter.rb +160 -0
- data/lib/pwn/plugins/ip_info.rb +264 -0
- data/lib/pwn/plugins/irc.rb +312 -0
- data/lib/pwn/plugins/jenkins.rb +537 -0
- data/lib/pwn/plugins/jira_data_center.rb +676 -0
- data/lib/pwn/plugins/json_pathify.rb +46 -0
- data/lib/pwn/plugins/log.rb +123 -0
- data/lib/pwn/plugins/mail_agent.rb +344 -0
- data/lib/pwn/plugins/metasploit.rb +151 -0
- data/lib/pwn/plugins/monkey_patch.rb +182 -0
- data/lib/pwn/plugins/msr206.rb +1257 -0
- data/lib/pwn/plugins/nessus_cloud.rb +847 -0
- data/lib/pwn/plugins/nexpose_vuln_scan.rb +356 -0
- data/lib/pwn/plugins/nmap_it.rb +136 -0
- data/lib/pwn/plugins/oauth2.rb +67 -0
- data/lib/pwn/plugins/ocr.rb +43 -0
- data/lib/pwn/plugins/open_api.rb +896 -0
- data/lib/pwn/plugins/openvas.rb +314 -0
- data/lib/pwn/plugins/packet.rb +1313 -0
- data/lib/pwn/plugins/pdf_parse.rb +53 -0
- data/lib/pwn/plugins/pony.rb +281 -0
- data/lib/pwn/plugins/ps.rb +90 -0
- data/lib/pwn/plugins/pwn_logger.rb +64 -0
- data/lib/pwn/plugins/rabbit_mq.rb +70 -0
- data/lib/pwn/plugins/repl.rb +999 -0
- data/lib/pwn/plugins/scannable_codes.rb +87 -0
- data/lib/pwn/plugins/serial.rb +273 -0
- data/lib/pwn/plugins/shodan.rb +629 -0
- data/lib/pwn/plugins/slack_client.rb +104 -0
- data/lib/pwn/plugins/sock.rb +289 -0
- data/lib/pwn/plugins/spider.rb +78 -0
- data/lib/pwn/plugins/ssn.rb +52 -0
- data/lib/pwn/plugins/thread_pool.rb +80 -0
- data/lib/pwn/plugins/tor.rb +273 -0
- data/lib/pwn/plugins/transparent_browser.rb +1738 -0
- data/lib/pwn/plugins/twitter_api.rb +151 -0
- data/lib/pwn/plugins/uri_scheme.rb +328 -0
- data/lib/pwn/plugins/vault.rb +305 -0
- data/lib/pwn/plugins/vin.rb +361 -0
- data/lib/pwn/plugins/voice.rb +145 -0
- data/lib/pwn/plugins/vsphere.rb +81 -0
- data/lib/pwn/plugins/xxd.rb +298 -0
- data/lib/pwn/plugins/zaproxy.rb +837 -0
- data/lib/pwn/plugins.rb +81 -0
- data/lib/pwn/reports/fuzz.rb +328 -0
- data/lib/pwn/reports/html_footer.rb +160 -0
- data/lib/pwn/reports/html_header.rb +271 -0
- data/lib/pwn/reports/phone.rb +384 -0
- data/lib/pwn/reports/sast.rb +435 -0
- data/lib/pwn/reports/uri_buster.rb +335 -0
- data/lib/pwn/reports.rb +25 -0
- data/lib/pwn/sast/amqp_connect_as_guest.rb +78 -0
- data/lib/pwn/sast/apache_file_system_util_api.rb +76 -0
- data/lib/pwn/sast/aws.rb +77 -0
- data/lib/pwn/sast/banned_function_calls_c.rb +207 -0
- data/lib/pwn/sast/base64.rb +74 -0
- data/lib/pwn/sast/beef_hook.rb +75 -0
- data/lib/pwn/sast/cmd_execution_go_lang.rb +83 -0
- data/lib/pwn/sast/cmd_execution_java.rb +80 -0
- data/lib/pwn/sast/cmd_execution_python.rb +82 -0
- data/lib/pwn/sast/cmd_execution_ruby.rb +90 -0
- data/lib/pwn/sast/cmd_execution_scala.rb +80 -0
- data/lib/pwn/sast/csrf.rb +74 -0
- data/lib/pwn/sast/deserial_java.rb +85 -0
- data/lib/pwn/sast/emoticon.rb +82 -0
- data/lib/pwn/sast/eval.rb +76 -0
- data/lib/pwn/sast/factory.rb +79 -0
- data/lib/pwn/sast/http_authorization_header.rb +80 -0
- data/lib/pwn/sast/inner_html.rb +76 -0
- data/lib/pwn/sast/keystore.rb +75 -0
- data/lib/pwn/sast/local_storage.rb +77 -0
- data/lib/pwn/sast/location_hash.rb +76 -0
- data/lib/pwn/sast/log4j.rb +78 -0
- data/lib/pwn/sast/logger.rb +90 -0
- data/lib/pwn/sast/md5.rb +75 -0
- data/lib/pwn/sast/outer_html.rb +76 -0
- data/lib/pwn/sast/padding_oracle.rb +72 -0
- data/lib/pwn/sast/password.rb +75 -0
- data/lib/pwn/sast/php_input_mechanisms.rb +84 -0
- data/lib/pwn/sast/php_type_juggling.rb +82 -0
- data/lib/pwn/sast/pom_version.rb +164 -0
- data/lib/pwn/sast/port.rb +82 -0
- data/lib/pwn/sast/post_message.rb +76 -0
- data/lib/pwn/sast/private_key.rb +75 -0
- data/lib/pwn/sast/redirect.rb +77 -0
- data/lib/pwn/sast/redos.rb +82 -0
- data/lib/pwn/sast/shell.rb +83 -0
- data/lib/pwn/sast/signature.rb +75 -0
- data/lib/pwn/sast/sql.rb +85 -0
- data/lib/pwn/sast/ssl.rb +79 -0
- data/lib/pwn/sast/sudo.rb +75 -0
- data/lib/pwn/sast/task_tag.rb +89 -0
- data/lib/pwn/sast/test_case_engine.rb +189 -0
- data/lib/pwn/sast/throw_errors.rb +78 -0
- data/lib/pwn/sast/token.rb +77 -0
- data/lib/pwn/sast/type_script_type_juggling.rb +82 -0
- data/lib/pwn/sast/use_after_free.rb +82 -0
- data/lib/pwn/sast/version.rb +76 -0
- data/lib/pwn/sast/window_location_hash.rb +75 -0
- data/lib/pwn/sast.rb +67 -0
- data/lib/pwn/sdr/decoder/gsm.rb +231 -0
- data/lib/pwn/sdr/decoder.rb +19 -0
- data/lib/pwn/sdr/flipper_zero.rb +128 -0
- data/lib/pwn/sdr/frequency_allocation.rb +702 -0
- data/lib/pwn/sdr/gqrx.rb +655 -0
- data/lib/pwn/sdr/rfidler.rb +56 -0
- data/lib/pwn/sdr/son_micro_rfid.rb +773 -0
- data/lib/pwn/sdr.rb +21 -0
- data/lib/pwn/version.rb +5 -0
- data/lib/pwn/www/app_cobalt_io.rb +139 -0
- data/lib/pwn/www/bing.rb +88 -0
- data/lib/pwn/www/bug_crowd.rb +136 -0
- data/lib/pwn/www/checkip.rb +69 -0
- data/lib/pwn/www/coinbase_pro.rb +136 -0
- data/lib/pwn/www/duckduckgo.rb +114 -0
- data/lib/pwn/www/facebook.rb +124 -0
- data/lib/pwn/www/google.rb +114 -0
- data/lib/pwn/www/hacker_one.rb +649 -0
- data/lib/pwn/www/linkedin.rb +124 -0
- data/lib/pwn/www/pandora.rb +124 -0
- data/lib/pwn/www/pastebin.rb +84 -0
- data/lib/pwn/www/paypal.rb +208 -0
- data/lib/pwn/www/synack.rb +136 -0
- data/lib/pwn/www/torch.rb +107 -0
- data/lib/pwn/www/trading_view.rb +127 -0
- data/lib/pwn/www/twitter.rb +138 -0
- data/lib/pwn/www/uber.rb +124 -0
- data/lib/pwn/www/upwork.rb +124 -0
- data/lib/pwn/www/wayback_machine.rb +113 -0
- data/lib/pwn/www/youtube.rb +88 -0
- data/lib/pwn/www.rb +36 -0
- data/lib/pwn.rb +39 -0
- data/packer/daemons/msfrpcd.rb +64 -0
- data/packer/daemons/openvas.rb +51 -0
- data/packer/deploy_docker_containers.sh +9 -0
- data/packer/deploy_packer_box.sh +87 -0
- data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_prototyper.json +48 -0
- data/packer/docker/kali_rolling_docker_pwn_sast.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +46 -0
- data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +34 -0
- data/packer/http/kali_rolling_preseed.cfg +81 -0
- data/packer/kali_rolling_aws_ami.json +139 -0
- data/packer/kali_rolling_qemu_kvm.json +159 -0
- data/packer/kali_rolling_virtualbox.json +186 -0
- data/packer/kali_rolling_vmware.json +167 -0
- data/packer/packer_secrets.json.EXAMPLE +9 -0
- data/packer/provisioners/PayloadsAllTheThings.sh +5 -0
- data/packer/provisioners/SecLists.sh +5 -0
- data/packer/provisioners/afl.sh +28 -0
- data/packer/provisioners/aliases.rb +23 -0
