pwn 0.5.509 → 0.5.510
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/FUNDING.yml +1 -0
- data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
- data/.gitignore +65 -0
- data/.rubocop.yml +35 -0
- data/.rubocop_todo.yml +178 -0
- data/.ruby-gemset +1 -0
- data/.ruby-version +1 -0
- data/.travis.yml +24 -0
- data/CHANGELOG_BETWEEN_TAGS.txt +185 -0
- data/CODE_OF_CONDUCT.md +46 -0
- data/CONTRIBUTING.md +13 -0
- data/Gemfile +107 -0
- data/LICENSE.txt +22 -0
- data/README.md +100 -0
- data/Rakefile +20 -0
- data/Vagrantfile +250 -0
- data/bin/pwn +30 -0
- data/bin/pwn_android_war_dialer +151 -0
- data/bin/pwn_autoinc_version +58 -0
- data/bin/pwn_aws_describe_resources +717 -0
- data/bin/pwn_bdba_groups +107 -0
- data/bin/pwn_bdba_scan +198 -0
- data/bin/pwn_burp_suite_pro_active_rest_api_scan +167 -0
- data/bin/pwn_burp_suite_pro_active_scan +132 -0
- data/bin/pwn_char_base64_encoding +15 -0
- data/bin/pwn_char_dec_encoding +14 -0
- data/bin/pwn_char_hex_escaped_encoding +17 -0
- data/bin/pwn_char_html_entity_encoding +15 -0
- data/bin/pwn_char_unicode_escaped_encoding +14 -0
- data/bin/pwn_char_url_encoding +15 -0
- data/bin/pwn_crt_sh +73 -0
- data/bin/pwn_defectdojo_engagement_create +148 -0
- data/bin/pwn_defectdojo_importscan +130 -0
- data/bin/pwn_defectdojo_reimportscan +118 -0
- data/bin/pwn_diff_csv_files_w_column_exclude +171 -0
- data/bin/pwn_domain_reversewhois +76 -0
- data/bin/pwn_fuzz_net_app_proto +170 -0
- data/bin/pwn_gqrx_scanner +196 -0
- data/bin/pwn_jenkins_create_job +58 -0
- data/bin/pwn_jenkins_create_view +58 -0
- data/bin/pwn_jenkins_install_plugin +83 -0
- data/bin/pwn_jenkins_thinBackup_aws_s3 +113 -0
- data/bin/pwn_jenkins_update_plugins +77 -0
- data/bin/pwn_jenkins_useradd +76 -0
- data/bin/pwn_mail_agent +114 -0
- data/bin/pwn_msf_postgres_login +28 -0
- data/bin/pwn_nessus_cloud_scan_crud +334 -0
- data/bin/pwn_nessus_cloud_vulnscan +87 -0
- data/bin/pwn_nexpose +42 -0
- data/bin/pwn_nmap_discover_tcp_udp +353 -0
- data/bin/pwn_openvas_vulnscan +104 -0
- data/bin/pwn_pastebin_sample_filter +47 -0
- data/bin/pwn_phone +129 -0
- data/bin/pwn_rdoc_to_jsonl +83 -0
- data/bin/pwn_sast +183 -0
- data/bin/pwn_serial_check_voicemail +56 -0
- data/bin/pwn_serial_msr206 +168 -0
- data/bin/pwn_serial_qualcomm_commands +16 -0
- data/bin/pwn_serial_son_micro_sm132_rfid +188 -0
- data/bin/pwn_shodan_graphql_introspection +304 -0
- data/bin/pwn_shodan_search +90 -0
- data/bin/pwn_simple_http_server +44 -0
- data/bin/pwn_web_cache_deception +205 -0
- data/bin/pwn_www_checkip +77 -0
- data/bin/pwn_www_uri_buster +363 -0
- data/bin/pwn_xss_dom_vectors +149 -0
- data/bin/pwn_zaproxy_active_rest_api_scan +159 -0
- data/bin/pwn_zaproxy_active_scan +130 -0
- data/build_pwn_gem.sh +33 -0
- data/documentation/PWN.png +0 -0
- data/documentation/PWN_Contributors_and_Users.png +0 -0
- data/documentation/fax-spectrogram.png +0 -0
- data/documentation/fax-waveform.png +0 -0
- data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt +54 -0
- data/documentation/pwn_android_war_dialer_session.png +0 -0
- data/documentation/pwn_install.png +0 -0
- data/documentation/pwn_wallpaper.jpg +0 -0
- data/documentation/ringing-spectrogram.png +0 -0
- data/documentation/ringing-waveform.png +0 -0
- data/etc/systemd/msfrpcd.service +12 -0
- data/etc/systemd/openvas.service +14 -0
- data/etc/userland/aws/apache2/jenkins_443.conf +90 -0
- data/etc/userland/aws/apache2/jenkins_80.conf +7 -0
- data/etc/userland/aws/apache2/openvas_443.conf +87 -0
- data/etc/userland/aws/apache2/openvas_80.conf +7 -0
- data/etc/userland/aws/apache2/sast_443.conf +87 -0
- data/etc/userland/aws/apache2/sast_80.conf +9 -0
- data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/aws/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/aws/jenkins/jenkins +81 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/aws/vagrant.yaml.EXAMPLE +35 -0
- data/etc/userland/docker/apache2/jenkins_443.conf +90 -0
- data/etc/userland/docker/apache2/jenkins_80.conf +7 -0
- data/etc/userland/docker/apache2/openvas_443.conf +87 -0
- data/etc/userland/docker/apache2/openvas_80.conf +7 -0
- data/etc/userland/docker/apache2/sast_443.conf +87 -0
- data/etc/userland/docker/apache2/sast_80.conf +9 -0
- data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/docker/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/docker/jenkins/jenkins +81 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/qemu/apache2/jenkins_443.conf +90 -0
- data/etc/userland/qemu/apache2/jenkins_80.conf +7 -0
- data/etc/userland/qemu/apache2/openvas_443.conf +87 -0
- data/etc/userland/qemu/apache2/openvas_80.conf +7 -0
- data/etc/userland/qemu/apache2/sast_443.conf +87 -0
- data/etc/userland/qemu/apache2/sast_80.conf +9 -0
- data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/qemu/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/qemu/jenkins/jenkins +81 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/ruby-gem/apache2/jenkins_443.conf +90 -0
- data/etc/userland/ruby-gem/apache2/jenkins_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/openvas_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/openvas_80.conf +7 -0
- data/etc/userland/ruby-gem/apache2/sast_443.conf +87 -0
- data/etc/userland/ruby-gem/apache2/sast_80.conf +9 -0
- data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/ruby-gem/jenkins/jenkins +81 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/apache2/jenkins_443.conf +90 -0
- data/etc/userland/virtualbox/apache2/jenkins_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/openvas_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/openvas_80.conf +7 -0
- data/etc/userland/virtualbox/apache2/sast_443.conf +87 -0
- data/etc/userland/virtualbox/apache2/sast_80.conf +9 -0
- data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/virtualbox/jenkins/jenkins +81 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/apache2/jenkins_443.conf +90 -0
- data/etc/userland/vmware/apache2/jenkins_80.conf +7 -0
- data/etc/userland/vmware/apache2/openvas_443.conf +87 -0
- data/etc/userland/vmware/apache2/openvas_80.conf +7 -0
- data/etc/userland/vmware/apache2/sast_443.conf +87 -0
- data/etc/userland/vmware/apache2/sast_80.conf +9 -0
- data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +9 -0
- data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +29 -0
- data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +3 -0
- data/etc/userland/vmware/jenkins/inject_build_envs.sh +15 -0
- data/etc/userland/vmware/jenkins/jenkins +81 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
- data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +462 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
- data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +42 -0
- data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +5 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +2 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +14 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +9 -0
- data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +2 -0
- data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +8 -0
- data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
- data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +4 -0
- data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +15 -0
- data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +3 -0
- data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +2 -0
- data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +52 -0
- data/etc/userland/vmware/vagrant.yaml.EXAMPLE +5 -0
- data/find_latest_gem_versions_per_Gemfile.sh +19 -0
- data/git_commit_test_reinit_gem.sh +57 -0
- data/install.sh +177 -0
- data/lib/pwn/ai/grok.rb +258 -0
- data/lib/pwn/ai/introspection.rb +100 -0
- data/lib/pwn/ai/ollama.rb +260 -0
- data/lib/pwn/ai/open_ai.rb +807 -0
- data/lib/pwn/ai.rb +19 -0
- data/lib/pwn/aws/acm.rb +92 -0
- data/lib/pwn/aws/api_gateway.rb +92 -0
- data/lib/pwn/aws/app_stream.rb +92 -0
- data/lib/pwn/aws/application_auto_scaling.rb +92 -0
- data/lib/pwn/aws/application_discovery_service.rb +92 -0
- data/lib/pwn/aws/auto_scaling.rb +92 -0
- data/lib/pwn/aws/batch.rb +92 -0
- data/lib/pwn/aws/budgets.rb +92 -0
- data/lib/pwn/aws/cloud_formation.rb +92 -0
- data/lib/pwn/aws/cloud_front.rb +92 -0
- data/lib/pwn/aws/cloud_hsm.rb +92 -0
- data/lib/pwn/aws/cloud_search.rb +92 -0
- data/lib/pwn/aws/cloud_search_domain.rb +92 -0
- data/lib/pwn/aws/cloud_trail.rb +92 -0
- data/lib/pwn/aws/cloud_watch.rb +92 -0
- data/lib/pwn/aws/cloud_watch_events.rb +92 -0
- data/lib/pwn/aws/cloud_watch_logs.rb +92 -0
- data/lib/pwn/aws/code_build.rb +92 -0
- data/lib/pwn/aws/code_commit.rb +92 -0
- data/lib/pwn/aws/code_deploy.rb +92 -0
- data/lib/pwn/aws/code_pipeline.rb +92 -0
- data/lib/pwn/aws/cognito_identity.rb +92 -0
- data/lib/pwn/aws/cognito_identity_provider.rb +92 -0
- data/lib/pwn/aws/cognito_sync.rb +92 -0
- data/lib/pwn/aws/config_service.rb +92 -0
- data/lib/pwn/aws/data_pipleline.rb +92 -0
- data/lib/pwn/aws/database_migration_service.rb +92 -0
- data/lib/pwn/aws/device_farm.rb +92 -0
- data/lib/pwn/aws/direct_connect.rb +92 -0
- data/lib/pwn/aws/directory_service.rb +92 -0
- data/lib/pwn/aws/dynamo_db.rb +92 -0
- data/lib/pwn/aws/dynamo_db_streams.rb +92 -0
- data/lib/pwn/aws/ec2.rb +92 -0
- data/lib/pwn/aws/ecr.rb +92 -0
- data/lib/pwn/aws/ecs.rb +92 -0
- data/lib/pwn/aws/efs.rb +92 -0
- data/lib/pwn/aws/elasti_cache.rb +92 -0
- data/lib/pwn/aws/elastic_beanstalk.rb +89 -0
- data/lib/pwn/aws/elastic_load_balancing.rb +92 -0
- data/lib/pwn/aws/elastic_load_balancing_v2.rb +92 -0
- data/lib/pwn/aws/elastic_transcoder.rb +92 -0
- data/lib/pwn/aws/elasticsearch_service.rb +92 -0
- data/lib/pwn/aws/emr.rb +92 -0
- data/lib/pwn/aws/firehose.rb +92 -0
- data/lib/pwn/aws/game_lift.rb +92 -0
- data/lib/pwn/aws/glacier.rb +92 -0
- data/lib/pwn/aws/health.rb +92 -0
- data/lib/pwn/aws/iam.rb +200 -0
- data/lib/pwn/aws/import_export.rb +92 -0
- data/lib/pwn/aws/inspector.rb +92 -0
- data/lib/pwn/aws/iot.rb +92 -0
- data/lib/pwn/aws/iot_data_plane.rb +92 -0
- data/lib/pwn/aws/kinesis.rb +92 -0
- data/lib/pwn/aws/kinesis_analytics.rb +92 -0
- data/lib/pwn/aws/kms.rb +92 -0
- data/lib/pwn/aws/lambda.rb +92 -0
- data/lib/pwn/aws/lambda_preview.rb +92 -0
- data/lib/pwn/aws/lex.rb +92 -0
- data/lib/pwn/aws/lightsail.rb +92 -0