- data/packer/provisioners/amass.sh +5 -0
- data/packer/provisioners/android.sh +18 -0
- data/packer/provisioners/ansible.sh +5 -0
- data/packer/provisioners/apache2.sh +24 -0
- data/packer/provisioners/arachni.sh +28 -0
- data/packer/provisioners/awscli.sh +5 -0
- data/packer/provisioners/bashrc.sh +13 -0
- data/packer/provisioners/beef.rb +23 -0
- data/packer/provisioners/burpsuite.sh +24 -0
- data/packer/provisioners/chrome.sh +11 -0
- data/packer/provisioners/coreutils.sh +6 -0
- data/packer/provisioners/curl.sh +6 -0
- data/packer/provisioners/docker.sh +43 -0
- data/packer/provisioners/docker_bashrc.sh +2 -0
- data/packer/provisioners/docker_rvm.sh +22 -0
- data/packer/provisioners/eyewitness.sh +5 -0
- data/packer/provisioners/ffmpeg.sh +6 -0
- data/packer/provisioners/firefox.sh +7 -0
- data/packer/provisioners/fuzzdb.sh +5 -0
- data/packer/provisioners/gdb.sh +5 -0
- data/packer/provisioners/geckodriver.sh +9 -0
- data/packer/provisioners/ghidra.sh +5 -0
- data/packer/provisioners/git.sh +6 -0
- data/packer/provisioners/init_image.sh +103 -0
- data/packer/provisioners/install_vagrant_ssh_key.sh +15 -0
- data/packer/provisioners/irc.sh +13 -0
- data/packer/provisioners/jenkins.sh +77 -0
- data/packer/provisioners/metasploit.rb +59 -0
- data/packer/provisioners/nmap.sh +5 -0
- data/packer/provisioners/openvas.sh +23 -0
- data/packer/provisioners/openvas_wrappers.sh +4 -0
- data/packer/provisioners/openvpn.sh +7 -0
- data/packer/provisioners/peda.sh +4 -0
- data/packer/provisioners/phantomjs.rb +28 -0
- data/packer/provisioners/phantomjs_wrapper.sh +22 -0
- data/packer/provisioners/post_install.sh +41 -0
- data/packer/provisioners/postgresql.sh +49 -0
- data/packer/provisioners/preeny.sh +8 -0
- data/packer/provisioners/pwn.sh +100 -0
- data/packer/provisioners/pwntools.sh +13 -0
- data/packer/provisioners/radamsa.sh +7 -0
- data/packer/provisioners/radare2.sh +29 -0
- data/packer/provisioners/rc.local.sh +16 -0
- data/packer/provisioners/reboot_os.sh +7 -0
- data/packer/provisioners/ruby.sh +35 -0
- data/packer/provisioners/rvm.sh +32 -0
- data/packer/provisioners/scapy.sh +5 -0
- data/packer/provisioners/scout2.sh +5 -0
- data/packer/provisioners/sox.sh +5 -0
- data/packer/provisioners/ssllabs-scan.sh +9 -0
- data/packer/provisioners/strace.sh +5 -0
- data/packer/provisioners/sublist3r.sh +5 -0
- data/packer/provisioners/terminator.sh +5 -0
- data/packer/provisioners/toggle_tor.sh +2 -0
- data/packer/provisioners/tor.sh +5 -0
- data/packer/provisioners/twinkle.sh +6 -0
- data/packer/provisioners/update_os.sh +108 -0
- data/packer/provisioners/upload_globals.sh +63 -0
- data/packer/provisioners/vim.sh +23 -0
- data/packer/provisioners/virtualbox_guest_additions.sh +20 -0
- data/packer/provisioners/vmware_tools.sh +8 -0
- data/packer/provisioners/wpscan.rb +23 -0
- data/packer/provisioners/xrdp.sh +23 -0
- data/packer/provisioners/zzuf.sh +5 -0
- data/pwn.gemspec +77 -0
- data/reinstall_pwn_gemset.sh +30 -0
- data/spec/lib/pwn/ai/grok_spec.rb +15 -0
- data/spec/lib/pwn/ai/introspection_spec.rb +15 -0
- data/spec/lib/pwn/ai/ollama_spec.rb +15 -0
- data/spec/lib/pwn/ai/open_ai_spec.rb +15 -0
- data/spec/lib/pwn/ai_spec.rb +10 -0
- data/spec/lib/pwn/aws/acm_spec.rb +15 -0
- data/spec/lib/pwn/aws/api_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/app_stream_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_discovery_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/batch_spec.rb +15 -0
- data/spec/lib/pwn/aws/budgets_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_formation_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_front_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_hsm_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_trail_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_build_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_commit_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_deploy_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_pipeline_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_sync_spec.rb +15 -0
- data/spec/lib/pwn/aws/config_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/data_pipleline_spec.rb +15 -0
- data/spec/lib/pwn/aws/database_migration_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/device_farm_spec.rb +15 -0
- data/spec/lib/pwn/aws/direct_connect_spec.rb +15 -0
- data/spec/lib/pwn/aws/directory_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +15 -0
- data/spec/lib/pwn/aws/ec2_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecr_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecs_spec.rb +15 -0
- data/spec/lib/pwn/aws/efs_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasti_cache_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/emr_spec.rb +15 -0
- data/spec/lib/pwn/aws/firehose_spec.rb +15 -0
- data/spec/lib/pwn/aws/game_lift_spec.rb +15 -0
- data/spec/lib/pwn/aws/glacier_spec.rb +15 -0
- data/spec/lib/pwn/aws/health_spec.rb +15 -0
- data/spec/lib/pwn/aws/iam_spec.rb +15 -0
- data/spec/lib/pwn/aws/import_export_spec.rb +15 -0
- data/spec/lib/pwn/aws/inspector_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_data_plane_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_spec.rb +15 -0
- data/spec/lib/pwn/aws/kms_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_preview_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_spec.rb +15 -0
- data/spec/lib/pwn/aws/lex_spec.rb +15 -0
- data/spec/lib/pwn/aws/lightsail_spec.rb +15 -0
- data/spec/lib/pwn/aws/machine_learning_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_metering_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_cm_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_spec.rb +15 -0
- data/spec/lib/pwn/aws/pinpoint_spec.rb +15 -0
- data/spec/lib/pwn/aws/polly_spec.rb +15 -0
- data/spec/lib/pwn/aws/rds_spec.rb +15 -0
- data/spec/lib/pwn/aws/redshift_spec.rb +15 -0
- data/spec/lib/pwn/aws/rekognition_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_domains_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_spec.rb +15 -0
- data/spec/lib/pwn/aws/s3_spec.rb +15 -0
- data/spec/lib/pwn/aws/service_catalog_spec.rb +15 -0
- data/spec/lib/pwn/aws/ses_spec.rb +15 -0
- data/spec/lib/pwn/aws/shield_spec.rb +15 -0
- data/spec/lib/pwn/aws/simple_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/sms_spec.rb +15 -0
- data/spec/lib/pwn/aws/snowball_spec.rb +15 -0
- data/spec/lib/pwn/aws/sns_spec.rb +15 -0
- data/spec/lib/pwn/aws/sqs_spec.rb +15 -0
- data/spec/lib/pwn/aws/ssm_spec.rb +15 -0
- data/spec/lib/pwn/aws/states_spec.rb +15 -0
- data/spec/lib/pwn/aws/storage_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/sts_spec.rb +15 -0
- data/spec/lib/pwn/aws/support_spec.rb +15 -0
- data/spec/lib/pwn/aws/swf_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_regional_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_spec.rb +15 -0
- data/spec/lib/pwn/aws/workspaces_spec.rb +15 -0
- data/spec/lib/pwn/aws/x_ray_spec.rb +15 -0
- data/spec/lib/pwn/aws_spec.rb +10 -0
- data/spec/lib/pwn/banner/anon_spec.rb +20 -0
- data/spec/lib/pwn/banner/bubble_spec.rb +20 -0
- data/spec/lib/pwn/banner/cheshire_spec.rb +20 -0
- data/spec/lib/pwn/banner/code_cave_spec.rb +20 -0
- data/spec/lib/pwn/banner/dont_panic_spec.rb +20 -0
- data/spec/lib/pwn/banner/f_society_spec.rb +20 -0
- data/spec/lib/pwn/banner/fork_bomb_spec.rb +20 -0
- data/spec/lib/pwn/banner/jmp_esp_spec.rb +20 -0
- data/spec/lib/pwn/banner/matrix_spec.rb +20 -0
- data/spec/lib/pwn/banner/ninja_spec.rb +20 -0
- data/spec/lib/pwn/banner/off_the_air_spec.rb +20 -0
- data/spec/lib/pwn/banner/pirate_spec.rb +20 -0
- data/spec/lib/pwn/banner/radare2_ai_spec.rb +20 -0
- data/spec/lib/pwn/banner/radare2_spec.rb +20 -0
- data/spec/lib/pwn/banner/white_rabbit_spec.rb +20 -0
- data/spec/lib/pwn/banner_spec.rb +15 -0
- data/spec/lib/pwn/blockchain/btc_spec.rb +15 -0
- data/spec/lib/pwn/blockchain/eth_spec.rb +15 -0
- data/spec/lib/pwn/blockchain_spec.rb +10 -0
- data/spec/lib/pwn/config_spec.rb +15 -0
- data/spec/lib/pwn/driver_spec.rb +15 -0
- data/spec/lib/pwn/ffi/stdio_spec.rb +15 -0
- data/spec/lib/pwn/ffi_spec.rb +10 -0
- data/spec/lib/pwn/plugins/android_spec.rb +15 -0
- data/spec/lib/pwn/plugins/assembly_spec.rb +15 -0
- data/spec/lib/pwn/plugins/authentication_helper_spec.rb +15 -0
- data/spec/lib/pwn/plugins/baresip_spec.rb +15 -0
- data/spec/lib/pwn/plugins/basic_auth_spec.rb +15 -0
- data/spec/lib/pwn/plugins/beef_spec.rb +15 -0
- data/spec/lib/pwn/plugins/black_duck_binary_analysis_spec.rb +15 -0
- data/spec/lib/pwn/plugins/burp_suite_spec.rb +15 -0
- data/spec/lib/pwn/plugins/bus_pirate_spec.rb +15 -0
- data/spec/lib/pwn/plugins/char_spec.rb +15 -0
- data/spec/lib/pwn/plugins/credit_card_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_ldap_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_mongo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_postgres_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +15 -0
- data/spec/lib/pwn/plugins/defect_dojo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/detect_os_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ein_spec.rb +15 -0
- data/spec/lib/pwn/plugins/file_fu_spec.rb +15 -0
- data/spec/lib/pwn/plugins/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/plugins/git_spec.rb +15 -0
- data/spec/lib/pwn/plugins/github_spec.rb +15 -0
- data/spec/lib/pwn/plugins/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/plugins/hunter_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ip_info_spec.rb +15 -0
- data/spec/lib/pwn/plugins/irc_spec.rb +15 -0
- data/spec/lib/pwn/plugins/jenkins_spec.rb +15 -0
- data/spec/lib/pwn/plugins/jira_data_center_spec.rb +15 -0
- data/spec/lib/pwn/plugins/json_pathify_spec.rb +15 -0
- data/spec/lib/pwn/plugins/log_spec.rb +15 -0
- data/spec/lib/pwn/plugins/mail_agent_spec.rb +15 -0
- data/spec/lib/pwn/plugins/metasploit_spec.rb +15 -0
- data/spec/lib/pwn/plugins/monkey_patch_spec.rb +15 -0
- data/spec/lib/pwn/plugins/msr206_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nmap_it_spec.rb +15 -0
- data/spec/lib/pwn/plugins/oauth2_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ocr_spec.rb +15 -0
- data/spec/lib/pwn/plugins/open_api_spec.rb +15 -0
- data/spec/lib/pwn/plugins/openvas_spec.rb +15 -0
- data/spec/lib/pwn/plugins/packet_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pdf_parse_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pony_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ps_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pwn_logger_spec.rb +15 -0
- data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +15 -0
- data/spec/lib/pwn/plugins/repl_spec.rb +15 -0
- data/spec/lib/pwn/plugins/scannable_codes_spec.rb +15 -0
- data/spec/lib/pwn/plugins/serial_spec.rb +15 -0
- data/spec/lib/pwn/plugins/shodan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/slack_client_spec.rb +15 -0
- data/spec/lib/pwn/plugins/sock_spec.rb +15 -0
- data/spec/lib/pwn/plugins/spider_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ssn_spec.rb +15 -0
- data/spec/lib/pwn/plugins/thread_pool_spec.rb +15 -0
- data/spec/lib/pwn/plugins/tor_spec.rb +15 -0
- data/spec/lib/pwn/plugins/transparent_browser_spec.rb +15 -0
- data/spec/lib/pwn/plugins/twitter_api_spec.rb +15 -0
- data/spec/lib/pwn/plugins/uri_scheme_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vault_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vin_spec.rb +15 -0
- data/spec/lib/pwn/plugins/voice_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vsphere_spec.rb +15 -0
- data/spec/lib/pwn/plugins/xxd_spec.rb +15 -0
- data/spec/lib/pwn/plugins/zaproxy_spec.rb +15 -0
- data/spec/lib/pwn/plugins_spec.rb +10 -0
- data/spec/lib/pwn/reports/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/reports/html_footer_spec.rb +15 -0
- data/spec/lib/pwn/reports/html_header_spec.rb +15 -0
- data/spec/lib/pwn/reports/phone_spec.rb +15 -0
- data/spec/lib/pwn/reports/sast_spec.rb +15 -0
- data/spec/lib/pwn/reports/uri_buster_spec.rb +15 -0
- data/spec/lib/pwn/reports_spec.rb +10 -0
- data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +25 -0
- data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +25 -0
- data/spec/lib/pwn/sast/aws_spec.rb +25 -0
- data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +25 -0
- data/spec/lib/pwn/sast/base64_spec.rb +25 -0
- data/spec/lib/pwn/sast/beef_hook_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_go_lang_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +25 -0
- data/spec/lib/pwn/sast/csrf_spec.rb +25 -0
- data/spec/lib/pwn/sast/deserial_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/emoticon_spec.rb +25 -0
- data/spec/lib/pwn/sast/eval_spec.rb +25 -0