- data/lib/pwn/aws/machine_learning.rb +92 -0
- data/lib/pwn/aws/marketplace_commerce_analytics.rb +92 -0
- data/lib/pwn/aws/marketplace_metering.rb +92 -0
- data/lib/pwn/aws/ops_works.rb +92 -0
- data/lib/pwn/aws/ops_works_cm.rb +92 -0
- data/lib/pwn/aws/pinpoint.rb +92 -0
- data/lib/pwn/aws/polly.rb +92 -0
- data/lib/pwn/aws/rds.rb +92 -0
- data/lib/pwn/aws/redshift.rb +92 -0
- data/lib/pwn/aws/rekognition.rb +92 -0
- data/lib/pwn/aws/route53.rb +92 -0
- data/lib/pwn/aws/route53_domains.rb +92 -0
- data/lib/pwn/aws/s3.rb +92 -0
- data/lib/pwn/aws/service_catalog.rb +92 -0
- data/lib/pwn/aws/ses.rb +92 -0
- data/lib/pwn/aws/shield.rb +92 -0
- data/lib/pwn/aws/simple_db.rb +92 -0
- data/lib/pwn/aws/sms.rb +92 -0
- data/lib/pwn/aws/snowball.rb +92 -0
- data/lib/pwn/aws/sns.rb +92 -0
- data/lib/pwn/aws/sqs.rb +92 -0
- data/lib/pwn/aws/ssm.rb +92 -0
- data/lib/pwn/aws/states.rb +92 -0
- data/lib/pwn/aws/storage_gateway.rb +92 -0
- data/lib/pwn/aws/sts.rb +63 -0
- data/lib/pwn/aws/support.rb +92 -0
- data/lib/pwn/aws/swf.rb +92 -0
- data/lib/pwn/aws/waf.rb +92 -0
- data/lib/pwn/aws/waf_regional.rb +92 -0
- data/lib/pwn/aws/workspaces.rb +92 -0
- data/lib/pwn/aws/x_ray.rb +92 -0
- data/lib/pwn/aws.rb +105 -0
- data/lib/pwn/banner/anon.rb +50 -0
- data/lib/pwn/banner/bubble.rb +42 -0
- data/lib/pwn/banner/cheshire.rb +58 -0
- data/lib/pwn/banner/code_cave.rb +1035 -0
- data/lib/pwn/banner/dont_panic.rb +52 -0
- data/lib/pwn/banner/f_society.rb +60 -0
- data/lib/pwn/banner/fork_bomb.rb +39 -0
- data/lib/pwn/banner/jmp_esp.rb +44 -0
- data/lib/pwn/banner/matrix.rb +206 -0
- data/lib/pwn/banner/ninja.rb +55 -0
- data/lib/pwn/banner/off_the_air.rb +73 -0
- data/lib/pwn/banner/pirate.rb +62 -0
- data/lib/pwn/banner/radare2.rb +41 -0
- data/lib/pwn/banner/radare2_ai.rb +116 -0
- data/lib/pwn/banner/white_rabbit.rb +55 -0
- data/lib/pwn/banner.rb +108 -0
- data/lib/pwn/blockchain/btc.rb +282 -0
- data/lib/pwn/blockchain/eth.rb +160 -0
- data/lib/pwn/blockchain.rb +17 -0
- data/lib/pwn/config.rb +304 -0
- data/lib/pwn/driver.rb +85 -0
- data/lib/pwn/ffi/stdio.rb +41 -0
- data/lib/pwn/ffi.rb +16 -0
- data/lib/pwn/plugins/android.rb +1617 -0
- data/lib/pwn/plugins/assembly.rb +275 -0
- data/lib/pwn/plugins/authentication_helper.rb +86 -0
- data/lib/pwn/plugins/baresip.rb +708 -0
- data/lib/pwn/plugins/basic_auth.rb +63 -0
- data/lib/pwn/plugins/beef.rb +312 -0
- data/lib/pwn/plugins/black_duck_binary_analysis.rb +790 -0
- data/lib/pwn/plugins/burp_suite.rb +2208 -0
- data/lib/pwn/plugins/bus_pirate.rb +147 -0
- data/lib/pwn/plugins/char.rb +474 -0
- data/lib/pwn/plugins/credit_card.rb +105 -0
- data/lib/pwn/plugins/dao_ldap.rb +131 -0
- data/lib/pwn/plugins/dao_mongo.rb +96 -0
- data/lib/pwn/plugins/dao_postgres.rb +224 -0
- data/lib/pwn/plugins/dao_sqlite3.rb +125 -0
- data/lib/pwn/plugins/defect_dojo.rb +841 -0
- data/lib/pwn/plugins/detect_os.rb +71 -0
- data/lib/pwn/plugins/ein.rb +141 -0
- data/lib/pwn/plugins/file_fu.rb +93 -0
- data/lib/pwn/plugins/fuzz.rb +204 -0
- data/lib/pwn/plugins/git.rb +159 -0
- data/lib/pwn/plugins/github.rb +137 -0
- data/lib/pwn/plugins/hacker_one.rb +154 -0
- data/lib/pwn/plugins/hunter.rb +160 -0
- data/lib/pwn/plugins/ip_info.rb +264 -0
- data/lib/pwn/plugins/irc.rb +312 -0
- data/lib/pwn/plugins/jenkins.rb +537 -0
- data/lib/pwn/plugins/jira_data_center.rb +676 -0
- data/lib/pwn/plugins/json_pathify.rb +46 -0
- data/lib/pwn/plugins/log.rb +123 -0
- data/lib/pwn/plugins/mail_agent.rb +344 -0
- data/lib/pwn/plugins/metasploit.rb +151 -0
- data/lib/pwn/plugins/monkey_patch.rb +182 -0
- data/lib/pwn/plugins/msr206.rb +1257 -0
- data/lib/pwn/plugins/nessus_cloud.rb +847 -0
- data/lib/pwn/plugins/nexpose_vuln_scan.rb +356 -0
- data/lib/pwn/plugins/nmap_it.rb +136 -0
- data/lib/pwn/plugins/oauth2.rb +67 -0
- data/lib/pwn/plugins/ocr.rb +43 -0
- data/lib/pwn/plugins/open_api.rb +896 -0
- data/lib/pwn/plugins/openvas.rb +314 -0
- data/lib/pwn/plugins/packet.rb +1313 -0
- data/lib/pwn/plugins/pdf_parse.rb +53 -0
- data/lib/pwn/plugins/pony.rb +281 -0
- data/lib/pwn/plugins/ps.rb +90 -0
- data/lib/pwn/plugins/pwn_logger.rb +64 -0
- data/lib/pwn/plugins/rabbit_mq.rb +70 -0
- data/lib/pwn/plugins/repl.rb +999 -0
- data/lib/pwn/plugins/scannable_codes.rb +87 -0
- data/lib/pwn/plugins/serial.rb +273 -0
- data/lib/pwn/plugins/shodan.rb +629 -0
- data/lib/pwn/plugins/slack_client.rb +104 -0
- data/lib/pwn/plugins/sock.rb +289 -0
- data/lib/pwn/plugins/spider.rb +78 -0
- data/lib/pwn/plugins/ssn.rb +52 -0
- data/lib/pwn/plugins/thread_pool.rb +80 -0
- data/lib/pwn/plugins/tor.rb +273 -0
- data/lib/pwn/plugins/transparent_browser.rb +1738 -0
- data/lib/pwn/plugins/twitter_api.rb +151 -0
- data/lib/pwn/plugins/uri_scheme.rb +328 -0
- data/lib/pwn/plugins/vault.rb +305 -0
- data/lib/pwn/plugins/vin.rb +361 -0
- data/lib/pwn/plugins/voice.rb +145 -0
- data/lib/pwn/plugins/vsphere.rb +81 -0
- data/lib/pwn/plugins/xxd.rb +298 -0
- data/lib/pwn/plugins/zaproxy.rb +837 -0
- data/lib/pwn/plugins.rb +81 -0
- data/lib/pwn/reports/fuzz.rb +328 -0
- data/lib/pwn/reports/html_footer.rb +160 -0
- data/lib/pwn/reports/html_header.rb +271 -0
- data/lib/pwn/reports/phone.rb +384 -0