- data/spec/lib/pwn/sast/factory_spec.rb +25 -0
- data/spec/lib/pwn/sast/http_authorization_header_spec.rb +25 -0
- data/spec/lib/pwn/sast/inner_html_spec.rb +25 -0
- data/spec/lib/pwn/sast/keystore_spec.rb +25 -0
- data/spec/lib/pwn/sast/local_storage_spec.rb +25 -0
- data/spec/lib/pwn/sast/location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast/log4j_spec.rb +25 -0
- data/spec/lib/pwn/sast/logger_spec.rb +25 -0
- data/spec/lib/pwn/sast/md5_spec.rb +25 -0
- data/spec/lib/pwn/sast/outer_html_spec.rb +25 -0
- data/spec/lib/pwn/sast/padding_oracle_spec.rb +25 -0
- data/spec/lib/pwn/sast/password_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_type_juggling_spec.rb +25 -0
- data/spec/lib/pwn/sast/pom_version_spec.rb +25 -0
- data/spec/lib/pwn/sast/port_spec.rb +25 -0
- data/spec/lib/pwn/sast/post_message_spec.rb +25 -0
- data/spec/lib/pwn/sast/private_key_spec.rb +25 -0
- data/spec/lib/pwn/sast/redirect_spec.rb +25 -0
- data/spec/lib/pwn/sast/redos_spec.rb +25 -0
- data/spec/lib/pwn/sast/shell_spec.rb +25 -0
- data/spec/lib/pwn/sast/signature_spec.rb +25 -0
- data/spec/lib/pwn/sast/sql_spec.rb +25 -0
- data/spec/lib/pwn/sast/ssl_spec.rb +25 -0
- data/spec/lib/pwn/sast/sudo_spec.rb +25 -0
- data/spec/lib/pwn/sast/task_tag_spec.rb +25 -0
- data/spec/lib/pwn/sast/test_case_engine_spec.rb +20 -0
- data/spec/lib/pwn/sast/throw_errors_spec.rb +25 -0
- data/spec/lib/pwn/sast/token_spec.rb +25 -0
- data/spec/lib/pwn/sast/type_script_type_juggling_spec.rb +25 -0
- data/spec/lib/pwn/sast/use_after_free_spec.rb +25 -0
- data/spec/lib/pwn/sast/version_spec.rb +25 -0
- data/spec/lib/pwn/sast/window_location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast_spec.rb +10 -0
- data/spec/lib/pwn/sdr/decoder/gsm_spec.rb +15 -0
- data/spec/lib/pwn/sdr/decoder_spec.rb +10 -0
- data/spec/lib/pwn/sdr/flipper_zero_spec.rb +15 -0
- data/spec/lib/pwn/sdr/frequency_allocation_spec.rb +15 -0
- data/spec/lib/pwn/sdr/gqrx_spec.rb +15 -0
- data/spec/lib/pwn/sdr/rfidler_spec.rb +15 -0
- data/spec/lib/pwn/sdr/son_micro_rfid_spec.rb +15 -0
- data/spec/lib/pwn/sdr_spec.rb +10 -0
- data/spec/lib/pwn/version_spec.rb +17 -0
- data/spec/lib/pwn/www/app_cobalt_io_spec.rb +15 -0
- data/spec/lib/pwn/www/bing_spec.rb +15 -0
- data/spec/lib/pwn/www/bug_crowd_spec.rb +15 -0
- data/spec/lib/pwn/www/checkip_spec.rb +15 -0
- data/spec/lib/pwn/www/coinbase_pro_spec.rb +15 -0
- data/spec/lib/pwn/www/duckduckgo_spec.rb +15 -0
- data/spec/lib/pwn/www/facebook_spec.rb +15 -0
- data/spec/lib/pwn/www/google_spec.rb +15 -0
- data/spec/lib/pwn/www/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/www/linkedin_spec.rb +15 -0
- data/spec/lib/pwn/www/pandora_spec.rb +15 -0
- data/spec/lib/pwn/www/pastebin_spec.rb +15 -0
- data/spec/lib/pwn/www/paypal_spec.rb +15 -0
- data/spec/lib/pwn/www/synack_spec.rb +15 -0
- data/spec/lib/pwn/www/torch_spec.rb +15 -0
- data/spec/lib/pwn/www/trading_view_spec.rb +15 -0
- data/spec/lib/pwn/www/twitter_spec.rb +15 -0
- data/spec/lib/pwn/www/uber_spec.rb +15 -0
- data/spec/lib/pwn/www/upwork_spec.rb +15 -0
- data/spec/lib/pwn/www/wayback_machine_spec.rb +15 -0
- data/spec/lib/pwn/www/youtube_spec.rb +15 -0
- data/spec/lib/pwn/www_spec.rb +10 -0
- data/spec/lib/pwn_spec.rb +10 -0
- data/spec/spec_helper.rb +3 -0
- data/third_party/.gitkeep +0 -0
- data/third_party/http-request-headers-fields-large.txt +1185 -0
- data/third_party/pwn_rdoc.jsonl +1445 -0
- data/third_party/r2-pwn-layout +1 -0
- data/update_pwn.sh +9 -0
- data/upgrade_ruby.sh +42 -0
- data/vagrant/provisioners/apache2.sh +76 -0
- data/vagrant/provisioners/beef.rb +30 -0
- data/vagrant/provisioners/burpsuite_pro.rb +37 -0
- data/vagrant/provisioners/exploit-db.sh +2 -0
- data/vagrant/provisioners/gem.sh +4 -0
- data/vagrant/provisioners/init_env.sh +22 -0
- data/vagrant/provisioners/jenkins.sh +87 -0
- data/vagrant/provisioners/jenkins_ssh-keygen.rb +86 -0
- data/vagrant/provisioners/kali_customize.rb +130 -0
- data/vagrant/provisioners/letsencrypt.rb +35 -0
- data/vagrant/provisioners/metasploit.rb +25 -0
- data/vagrant/provisioners/nmap_all_live_hosts.sh +2 -0
- data/vagrant/provisioners/openvas.sh +23 -0
- data/vagrant/provisioners/openvas_wrappers.sh +2 -0
- data/vagrant/provisioners/post_install.sh +14 -0
- data/vagrant/provisioners/postgres.sh +22 -0
- data/vagrant/provisioners/pwn.sh +13 -0
- data/vagrant/provisioners/rvm.sh +18 -0
- data/vagrant/provisioners/ssllabs-scan.sh +10 -0
- data/vagrant/provisioners/toggle_tor.sh +2 -0
- data/vagrant/provisioners/update_jenkins_plugins.rb +30 -0
- data/vagrant/provisioners/update_os.sh +108 -0
- data/vagrant/provisioners/upload_globals.sh +63 -0
- data/vagrant/provisioners/userland_fdisk.sh +22 -0
- data/vagrant/provisioners/userland_lvm.sh +5 -0
- data/vagrant/provisioners/wpscan.rb +25 -0
- data/vagrant_rsync_third_party.lst +1 -0
- data/vagrant_rsync_userland_template.lst +8 -0
- metadata +1112 -5
data/lib/pwn/ai/grok.rb
ADDED
|
@@ -0,0 +1,258 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'json'
|
|
4
|
+
require 'rest-client'
|
|
5
|
+
require 'tty-spinner'
|
|
6
|
+
|
|
7
|
+
module PWN
|
|
8
|
+
module AI
|
|
9
|
+
# This plugin interacts with xAI's Grok API, similar to the Grok plugin.
|
|
10
|
+
# It provides methods to list models, generate completions, and chat.
|
|
11
|
+
# API documentation: https://docs.x.ai/docs
|
|
12
|
+
# Obtain an API key from https://x.ai/api
|
|
13
|
+
module Grok
|
|
14
|
+
# Supported Method Parameters::
|
|
15
|
+
# grok_ai_rest_call(
|
|
16
|
+
# token: 'required - grok_ai bearer token',
|
|
17
|
+
# http_method: 'optional HTTP method (defaults to GET)
|
|
18
|
+
# base_uri: 'optional base grok api URI (defaults to https://api.x.ai/v1)',
|
|
19
|
+
# rest_call: 'required rest call to make per the schema',
|
|
20
|
+
# params: 'optional params passed in the URI or HTTP Headers',
|
|
21
|
+
# http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST',
|
|
22
|
+
# timeout: 'optional timeout in seconds (defaults to 180)',
|
|
23
|
+
# spinner: 'optional - display spinner (defaults to false)'
|
|
24
|
+
# )
|
|
25
|
+
|
|
26
|
+
private_class_method def self.grok_rest_call(opts = {})
|
|
27
|
+
engine = PWN::Env[:ai][:grok]
|
|
28
|
+
raise 'ERROR: Jira Server Hash not found in PWN::Env. Run i`pwn -Y default.yaml`, then `PWN::Env` for usage.' if engine.nil?
|
|
29
|
+
|
|
30
|
+
token = engine[:key] ||= PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Grok API Key')
|
|
31
|
+
|
|
32
|
+
http_method = if opts[:http_method].nil?
|
|
33
|
+
:get
|
|
34
|
+
else
|
|
35
|
+
opts[:http_method].to_s.scrub.to_sym
|
|
36
|
+
end
|
|
37
|
+
|
|
38
|
+
base_uri = engine[:base_uri] ||= 'https://api.x.ai/v1'
|
|
39
|
+
rest_call = opts[:rest_call].to_s.scrub
|
|
40
|
+
params = opts[:params]
|
|
41
|
+
headers = {
|
|
42
|
+
content_type: 'application/json; charset=UTF-8',
|
|
43
|
+
authorization: "Bearer #{token}"
|
|
44
|
+
}
|
|
45
|
+
|
|
46
|
+
http_body = opts[:http_body]
|
|
47
|
+
http_body ||= {}
|
|
48
|
+
|
|
49
|
+
timeout = opts[:timeout]
|
|
50
|
+
timeout ||= 180
|
|
51
|
+
|
|
52
|
+
spinner = opts[:spinner] || false
|
|
53
|
+
|
|
54
|
+
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)
|
|
55
|
+
rest_client = browser_obj[:browser]::Request
|
|
56
|
+
|
|
57
|
+
if spinner
|
|
58
|
+
spin = TTY::Spinner.new(format: :dots)
|
|
59
|
+
spin.auto_spin
|
|
60
|
+
end
|
|
61
|
+
|
|
62
|
+
retry_count = 0
|
|
63
|
+
begin
|
|
64
|
+
case http_method
|
|
65
|
+
when :delete, :get
|
|
66
|
+
headers[:params] = params
|
|
67
|
+
response = rest_client.execute(
|
|
68
|
+
method: http_method,
|
|
69
|
+
url: "#{base_uri}/#{rest_call}",
|
|
70
|
+
headers: headers,
|
|
71
|
+
verify_ssl: false,
|
|
72
|
+
timeout: timeout
|
|
73
|
+
)
|
|
74
|
+
|
|
75
|
+
when :post
|
|
76
|
+
if http_body.key?(:multipart)
|
|
77
|
+
headers[:content_type] = 'multipart/form-data'
|
|
78
|
+
|
|
79
|
+
response = rest_client.execute(
|
|
80
|
+
method: http_method,
|
|
81
|
+
url: "#{base_uri}/#{rest_call}",
|
|
82
|
+
headers: headers,
|
|
83
|
+
payload: http_body,
|
|
84
|
+
verify_ssl: false,
|
|
85
|
+
timeout: timeout
|
|
86
|
+
)
|
|
87
|
+
else
|
|
88
|
+
response = rest_client.execute(
|
|
89
|
+
method: http_method,
|
|
90
|
+
url: "#{base_uri}/#{rest_call}",
|
|
91
|
+
headers: headers,
|
|
92
|
+
payload: http_body.to_json,
|
|
93
|
+
verify_ssl: false,
|
|
94
|
+
timeout: timeout
|
|
95
|
+
)
|
|
96
|
+
end
|
|
97
|
+
else
|
|
98
|
+
raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
|
|
99
|
+
end
|
|
100
|
+
|
|
101
|
+
response
|
|
102
|
+
rescue RestClient::TooManyRequests => e
|
|
103
|
+
retry_after = e.response.headers[:retry_after]&.to_i ||= (0.5 * (retry_count + 1))
|
|
104
|
+
sleep(retry_after + rand(0.3..5.0))
|
|
105
|
+
retry_count += 1
|
|
106
|
+
|
|
107
|
+
retry
|
|
108
|
+
end
|
|
109
|
+
rescue RestClient::ExceptionWithResponse => e
|
|
110
|
+
puts "ERROR: #{e.message}: #{e.response}"
|
|
111
|
+
rescue StandardError => e
|
|
112
|
+
case e.message
|
|
113
|
+
when '400 Bad Request', '404 Resource Not Found'
|
|
114
|
+
"#{e.message}: #{e.response}"
|
|
115
|
+
else
|
|
116
|
+
raise e
|
|
117
|
+
end
|
|
118
|
+
ensure
|
|
119
|
+
spin.stop if spinner
|
|
120
|
+
end
|
|
121
|
+
|
|
122
|
+
# Supported Method Parameters::
|
|
123
|
+
# models = PWN::AI::Grok.get_models
|
|
124
|
+
|
|
125
|
+
public_class_method def self.get_models
|
|
126
|
+
models = grok_rest_call(rest_call: 'models')
|
|
127
|
+
|
|
128
|
+
JSON.parse(models, symbolize_names: true)[:data]
|
|
129
|
+
rescue StandardError => e
|
|
130
|
+
raise e
|
|
131
|
+
end
|
|
132
|
+
|
|
133
|
+
# Supported Method Parameters::
|
|
134
|
+
# response = PWN::AI::Grok.chat(
|
|
135
|
+
# request: 'required - message to Grok'
|
|
136
|
+
# model: 'optional - model to use for text generation (defaults to PWN::Env[:ai][:grok][:model])',
|
|
137
|
+
# temp: 'optional - creative response float (deafults to PWN::Env[:ai][:grok][:temp])',
|
|
138
|
+
# system_role_content: 'optional - context to set up the model behavior for conversation (Default: PWN::Env[:ai][:grok][:system_role_content])',
|
|
139
|
+
# response_history: 'optional - pass response back in to have a conversation',
|
|
140
|
+
# speak_answer: 'optional speak answer using PWN::Plugins::Voice.text_to_speech (Default: nil)',
|
|
141
|
+
# timeout: 'optional timeout in seconds (defaults to 300)',
|
|
142
|
+
# spinner: 'optional - display spinner (defaults to false)'
|
|
143
|
+
# )
|
|
144
|
+
|
|
145
|
+
public_class_method def self.chat(opts = {})
|
|
146
|
+
engine = PWN::Env[:ai][:grok]
|
|
147
|
+
request = opts[:request]
|
|
148
|
+
max_prompt_length = engine[:max_prompt_length] ||= 256_000
|
|
149
|
+
request_trunc_idx = ((max_prompt_length - 1) / 3.36).floor
|
|
150
|
+
request = request[0..request_trunc_idx]
|
|
151
|
+
|
|
152
|
+
model = opts[:model] ||= engine[:model]
|
|
153
|
+
raise 'ERROR: Model is required. Call #get_models method for details' if model.nil?
|
|
154
|
+
|
|
155
|
+
temp = opts[:temp].to_f ||= engine[:temp].to_f
|
|
156
|
+
temp = 1 if temp.zero?
|
|
157
|
+
|
|
158
|
+
rest_call = 'chat/completions'
|
|
159
|
+
|
|
160
|
+
response_history = opts[:response_history]
|
|
161
|
+
|
|
162
|
+
max_tokens = response_history[:usage][:total_tokens] unless response_history.nil?