- data/lib/pwn/reports/sast.rb +435 -0
- data/lib/pwn/reports/uri_buster.rb +335 -0
- data/lib/pwn/reports.rb +25 -0
- data/lib/pwn/sast/amqp_connect_as_guest.rb +78 -0
- data/lib/pwn/sast/apache_file_system_util_api.rb +76 -0
- data/lib/pwn/sast/aws.rb +77 -0
- data/lib/pwn/sast/banned_function_calls_c.rb +207 -0
- data/lib/pwn/sast/base64.rb +74 -0
- data/lib/pwn/sast/beef_hook.rb +75 -0
- data/lib/pwn/sast/cmd_execution_go_lang.rb +83 -0
- data/lib/pwn/sast/cmd_execution_java.rb +80 -0
- data/lib/pwn/sast/cmd_execution_python.rb +82 -0
- data/lib/pwn/sast/cmd_execution_ruby.rb +90 -0
- data/lib/pwn/sast/cmd_execution_scala.rb +80 -0
- data/lib/pwn/sast/csrf.rb +74 -0
- data/lib/pwn/sast/deserial_java.rb +85 -0
- data/lib/pwn/sast/emoticon.rb +82 -0
- data/lib/pwn/sast/eval.rb +76 -0
- data/lib/pwn/sast/factory.rb +79 -0
- data/lib/pwn/sast/http_authorization_header.rb +80 -0
- data/lib/pwn/sast/inner_html.rb +76 -0
- data/lib/pwn/sast/keystore.rb +75 -0
- data/lib/pwn/sast/local_storage.rb +77 -0
- data/lib/pwn/sast/location_hash.rb +76 -0
- data/lib/pwn/sast/log4j.rb +78 -0
- data/lib/pwn/sast/logger.rb +90 -0
- data/lib/pwn/sast/md5.rb +75 -0
- data/lib/pwn/sast/outer_html.rb +76 -0
- data/lib/pwn/sast/padding_oracle.rb +72 -0
- data/lib/pwn/sast/password.rb +75 -0
- data/lib/pwn/sast/php_input_mechanisms.rb +84 -0
- data/lib/pwn/sast/php_type_juggling.rb +82 -0
- data/lib/pwn/sast/pom_version.rb +164 -0
- data/lib/pwn/sast/port.rb +82 -0
- data/lib/pwn/sast/post_message.rb +76 -0
- data/lib/pwn/sast/private_key.rb +75 -0
- data/lib/pwn/sast/redirect.rb +77 -0
- data/lib/pwn/sast/redos.rb +82 -0
- data/lib/pwn/sast/shell.rb +83 -0
- data/lib/pwn/sast/signature.rb +75 -0
- data/lib/pwn/sast/sql.rb +85 -0
- data/lib/pwn/sast/ssl.rb +79 -0
- data/lib/pwn/sast/sudo.rb +75 -0
- data/lib/pwn/sast/task_tag.rb +89 -0
- data/lib/pwn/sast/test_case_engine.rb +189 -0
- data/lib/pwn/sast/throw_errors.rb +78 -0
- data/lib/pwn/sast/token.rb +77 -0
- data/lib/pwn/sast/type_script_type_juggling.rb +82 -0
- data/lib/pwn/sast/use_after_free.rb +82 -0
- data/lib/pwn/sast/version.rb +76 -0
- data/lib/pwn/sast/window_location_hash.rb +75 -0
- data/lib/pwn/sast.rb +67 -0
- data/lib/pwn/sdr/decoder/gsm.rb +231 -0
- data/lib/pwn/sdr/decoder.rb +19 -0
- data/lib/pwn/sdr/flipper_zero.rb +128 -0
- data/lib/pwn/sdr/frequency_allocation.rb +702 -0
- data/lib/pwn/sdr/gqrx.rb +655 -0
- data/lib/pwn/sdr/rfidler.rb +56 -0
- data/lib/pwn/sdr/son_micro_rfid.rb +773 -0
- data/lib/pwn/sdr.rb +21 -0
- data/lib/pwn/version.rb +5 -0
- data/lib/pwn/www/app_cobalt_io.rb +139 -0
- data/lib/pwn/www/bing.rb +88 -0
- data/lib/pwn/www/bug_crowd.rb +136 -0
- data/lib/pwn/www/checkip.rb +69 -0
- data/lib/pwn/www/coinbase_pro.rb +136 -0
- data/lib/pwn/www/duckduckgo.rb +114 -0
- data/lib/pwn/www/facebook.rb +124 -0
- data/lib/pwn/www/google.rb +114 -0
- data/lib/pwn/www/hacker_one.rb +649 -0
- data/lib/pwn/www/linkedin.rb +124 -0
- data/lib/pwn/www/pandora.rb +124 -0
- data/lib/pwn/www/pastebin.rb +84 -0
- data/lib/pwn/www/paypal.rb +208 -0
- data/lib/pwn/www/synack.rb +136 -0
- data/lib/pwn/www/torch.rb +107 -0
- data/lib/pwn/www/trading_view.rb +127 -0
- data/lib/pwn/www/twitter.rb +138 -0
- data/lib/pwn/www/uber.rb +124 -0
- data/lib/pwn/www/upwork.rb +124 -0
- data/lib/pwn/www/wayback_machine.rb +113 -0
- data/lib/pwn/www/youtube.rb +88 -0
- data/lib/pwn/www.rb +36 -0
- data/lib/pwn.rb +39 -0
- data/packer/daemons/msfrpcd.rb +64 -0
- data/packer/daemons/openvas.rb +51 -0
- data/packer/deploy_docker_containers.sh +9 -0
- data/packer/deploy_packer_box.sh +87 -0
- data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_prototyper.json +48 -0
- data/packer/docker/kali_rolling_docker_pwn_sast.json +44 -0
- data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +46 -0
- data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +34 -0
- data/packer/http/kali_rolling_preseed.cfg +81 -0
- data/packer/kali_rolling_aws_ami.json +139 -0
- data/packer/kali_rolling_qemu_kvm.json +159 -0
- data/packer/kali_rolling_virtualbox.json +186 -0
- data/packer/kali_rolling_vmware.json +167 -0
- data/packer/packer_secrets.json.EXAMPLE +9 -0
- data/packer/provisioners/PayloadsAllTheThings.sh +5 -0
- data/packer/provisioners/SecLists.sh +5 -0
- data/packer/provisioners/afl.sh +28 -0
- data/packer/provisioners/aliases.rb +23 -0
- data/packer/provisioners/amass.sh +5 -0
- data/packer/provisioners/android.sh +18 -0
- data/packer/provisioners/ansible.sh +5 -0
- data/packer/provisioners/apache2.sh +24 -0
- data/packer/provisioners/arachni.sh +28 -0
- data/packer/provisioners/awscli.sh +5 -0
- data/packer/provisioners/bashrc.sh +13 -0
- data/packer/provisioners/beef.rb +23 -0
- data/packer/provisioners/burpsuite.sh +24 -0
- data/packer/provisioners/chrome.sh +11 -0
- data/packer/provisioners/coreutils.sh +6 -0
- data/packer/provisioners/curl.sh +6 -0
- data/packer/provisioners/docker.sh +43 -0
- data/packer/provisioners/docker_bashrc.sh +2 -0
- data/packer/provisioners/docker_rvm.sh +22 -0
- data/packer/provisioners/eyewitness.sh +5 -0
- data/packer/provisioners/ffmpeg.sh +6 -0
- data/packer/provisioners/firefox.sh +7 -0