|
|
163
|
+
|
|
164
|
+
system_role_content = opts[:system_role_content] ||= engine[:system_role_content]
|
|
165
|
+
system_role_content = response_history[:choices].first[:content] if response_history
|
|
166
|
+
|
|
167
|
+
system_role = {
|
|
168
|
+
role: 'system',
|
|
169
|
+
content: system_role_content
|
|
170
|
+
}
|
|
171
|
+
|
|
172
|
+
user_role = {
|
|
173
|
+
role: 'user',
|
|
174
|
+
content: request
|
|
175
|
+
}
|
|
176
|
+
|
|
177
|
+
response_history ||= { choices: [system_role] }
|
|
178
|
+
choices_len = response_history[:choices].length
|
|
179
|
+
|
|
180
|
+
http_body = {
|
|
181
|
+
model: model,
|
|
182
|
+
messages: [system_role],
|
|
183
|
+
temperature: temp,
|
|
184
|
+
stream: false
|
|
185
|
+
}
|
|
186
|
+
|
|
187
|
+
if response_history[:choices].length > 1
|
|
188
|
+
response_history[:choices][1..-1].each do |message|
|
|
189
|
+
http_body[:messages].push(message)
|
|
190
|
+
end
|
|
191
|
+
end
|
|
192
|
+
|
|
193
|
+
http_body[:messages].push(user_role)
|
|
194
|
+
|
|
195
|
+
timeout = opts[:timeout]
|
|
196
|
+
spinner = opts[:spinner]
|
|
197
|
+
|
|
198
|
+
response = grok_rest_call(
|
|
199
|
+
http_method: :post,
|
|
200
|
+
rest_call: rest_call,
|
|
201
|
+
http_body: http_body,
|
|
202
|
+
timeout: timeout,
|
|
203
|
+
spinner: spinner
|
|
204
|
+
)
|
|
205
|
+
|
|
206
|
+
json_resp = JSON.parse(response, symbolize_names: true)
|
|
207
|
+
assistant_resp = json_resp[:choices].first[:message]
|
|
208
|
+
json_resp[:choices] = http_body[:messages]
|
|
209
|
+
json_resp[:choices].push(assistant_resp)
|
|
210
|
+
|
|
211
|
+
speak_answer = true if opts[:speak_answer]
|
|
212
|
+
|
|
213
|
+
if speak_answer
|
|
214
|
+
answer = assistant_resp[:content]
|
|
215
|
+
text_path = "/tmp/#{SecureRandom.hex}.pwn_voice"
|
|
216
|
+
# answer = json_resp[:choices].last[:text]
|
|
217
|
+
# answer = json_resp[:choices].last[:content] if gpt
|
|
218
|
+
File.write(text_path, answer)
|
|
219
|
+
PWN::Plugins::Voice.text_to_speech(text_path: text_path)
|
|
220
|
+
File.unlink(text_path)
|
|
221
|
+
end
|
|
222
|
+
|
|
223
|
+
json_resp
|
|
224
|
+
rescue StandardError => e
|
|
225
|
+
raise e
|
|
226
|
+
end
|
|
227
|
+
|
|
228
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
229
|
+
|
|
230
|
+
public_class_method def self.authors
|
|
231
|
+
"AUTHOR(S):
|
|
232
|
+
0day Inc. <support@0dayinc.com>
|
|
233
|
+
"
|
|
234
|
+
end
|
|
235
|
+
|
|
236
|
+
# Display Usage for this Module
|
|
237
|
+
|
|
238
|
+
public_class_method def self.help
|
|
239
|
+
puts "USAGE:
|
|
240
|
+
models = #{self}.get_models
|
|
241
|
+
|
|
242
|
+
response = #{self}.chat(
|
|
243
|
+
request: 'required - message to Grok',
|
|
244
|
+
model: 'optional - model to use for text generation (defaults to PWN::Env[:ai][:grok][:model])',
|
|
245
|
+
temp: 'optional - creative response float (defaults to PWN::Env[:ai][:grok][:temp])',
|
|
246
|
+
system_role_content: 'optional - context to set up the model behavior for conversation (Default: PWN::Env[:ai][:grok][:system_role_content])',
|
|
247
|
+
response_history: 'optional - pass response back in to have a conversation',
|
|
248
|
+
speak_answer: 'optional speak answer using PWN::Plugins::Voice.text_to_speech (Default: nil)',
|
|
249
|
+
timeout: 'optional - timeout in seconds (defaults to 300)'.
|
|
250
|
+
spinner: 'optional - display spinner (defaults to false)'
|
|
251
|
+
)
|
|
252
|
+
|
|
253
|
+
#{self}.authors
|
|
254
|
+
"
|
|
255
|
+
end
|
|
256
|
+
end
|
|
257
|
+
end
|
|
258
|
+
end
|
|
@@ -0,0 +1,100 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'json'
|
|
4
|
+
require 'rest-client'
|
|
5
|
+
|
|
6
|
+
module PWN
|
|
7
|
+
module AI
|
|
8
|
+
# This plugin interacts with PWN::Env's `ai` data structure
|
|
9
|
+
# when `PWN::Env[:ai][:introspection]` is set to `true`.
|
|
10
|
+
module Introspection
|
|
11
|
+
# Supported Method Parameters::
|
|
12
|
+
# response = PWN::AI::Introspection.reflect_on(
|
|
13
|
+
# request: 'required - String - What you want the AI to reflect on',
|
|
14
|
+
# system_role_content: 'optional - context to set up the model behavior for reflection',
|
|
15
|
+
# spinner: 'optional - Boolean - Display spinner during operation (default: false)',
|
|
16
|
+
# suppress_pii_warning: 'optional - Boolean - Suppress PII Warnings (default: false)'
|
|
17
|
+
# )
|
|
18
|
+
|
|
19
|
+
public_class_method def self.reflect_on(opts = {})
|
|
20
|
+
request = opts[:request]
|
|
21
|
+
raise 'ERROR: request must be provided' if request.nil?
|
|
22
|
+
|
|
23
|
+
system_role_content = opts[:system_role_content]
|
|
24
|
+
|
|
25
|
+
spinner = opts[:spinner] || false
|
|
26
|
+
|
|
27
|
+
suppress_pii_warning = opts[:suppress_pii_warning] || false
|
|
28
|
+
|
|
29
|
+
response = nil
|
|
30
|
+
|
|
31
|
+
ai_introspection = PWN::Env[:ai][:introspection]
|
|
32
|
+
|
|
33
|
+
if ai_introspection && request.length.positive?
|
|
34
|
+
valid_ai_engines = PWN::AI.help.reject { |e| e.downcase == :introspection }.map(&:downcase)
|
|
35
|
+
engine = PWN::Env[:ai][:active].to_s.downcase.to_sym
|
|
36
|
+
raise "ERROR: Unsupported AI engine. Supported engines are: #{valid_ai_engines}" unless valid_ai_engines.include?(engine)
|
|
37
|
+
|
|
38
|
+
puts "WARNING: AI Introspection is enabled. Ensure #{engine} has been authorized for use and/or requests are sanitized properly." unless suppress_pii_warning
|
|
39
|
+
case engine
|
|
40
|
+
when :grok
|
|
41
|
+
response = PWN::AI::Grok.chat(
|
|
42
|
+
request: request.chomp,
|
|
43
|
+
system_role_content: system_role_content,
|
|
44
|
+
spinner: spinner
|
|
45
|
+
)
|
|
46
|
+
response = response[:choices].last[:content] if response.is_a?(Hash) &&
|
|
47
|
+
response.key?(:choices) &&
|
|
48
|
+
response[:choices].last.keys.include?(:content)
|
|
49
|
+
when :ollama
|
|
50
|
+
response = PWN::AI::Ollama.chat(
|
|
51
|
+
request: request.chomp,
|
|
52
|
+
system_role_content: system_role_content,
|
|
53
|
+
spinner: spinner
|
|
54
|
+
)
|
|
55
|
+
response = response[:choices].last[:content] if response.is_a?(Hash) &&
|
|
56
|
+
response.key?(:choices) &&
|
|
57
|
+
response[:choices].last.keys.include?(:content)
|
|
58
|
+
when :openai
|
|
59
|
+
response = PWN::AI::OpenAI.chat(
|
|
60
|
+
request: request.chomp,
|
|
61
|
+
system_role_content: system_role_content,
|
|
62
|
+
spinner: spinner
|
|
63
|
+
)
|
|
64
|
+
if response.is_a?(Hash) && response.key?(:choices)
|
|
65
|
+
response = response[:choices].last[:text] if response[:choices].last.keys.include?(:text)
|
|
66
|
+
response = response[:choices].last[:content] if response[:choices].last.keys.include?(:content)
|
|
67
|
+
end
|
|
68
|
+
end
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
response
|
|
72
|
+
rescue StandardError => e
|
|
73
|
+
raise e
|
|
74
|
+
end
|
|
75
|
+
|
|
76
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
77
|
+
|
|
78
|
+
public_class_method def self.authors
|
|
79
|
+
"AUTHOR(S):
|
|
80
|
+
0day Inc. <support@0dayinc.com>
|
|
81
|
+
"
|
|
82
|
+
end
|
|
83
|
+
|
|
84
|
+
# Display Usage for this Module
|
|
85
|
+
|
|
86
|
+
public_class_method def self.help
|
|
87
|
+
puts "USAGE:
|
|
88
|
+
#{self}.reflect_on(
|
|
89
|
+
request: 'required - String - What you want the AI to reflect on',
|
|
90
|
+
system_role_content: 'optional - context to set up the model behavior for reflection',
|
|
91
|
+
spinner: 'optional - Boolean - Display spinner during operation (default: false)',
|
|
92
|
+
suppress_pii_warning: 'optional - Boolean - Suppress PII Warnings (default: false)'
|
|
93
|
+
)
|
|
94
|
+
|
|
95
|
+
#{self}.authors
|
|
96
|
+
"
|
|
97
|
+
end
|
|
98
|
+
end
|
|
99
|
+
end
|
|
100
|
+
end
|
|
@@ -0,0 +1,260 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'json'
|
|
4
|
+
require 'base64'
|
|
5
|
+
require 'securerandom'
|
|
6
|
+
require 'tty-spinner'
|
|
7
|
+
|
|
8
|
+
module PWN
|
|
9
|
+
module AI
|
|
10
|
+
# This plugin is used for interacting w/ Ollama's REST API using
|
|
11
|
+
# the 'rest' browser type of PWN::Plugins::TransparentBrowser.
|
|
12
|
+
# This is based on the following Ollama API Specification:
|
|
13
|
+
# https://api.openai.com/v1
|
|
14
|
+
module Ollama
|
|
15
|
+
# Supported Method Parameters::
|
|
16
|
+
# ollama_rest_call(
|
|
17
|
+
# base_uri: 'required - base URI for the Ollama API',
|
|
18
|
+
# token: 'required - ollama bearer token',
|
|
19
|
+
# http_method: 'optional HTTP method (defaults to GET)
|
|
20
|
+
# rest_call: 'required rest call to make per the schema',
|
|
21
|
+
# params: 'optional params passed in the URI or HTTP Headers',
|
|
22
|
+
# http_body: 'optional HTTP body sent in HTTP methods that support it e.g. POST',
|
|
23
|
+
# timeout: 'optional timeout in seconds (defaults to 300)',
|
|
24
|
+
# spinner: 'optional - display spinner (defaults to false)'
|
|
25
|
+
# )
|
|
26
|
+
|
|
27
|
+
private_class_method def self.ollama_rest_call(opts = {})
|
|
28
|
+
engine = PWN::Env[:ai][:ollama]
|
|
29
|
+
raise 'ERROR: Jira Server Hash not found in PWN::Env. Run i`pwn -Y default.yaml`, then `PWN::Env` for usage.' if engine.nil?
|
|
30
|
+
|
|
31
|
+
base_uri = engine[:base_uri]
|
|
32
|
+
raise 'ERROR: base_uri must be provided in PWN::Env[:ai][:ollama][:base_uri]' if base_uri.nil?
|
|
33
|
+
|
|
34
|
+
token = engine[:key] ||= PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Ollama (i.e. OpenAPI) Key')
|
|
35
|
+
http_method = if opts[:http_method].nil?
|
|
36
|
+
:get
|
|
37
|
+
else
|
|
38
|
+
opts[:http_method].to_s.scrub.to_sym
|
|
39
|
+
end
|
|
40
|
+
rest_call = opts[:rest_call].to_s.scrub
|
|
41
|
+
params = opts[:params]
|
|
42
|
+
|
|
43
|
+
headers = {
|
|
44
|
+
content_type: 'application/json; charset=UTF-8',
|
|
45
|
+
authorization: "Bearer #{token}"
|
|
46
|
+
}
|
|
47
|
+
|
|
48
|
+
http_body = opts[:http_body]
|
|
49
|
+
http_body ||= {}
|
|
50
|
+
|
|
51
|
+
timeout = opts[:timeout]
|
|
52
|
+
timeout ||= 300
|
|
53
|
+
|
|
54
|
+
spinner = opts[:spinner] || false
|
|
55
|
+
|
|
56
|
+
browser_obj = PWN::Plugins::TransparentBrowser.open(browser_type: :rest)
|
|
57
|
+
rest_client = browser_obj[:browser]::Request
|
|
58
|
+
|
|
59
|
+
if spinner
|
|
60
|
+
spin = TTY::Spinner.new(format: :dots)
|
|
61
|
+
spin.auto_spin
|
|
62
|
+
end
|
|
63
|
+
|
|
64
|
+
retry_count = 0
|
|
65
|
+
begin
|
|
66
|
+
case http_method
|
|
67
|
+
when :delete, :get
|
|
68
|
+
headers[:params] = params
|
|
69
|
+
response = rest_client.execute(
|
|
70
|
+
method: http_method,
|
|
71
|
+
url: "#{base_uri}/#{rest_call}",
|
|
72
|
+
headers: headers,
|
|
73
|
+
verify_ssl: false,
|
|
74
|
+
timeout: timeout
|
|
75
|
+
)
|
|
76
|
+
|
|
77
|
+
when :post
|
|
78
|
+
if http_body.key?(:multipart)
|
|
79
|
+
headers[:content_type] = 'multipart/form-data'
|
|
80
|
+
|
|
81
|
+
response = rest_client.execute(
|
|
82
|
+
method: http_method,
|
|
83
|
+
url: "#{base_uri}/#{rest_call}",
|
|
84
|
+
headers: headers,
|
|
85
|
+
payload: http_body,
|
|
86
|
+
verify_ssl: false,
|
|
87
|
+
timeout: timeout
|
|
88
|
+
)
|
|
89
|
+
else
|
|
90
|
+
response = rest_client.execute(
|
|
91
|
+
method: http_method,
|
|
92
|
+
url: "#{base_uri}/#{rest_call}",
|
|
93
|
+
headers: headers,
|
|
94
|
+
payload: http_body.to_json,
|
|
95
|
+
verify_ssl: false,
|
|
96
|
+
timeout: timeout
|
|
97
|
+
)
|
|
98
|
+
end
|
|
99
|
+
|
|
100
|
+
else
|
|
101
|
+