- data/packer/provisioners/fuzzdb.sh +5 -0
- data/packer/provisioners/gdb.sh +5 -0
- data/packer/provisioners/geckodriver.sh +9 -0
- data/packer/provisioners/ghidra.sh +5 -0
- data/packer/provisioners/git.sh +6 -0
- data/packer/provisioners/init_image.sh +103 -0
- data/packer/provisioners/install_vagrant_ssh_key.sh +15 -0
- data/packer/provisioners/irc.sh +13 -0
- data/packer/provisioners/jenkins.sh +77 -0
- data/packer/provisioners/metasploit.rb +59 -0
- data/packer/provisioners/nmap.sh +5 -0
- data/packer/provisioners/openvas.sh +23 -0
- data/packer/provisioners/openvas_wrappers.sh +4 -0
- data/packer/provisioners/openvpn.sh +7 -0
- data/packer/provisioners/peda.sh +4 -0
- data/packer/provisioners/phantomjs.rb +28 -0
- data/packer/provisioners/phantomjs_wrapper.sh +22 -0
- data/packer/provisioners/post_install.sh +41 -0
- data/packer/provisioners/postgresql.sh +49 -0
- data/packer/provisioners/preeny.sh +8 -0
- data/packer/provisioners/pwn.sh +100 -0
- data/packer/provisioners/pwntools.sh +13 -0
- data/packer/provisioners/radamsa.sh +7 -0
- data/packer/provisioners/radare2.sh +29 -0
- data/packer/provisioners/rc.local.sh +16 -0
- data/packer/provisioners/reboot_os.sh +7 -0
- data/packer/provisioners/ruby.sh +35 -0
- data/packer/provisioners/rvm.sh +32 -0
- data/packer/provisioners/scapy.sh +5 -0
- data/packer/provisioners/scout2.sh +5 -0
- data/packer/provisioners/sox.sh +5 -0
- data/packer/provisioners/ssllabs-scan.sh +9 -0
- data/packer/provisioners/strace.sh +5 -0
- data/packer/provisioners/sublist3r.sh +5 -0
- data/packer/provisioners/terminator.sh +5 -0
- data/packer/provisioners/toggle_tor.sh +2 -0
- data/packer/provisioners/tor.sh +5 -0
- data/packer/provisioners/twinkle.sh +6 -0
- data/packer/provisioners/update_os.sh +108 -0
- data/packer/provisioners/upload_globals.sh +63 -0
- data/packer/provisioners/vim.sh +23 -0
- data/packer/provisioners/virtualbox_guest_additions.sh +20 -0
- data/packer/provisioners/vmware_tools.sh +8 -0
- data/packer/provisioners/wpscan.rb +23 -0
- data/packer/provisioners/xrdp.sh +23 -0
- data/packer/provisioners/zzuf.sh +5 -0
- data/pwn.gemspec +77 -0
- data/reinstall_pwn_gemset.sh +30 -0
- data/spec/lib/pwn/ai/grok_spec.rb +15 -0
- data/spec/lib/pwn/ai/introspection_spec.rb +15 -0
- data/spec/lib/pwn/ai/ollama_spec.rb +15 -0
- data/spec/lib/pwn/ai/open_ai_spec.rb +15 -0
- data/spec/lib/pwn/ai_spec.rb +10 -0
- data/spec/lib/pwn/aws/acm_spec.rb +15 -0
- data/spec/lib/pwn/aws/api_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/app_stream_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/application_discovery_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/auto_scaling_spec.rb +15 -0
- data/spec/lib/pwn/aws/batch_spec.rb +15 -0
- data/spec/lib/pwn/aws/budgets_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_formation_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_front_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_hsm_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_search_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_trail_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +15 -0
- data/spec/lib/pwn/aws/cloud_watch_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_build_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_commit_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_deploy_spec.rb +15 -0
- data/spec/lib/pwn/aws/code_pipeline_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_identity_spec.rb +15 -0
- data/spec/lib/pwn/aws/cognito_sync_spec.rb +15 -0
- data/spec/lib/pwn/aws/config_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/data_pipleline_spec.rb +15 -0
- data/spec/lib/pwn/aws/database_migration_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/device_farm_spec.rb +15 -0
- data/spec/lib/pwn/aws/direct_connect_spec.rb +15 -0
- data/spec/lib/pwn/aws/directory_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +15 -0
- data/spec/lib/pwn/aws/ec2_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecr_spec.rb +15 -0
- data/spec/lib/pwn/aws/ecs_spec.rb +15 -0
- data/spec/lib/pwn/aws/efs_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasti_cache_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +15 -0
- data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +15 -0
- data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +15 -0
- data/spec/lib/pwn/aws/emr_spec.rb +15 -0
- data/spec/lib/pwn/aws/firehose_spec.rb +15 -0
- data/spec/lib/pwn/aws/game_lift_spec.rb +15 -0
- data/spec/lib/pwn/aws/glacier_spec.rb +15 -0
- data/spec/lib/pwn/aws/health_spec.rb +15 -0
- data/spec/lib/pwn/aws/iam_spec.rb +15 -0
- data/spec/lib/pwn/aws/import_export_spec.rb +15 -0
- data/spec/lib/pwn/aws/inspector_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_data_plane_spec.rb +15 -0
- data/spec/lib/pwn/aws/iot_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/kinesis_spec.rb +15 -0
- data/spec/lib/pwn/aws/kms_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_preview_spec.rb +15 -0
- data/spec/lib/pwn/aws/lambda_spec.rb +15 -0
- data/spec/lib/pwn/aws/lex_spec.rb +15 -0
- data/spec/lib/pwn/aws/lightsail_spec.rb +15 -0
- data/spec/lib/pwn/aws/machine_learning_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +15 -0