raise @@logger.error("Unsupported HTTP Method #{http_method} for #{self} Plugin")
|
|
102
|
+
end
|
|
103
|
+
response
|
|
104
|
+
rescue RestClient::TooManyRequests => e
|
|
105
|
+
retry_after = e.response.headers[:retry_after]&.to_i ||= (0.5 * (retry_count + 1))
|
|
106
|
+
sleep(retry_after + rand(0.3..5.0))
|
|
107
|
+
retry_count += 1
|
|
108
|
+
|
|
109
|
+
retry
|
|
110
|
+
end
|
|
111
|
+
rescue RestClient::ExceptionWithResponse => e
|
|
112
|
+
puts "ERROR: #{e.message}: #{e.response}"
|
|
113
|
+
rescue StandardError => e
|
|
114
|
+
case e.message
|
|
115
|
+
when '400 Bad Request', '404 Resource Not Found'
|
|
116
|
+
"#{e.message}: #{e.response}"
|
|
117
|
+
else
|
|
118
|
+
raise e
|
|
119
|
+
end
|
|
120
|
+
ensure
|
|
121
|
+
spin.stop if spinner
|
|
122
|
+
end
|
|
123
|
+
|
|
124
|
+
# Supported Method Parameters::
|
|
125
|
+
# response = PWN::AI::Ollama.get_models
|
|
126
|
+
|
|
127
|
+
public_class_method def self.get_models
|
|
128
|
+
models = ollama_rest_call(rest_call: 'ollama/api/tags')
|
|
129
|
+
|
|
130
|
+
JSON.parse(models, symbolize_names: true)[:models]
|
|
131
|
+
rescue StandardError => e
|
|
132
|
+
raise e
|
|
133
|
+
end
|
|
134
|
+
|
|
135
|
+
# Supported Method Parameters::
|
|
136
|
+
# response = PWN::AI::Ollama.chat(
|
|
137
|
+
# request: 'required - message to Ollama'
|
|
138
|
+
# model: 'optional - model to use for text generation (defaults to PWN::Env[:ai][:ollama][:model])',
|
|
139
|
+
# temp: 'optional - creative response float (deafults to PWN::Env[:ai][:ollama][:temp])',
|
|
140
|
+
# system_role_content: 'optional - context to set up the model behavior for conversation (Default: PWN::Env[:ai][:ollama][:system_role_content])',
|
|
141
|
+
# response_history: 'optional - pass response back in to have a conversation',
|
|
142
|
+
# speak_answer: 'optional speak answer using PWN::Plugins::Voice.text_to_speech (Default: nil)',
|
|
143
|
+
# timeout: 'optional timeout in seconds (defaults to 300)',
|
|
144
|
+
# spinner: 'optional - display spinner (defaults to false)'
|
|
145
|
+
# )
|
|
146
|
+
|
|
147
|
+
public_class_method def self.chat(opts = {})
|
|
148
|
+
engine = PWN::Env[:ai][:ollama]
|
|
149
|
+
request = opts[:request]
|
|
150
|
+
max_prompt_length = engine[:max_prompt_length] ||= 1_000_000
|
|
151
|
+
request_trunc_idx = ((max_prompt_length - 1) / 3.36).floor
|
|
152
|
+
request = request[0..request_trunc_idx]
|
|
153
|
+
|
|
154
|
+
model = opts[:model] ||= engine[:model]
|
|
155
|
+
raise 'ERROR: Model is required. Call #get_models method for details' if model.nil?
|
|
156
|
+
|
|
157
|
+
temp = opts[:temp].to_f ||= engine[:temp].to_f
|
|
158
|
+
temp = 1 if temp.zero?
|
|
159
|
+
|
|
160
|
+
rest_call = 'ollama/v1/chat/completions'
|
|
161
|
+
|
|
162
|
+
response_history = opts[:response_history]
|
|
163
|
+
|
|
164
|
+
max_tokens = response_history[:usage][:total_tokens] unless response_history.nil?
|
|
165
|
+
|
|
166
|
+
system_role_content = opts[:system_role_content] ||= engine[:system_role_content]
|
|
167
|
+
system_role_content = response_history[:choices].first[:content] if response_history
|
|
168
|
+
|
|
169
|
+
system_role = {
|
|
170
|
+
role: 'system',
|
|
171
|
+
content: system_role_content
|
|
172
|
+
}
|
|
173
|
+
|
|
174
|
+
user_role = {
|
|
175
|
+
role: 'user',
|
|
176
|
+
content: request
|
|
177
|
+
}
|
|
178
|
+
|
|
179
|
+
response_history ||= { choices: [system_role] }
|
|
180
|
+
choices_len = response_history[:choices].length
|
|
181
|
+
|
|
182
|
+
http_body = {
|
|
183
|
+
model: model,
|
|
184
|
+
messages: [system_role],
|
|
185
|
+
temperature: temp,
|
|
186
|
+
stream: false
|
|
187
|
+
}
|
|
188
|
+
|
|
189
|
+
if response_history[:choices].length > 1
|
|
190
|
+
response_history[:choices][1..-1].each do |message|
|
|
191
|
+
http_body[:messages].push(message)
|
|
192
|
+
end
|
|
193
|
+
end
|
|
194
|
+
|
|
195
|
+
http_body[:messages].push(user_role)
|
|
196
|
+
|
|
197
|
+
timeout = opts[:timeout]
|
|
198
|
+
spinner = opts[:spinner]
|
|
199
|
+
|
|
200
|
+
response = ollama_rest_call(
|
|
201
|
+
http_method: :post,
|
|
202
|
+
rest_call: rest_call,
|
|
203
|
+
http_body: http_body,
|
|
204
|
+
timeout: timeout,
|
|
205
|
+
spinner: spinner
|
|
206
|
+
)
|
|
207
|
+
|
|
208
|
+
json_resp = JSON.parse(response, symbolize_names: true)
|
|
209
|
+
assistant_resp = json_resp[:choices].first[:message]
|
|
210
|
+
json_resp[:choices] = http_body[:messages]
|
|
211
|
+
json_resp[:choices].push(assistant_resp)
|
|
212
|
+
|
|
213
|
+
speak_answer = true if opts[:speak_answer]
|
|
214
|
+
|
|
215
|
+
if speak_answer
|
|
216
|
+
answer = assistant_resp[:content]
|
|
217
|
+
text_path = "/tmp/#{SecureRandom.hex}.pwn_voice"
|
|
218
|
+
# answer = json_resp[:choices].last[:text]
|
|
219
|
+
# answer = json_resp[:choices].last[:content] if gpt
|
|
220
|
+
File.write(text_path, answer)
|
|
221
|
+
PWN::Plugins::Voice.text_to_speech(text_path: text_path)
|
|
222
|
+
File.unlink(text_path)
|
|
223
|
+
end
|
|
224
|
+
|
|
225
|
+
json_resp
|
|
226
|
+
rescue StandardError => e
|
|
227
|
+
raise e
|
|
228
|
+
end
|
|
229
|
+
|
|
230
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
231
|
+
|
|
232
|
+
public_class_method def self.authors
|
|
233
|
+
"AUTHOR(S):
|
|
234
|
+
0day Inc. <support@0dayinc.com>
|
|
235
|
+
"
|
|
236
|
+
end
|
|
237
|
+
|
|
238
|
+
# Display Usage for this Module
|
|
239
|
+
|
|
240
|
+
public_class_method def self.help
|
|
241
|
+
puts "USAGE:
|
|
242
|
+
models = #{self}.get_models
|
|
243
|
+
|
|
244
|
+
response = #{self}.chat(
|
|
245
|
+
request: 'required - message to Ollama',
|
|
246
|
+
model: 'optional - model to use for text generation (defaults to PWN::Env[:ai][:ollama][:model])',
|
|
247
|
+
temp: 'optional - creative response float (defaults to PWN::Env[:ai][:ollama][:temp])',
|
|
248
|
+
system_role_content: 'optional - context to set up the model behavior for conversation (Default: PWN::Env[:ai][:ollama][:system_role_content])',
|
|
249
|
+
response_history: 'optional - pass response back in to have a conversation',
|
|
250
|
+
speak_answer: 'optional speak answer using PWN::Plugins::Voice.text_to_speech (Default: nil)',
|
|
251
|
+
timeout: 'optional - timeout in seconds (defaults to 300)',
|
|
252
|
+
spinner: 'optional - display spinner (defaults to false)'
|
|
253
|
+
)
|
|
254
|
+
|
|
255
|
+
#{self}.authors
|
|
256
|
+
"
|
|
257
|
+
end
|
|
258
|
+
end
|
|
259
|
+
end
|
|
260
|
+
end
|