- data/spec/lib/pwn/aws/marketplace_metering_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_cm_spec.rb +15 -0
- data/spec/lib/pwn/aws/ops_works_spec.rb +15 -0
- data/spec/lib/pwn/aws/pinpoint_spec.rb +15 -0
- data/spec/lib/pwn/aws/polly_spec.rb +15 -0
- data/spec/lib/pwn/aws/rds_spec.rb +15 -0
- data/spec/lib/pwn/aws/redshift_spec.rb +15 -0
- data/spec/lib/pwn/aws/rekognition_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_domains_spec.rb +15 -0
- data/spec/lib/pwn/aws/route53_spec.rb +15 -0
- data/spec/lib/pwn/aws/s3_spec.rb +15 -0
- data/spec/lib/pwn/aws/service_catalog_spec.rb +15 -0
- data/spec/lib/pwn/aws/ses_spec.rb +15 -0
- data/spec/lib/pwn/aws/shield_spec.rb +15 -0
- data/spec/lib/pwn/aws/simple_db_spec.rb +15 -0
- data/spec/lib/pwn/aws/sms_spec.rb +15 -0
- data/spec/lib/pwn/aws/snowball_spec.rb +15 -0
- data/spec/lib/pwn/aws/sns_spec.rb +15 -0
- data/spec/lib/pwn/aws/sqs_spec.rb +15 -0
- data/spec/lib/pwn/aws/ssm_spec.rb +15 -0
- data/spec/lib/pwn/aws/states_spec.rb +15 -0
- data/spec/lib/pwn/aws/storage_gateway_spec.rb +15 -0
- data/spec/lib/pwn/aws/sts_spec.rb +15 -0
- data/spec/lib/pwn/aws/support_spec.rb +15 -0
- data/spec/lib/pwn/aws/swf_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_regional_spec.rb +15 -0
- data/spec/lib/pwn/aws/waf_spec.rb +15 -0
- data/spec/lib/pwn/aws/workspaces_spec.rb +15 -0
- data/spec/lib/pwn/aws/x_ray_spec.rb +15 -0
- data/spec/lib/pwn/aws_spec.rb +10 -0
- data/spec/lib/pwn/banner/anon_spec.rb +20 -0
- data/spec/lib/pwn/banner/bubble_spec.rb +20 -0
- data/spec/lib/pwn/banner/cheshire_spec.rb +20 -0
- data/spec/lib/pwn/banner/code_cave_spec.rb +20 -0
- data/spec/lib/pwn/banner/dont_panic_spec.rb +20 -0
- data/spec/lib/pwn/banner/f_society_spec.rb +20 -0
- data/spec/lib/pwn/banner/fork_bomb_spec.rb +20 -0
- data/spec/lib/pwn/banner/jmp_esp_spec.rb +20 -0
- data/spec/lib/pwn/banner/matrix_spec.rb +20 -0
- data/spec/lib/pwn/banner/ninja_spec.rb +20 -0
- data/spec/lib/pwn/banner/off_the_air_spec.rb +20 -0
- data/spec/lib/pwn/banner/pirate_spec.rb +20 -0
- data/spec/lib/pwn/banner/radare2_ai_spec.rb +20 -0
- data/spec/lib/pwn/banner/radare2_spec.rb +20 -0
- data/spec/lib/pwn/banner/white_rabbit_spec.rb +20 -0
- data/spec/lib/pwn/banner_spec.rb +15 -0
- data/spec/lib/pwn/blockchain/btc_spec.rb +15 -0
- data/spec/lib/pwn/blockchain/eth_spec.rb +15 -0
- data/spec/lib/pwn/blockchain_spec.rb +10 -0
- data/spec/lib/pwn/config_spec.rb +15 -0
- data/spec/lib/pwn/driver_spec.rb +15 -0
- data/spec/lib/pwn/ffi/stdio_spec.rb +15 -0
- data/spec/lib/pwn/ffi_spec.rb +10 -0
- data/spec/lib/pwn/plugins/android_spec.rb +15 -0
- data/spec/lib/pwn/plugins/assembly_spec.rb +15 -0
- data/spec/lib/pwn/plugins/authentication_helper_spec.rb +15 -0
- data/spec/lib/pwn/plugins/baresip_spec.rb +15 -0
- data/spec/lib/pwn/plugins/basic_auth_spec.rb +15 -0
- data/spec/lib/pwn/plugins/beef_spec.rb +15 -0
- data/spec/lib/pwn/plugins/black_duck_binary_analysis_spec.rb +15 -0
- data/spec/lib/pwn/plugins/burp_suite_spec.rb +15 -0
- data/spec/lib/pwn/plugins/bus_pirate_spec.rb +15 -0
- data/spec/lib/pwn/plugins/char_spec.rb +15 -0
- data/spec/lib/pwn/plugins/credit_card_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_ldap_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_mongo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_postgres_spec.rb +15 -0
- data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +15 -0
- data/spec/lib/pwn/plugins/defect_dojo_spec.rb +15 -0
- data/spec/lib/pwn/plugins/detect_os_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ein_spec.rb +15 -0
- data/spec/lib/pwn/plugins/file_fu_spec.rb +15 -0
- data/spec/lib/pwn/plugins/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/plugins/git_spec.rb +15 -0
- data/spec/lib/pwn/plugins/github_spec.rb +15 -0
- data/spec/lib/pwn/plugins/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/plugins/hunter_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ip_info_spec.rb +15 -0
- data/spec/lib/pwn/plugins/irc_spec.rb +15 -0
- data/spec/lib/pwn/plugins/jenkins_spec.rb +15 -0
- data/spec/lib/pwn/plugins/jira_data_center_spec.rb +15 -0
- data/spec/lib/pwn/plugins/json_pathify_spec.rb +15 -0
- data/spec/lib/pwn/plugins/log_spec.rb +15 -0
- data/spec/lib/pwn/plugins/mail_agent_spec.rb +15 -0
- data/spec/lib/pwn/plugins/metasploit_spec.rb +15 -0
- data/spec/lib/pwn/plugins/monkey_patch_spec.rb +15 -0
- data/spec/lib/pwn/plugins/msr206_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/nmap_it_spec.rb +15 -0
- data/spec/lib/pwn/plugins/oauth2_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ocr_spec.rb +15 -0
- data/spec/lib/pwn/plugins/open_api_spec.rb +15 -0
- data/spec/lib/pwn/plugins/openvas_spec.rb +15 -0
- data/spec/lib/pwn/plugins/packet_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pdf_parse_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pony_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ps_spec.rb +15 -0
- data/spec/lib/pwn/plugins/pwn_logger_spec.rb +15 -0
- data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +15 -0
- data/spec/lib/pwn/plugins/repl_spec.rb +15 -0
- data/spec/lib/pwn/plugins/scannable_codes_spec.rb +15 -0
- data/spec/lib/pwn/plugins/serial_spec.rb +15 -0
- data/spec/lib/pwn/plugins/shodan_spec.rb +15 -0
- data/spec/lib/pwn/plugins/slack_client_spec.rb +15 -0
- data/spec/lib/pwn/plugins/sock_spec.rb +15 -0
- data/spec/lib/pwn/plugins/spider_spec.rb +15 -0
- data/spec/lib/pwn/plugins/ssn_spec.rb +15 -0
- data/spec/lib/pwn/plugins/thread_pool_spec.rb +15 -0
- data/spec/lib/pwn/plugins/tor_spec.rb +15 -0
- data/spec/lib/pwn/plugins/transparent_browser_spec.rb +15 -0
- data/spec/lib/pwn/plugins/twitter_api_spec.rb +15 -0
- data/spec/lib/pwn/plugins/uri_scheme_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vault_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vin_spec.rb +15 -0
- data/spec/lib/pwn/plugins/voice_spec.rb +15 -0
- data/spec/lib/pwn/plugins/vsphere_spec.rb +15 -0
- data/spec/lib/pwn/plugins/xxd_spec.rb +15 -0
- data/spec/lib/pwn/plugins/zaproxy_spec.rb +15 -0
- data/spec/lib/pwn/plugins_spec.rb +10 -0
- data/spec/lib/pwn/reports/fuzz_spec.rb +15 -0
- data/spec/lib/pwn/reports/html_footer_spec.rb +15 -0
- data/spec/lib/pwn/reports/html_header_spec.rb +15 -0
- data/spec/lib/pwn/reports/phone_spec.rb +15 -0
- data/spec/lib/pwn/reports/sast_spec.rb +15 -0
- data/spec/lib/pwn/reports/uri_buster_spec.rb +15 -0
- data/spec/lib/pwn/reports_spec.rb +10 -0
- data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +25 -0
- data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +25 -0
- data/spec/lib/pwn/sast/aws_spec.rb +25 -0
- data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +25 -0
- data/spec/lib/pwn/sast/base64_spec.rb +25 -0
- data/spec/lib/pwn/sast/beef_hook_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_go_lang_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +25 -0
- data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +25 -0
- data/spec/lib/pwn/sast/csrf_spec.rb +25 -0
- data/spec/lib/pwn/sast/deserial_java_spec.rb +25 -0
- data/spec/lib/pwn/sast/emoticon_spec.rb +25 -0
- data/spec/lib/pwn/sast/eval_spec.rb +25 -0
- data/spec/lib/pwn/sast/factory_spec.rb +25 -0
- data/spec/lib/pwn/sast/http_authorization_header_spec.rb +25 -0
- data/spec/lib/pwn/sast/inner_html_spec.rb +25 -0
- data/spec/lib/pwn/sast/keystore_spec.rb +25 -0
- data/spec/lib/pwn/sast/local_storage_spec.rb +25 -0
- data/spec/lib/pwn/sast/location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast/log4j_spec.rb +25 -0
- data/spec/lib/pwn/sast/logger_spec.rb +25 -0
- data/spec/lib/pwn/sast/md5_spec.rb +25 -0
- data/spec/lib/pwn/sast/outer_html_spec.rb +25 -0
- data/spec/lib/pwn/sast/padding_oracle_spec.rb +25 -0
- data/spec/lib/pwn/sast/password_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +25 -0
- data/spec/lib/pwn/sast/php_type_juggling_spec.rb +25 -0
- data/spec/lib/pwn/sast/pom_version_spec.rb +25 -0
- data/spec/lib/pwn/sast/port_spec.rb +25 -0
- data/spec/lib/pwn/sast/post_message_spec.rb +25 -0
- data/spec/lib/pwn/sast/private_key_spec.rb +25 -0
- data/spec/lib/pwn/sast/redirect_spec.rb +25 -0
- data/spec/lib/pwn/sast/redos_spec.rb +25 -0
- data/spec/lib/pwn/sast/shell_spec.rb +25 -0
- data/spec/lib/pwn/sast/signature_spec.rb +25 -0
- data/spec/lib/pwn/sast/sql_spec.rb +25 -0
- data/spec/lib/pwn/sast/ssl_spec.rb +25 -0
- data/spec/lib/pwn/sast/sudo_spec.rb +25 -0
- data/spec/lib/pwn/sast/task_tag_spec.rb +25 -0
- data/spec/lib/pwn/sast/test_case_engine_spec.rb +20 -0
- data/spec/lib/pwn/sast/throw_errors_spec.rb +25 -0
- data/spec/lib/pwn/sast/token_spec.rb +25 -0
- data/spec/lib/pwn/sast/type_script_type_juggling_spec.rb +25 -0
- data/spec/lib/pwn/sast/use_after_free_spec.rb +25 -0
- data/spec/lib/pwn/sast/version_spec.rb +25 -0
- data/spec/lib/pwn/sast/window_location_hash_spec.rb +25 -0
- data/spec/lib/pwn/sast_spec.rb +10 -0
- data/spec/lib/pwn/sdr/decoder/gsm_spec.rb +15 -0
- data/spec/lib/pwn/sdr/decoder_spec.rb +10 -0
- data/spec/lib/pwn/sdr/flipper_zero_spec.rb +15 -0
- data/spec/lib/pwn/sdr/frequency_allocation_spec.rb +15 -0
- data/spec/lib/pwn/sdr/gqrx_spec.rb +15 -0
- data/spec/lib/pwn/sdr/rfidler_spec.rb +15 -0
- data/spec/lib/pwn/sdr/son_micro_rfid_spec.rb +15 -0
- data/spec/lib/pwn/sdr_spec.rb +10 -0
- data/spec/lib/pwn/version_spec.rb +17 -0
- data/spec/lib/pwn/www/app_cobalt_io_spec.rb +15 -0
- data/spec/lib/pwn/www/bing_spec.rb +15 -0
- data/spec/lib/pwn/www/bug_crowd_spec.rb +15 -0
- data/spec/lib/pwn/www/checkip_spec.rb +15 -0
- data/spec/lib/pwn/www/coinbase_pro_spec.rb +15 -0
- data/spec/lib/pwn/www/duckduckgo_spec.rb +15 -0
- data/spec/lib/pwn/www/facebook_spec.rb +15 -0
- data/spec/lib/pwn/www/google_spec.rb +15 -0
- data/spec/lib/pwn/www/hacker_one_spec.rb +15 -0
- data/spec/lib/pwn/www/linkedin_spec.rb +15 -0
- data/spec/lib/pwn/www/pandora_spec.rb +15 -0
- data/spec/lib/pwn/www/pastebin_spec.rb +15 -0
- data/spec/lib/pwn/www/paypal_spec.rb +15 -0
- data/spec/lib/pwn/www/synack_spec.rb +15 -0
- data/spec/lib/pwn/www/torch_spec.rb +15 -0
- data/spec/lib/pwn/www/trading_view_spec.rb +15 -0
- data/spec/lib/pwn/www/twitter_spec.rb +15 -0
- data/spec/lib/pwn/www/uber_spec.rb +15 -0
- data/spec/lib/pwn/www/upwork_spec.rb +15 -0
- data/spec/lib/pwn/www/wayback_machine_spec.rb +15 -0
- data/spec/lib/pwn/www/youtube_spec.rb +15 -0
- data/spec/lib/pwn/www_spec.rb +10 -0
- data/spec/lib/pwn_spec.rb +10 -0
- data/spec/spec_helper.rb +3 -0
- data/third_party/.gitkeep +0 -0
- data/third_party/http-request-headers-fields-large.txt +1185 -0
- data/third_party/pwn_rdoc.jsonl +1445 -0
- data/third_party/r2-pwn-layout +1 -0
- data/update_pwn.sh +9 -0
- data/upgrade_ruby.sh +42 -0
- data/vagrant/provisioners/apache2.sh +76 -0
- data/vagrant/provisioners/beef.rb +30 -0
- data/vagrant/provisioners/burpsuite_pro.rb +37 -0
- data/vagrant/provisioners/exploit-db.sh +2 -0
- data/vagrant/provisioners/gem.sh +4 -0
- data/vagrant/provisioners/init_env.sh +22 -0
- data/vagrant/provisioners/jenkins.sh +87 -0
- data/vagrant/provisioners/jenkins_ssh-keygen.rb +86 -0
- data/vagrant/provisioners/kali_customize.rb +130 -0
- data/vagrant/provisioners/letsencrypt.rb +35 -0
- data/vagrant/provisioners/metasploit.rb +25 -0
- data/vagrant/provisioners/nmap_all_live_hosts.sh +2 -0
- data/vagrant/provisioners/openvas.sh +23 -0
- data/vagrant/provisioners/openvas_wrappers.sh +2 -0
- data/vagrant/provisioners/post_install.sh +14 -0
- data/vagrant/provisioners/postgres.sh +22 -0
- data/vagrant/provisioners/pwn.sh +13 -0
- data/vagrant/provisioners/rvm.sh +18 -0
- data/vagrant/provisioners/ssllabs-scan.sh +10 -0
- data/vagrant/provisioners/toggle_tor.sh +2 -0
- data/vagrant/provisioners/update_jenkins_plugins.rb +30 -0
- data/vagrant/provisioners/update_os.sh +108 -0
- data/vagrant/provisioners/upload_globals.sh +63 -0
- data/vagrant/provisioners/userland_fdisk.sh +22 -0
- data/vagrant/provisioners/userland_lvm.sh +5 -0
- data/vagrant/provisioners/wpscan.rb +25 -0
- data/vagrant_rsync_third_party.lst +1 -0
- data/vagrant_rsync_userland_template.lst +8 -0
- metadata +1112 -5
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'os'
|
|
4
|
+
|
|
5
|
+
module PWN
|
|
6
|
+
module Plugins
|
|
7
|
+
# This plugin converts images to readable text
|
|
8
|
+
module DetectOS
|
|
9
|
+
# Supported Method Parameters::
|
|
10
|
+
# PWN::Plugins::DetectOS.type
|
|
11
|
+
|
|
12
|
+
public_class_method def self.type
|
|
13
|
+
os = :cygwin if OS.cygwin?
|
|
14
|
+
os = :freebsd if OS.freebsd?
|
|
15
|
+
os = :linux if OS.linux?
|
|
16
|
+
os = :netbsd if OS.host_os.include?('netbsd')
|
|
17
|
+
os = :openbsd if OS.host_os.include?('openbsd')
|
|
18
|
+
os = :osx if OS.osx?
|
|
19
|
+
os = :windows if OS.windows?
|
|
20
|
+
|
|
21
|
+
os
|
|
22
|
+
rescue StandardError => e
|
|
23
|
+
raise e
|
|
24
|
+
end
|
|
25
|
+
|
|
26
|
+
# Supported Method Parameters::
|
|
27
|
+
# PWN::Plugins::DetectOS.arch
|
|
28
|
+
|
|
29
|
+
public_class_method def self.arch
|
|
30
|
+
OS.host_cpu
|
|
31
|
+
rescue StandardError => e
|
|
32
|
+
raise e
|
|
33
|
+
end
|
|
34
|
+
|
|
35
|
+
# Supported Method Parameters::
|
|
36
|
+
# PWN::Plugins::DetectOS.endian
|
|
37
|
+
|
|
38
|
+
public_class_method def self.endian
|
|
39
|
+
if [1].pack('I') == [1].pack('N')
|
|
40
|
+
:big
|
|
41
|
+
else
|
|
42
|
+
:little
|
|
43
|
+
end
|
|
44
|
+
rescue StandardError => e
|
|
45
|
+
raise e
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
49
|
+
|
|
50
|
+
public_class_method def self.authors
|
|
51
|
+
"AUTHOR(S):
|
|
52
|
+
0day Inc. <support@0dayinc.com>
|
|
53
|
+
"
|
|
54
|
+
end
|
|
55
|
+
|
|
56
|
+
# Display Usage for this Module
|
|
57
|
+
|
|
58
|
+
public_class_method def self.help
|
|
59
|
+
puts "USAGE:
|
|
60
|
+
#{self}.type
|
|
61
|
+
|
|
62
|
+
#{self}.arch
|
|
63
|
+
|
|
64
|
+
#{self}.endian
|
|
65
|
+
|
|
66
|
+
#{self}.authors
|
|
67
|
+
"
|
|
68
|
+
end
|
|
69
|
+
end
|
|
70
|
+
end
|
|
71
|
+
end
|
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
module PWN
|
|
4
|
+
module Plugins
|
|
5
|
+
# This plugin provides useful employer identification number capabilities
|
|
6
|
+
module EIN
|
|
7
|
+
# Supported Method Parameters::
|
|
8
|
+
# PWN::Plugins::EIN.generate(
|
|
9
|
+
# count: 'required - number of EIN numbers to generate'
|
|
10
|
+
# )
|
|
11
|
+
|
|
12
|
+
public_class_method def self.generate(opts = {})
|
|
13
|
+
count = opts[:count].to_i
|
|
14
|
+
|
|
15
|
+
ein_prefix_data_struct = [
|
|
16
|
+
{ campus: :andover, prefix: 10 },
|
|
17
|
+
{ campus: :andover, prefix: 12 },
|
|
18
|
+
{ campus: :atlanta, prefix: 60 },
|
|
19
|
+
{ campus: :atlanta, prefix: 67 },
|
|
20
|
+
{ campus: :austin, prefix: 50 },
|
|
21
|
+
{ campus: :austin, prefix: 53 },
|
|
22
|
+
{ campus: :brookhaven, prefix: 1 },
|
|
23
|
+
{ campus: :brookhaven, prefix: 2 },
|
|
24
|
+
{ campus: :brookhaven, prefix: 3 },
|
|
25
|
+
{ campus: :brookhaven, prefix: 4 },
|
|
26
|
+
{ campus: :brookhaven, prefix: 5 },
|
|
27
|
+
{ campus: :brookhaven, prefix: 6 },
|
|
28
|
+
{ campus: :brookhaven, prefix: 11 },
|
|
29
|
+
{ campus: :brookhaven, prefix: 13 },
|
|
30
|
+
{ campus: :brookhaven, prefix: 14 },
|
|
31
|
+
{ campus: :brookhaven, prefix: 16 },
|
|
32
|
+
{ campus: :brookhaven, prefix: 21 },
|
|
33
|
+
{ campus: :brookhaven, prefix: 22 },
|
|
34
|
+
{ campus: :brookhaven, prefix: 23 },
|
|
35
|
+
{ campus: :brookhaven, prefix: 25 },
|
|
36
|
+
{ campus: :brookhaven, prefix: 34 },
|
|
37
|
+
{ campus: :brookhaven, prefix: 51 },
|
|
38
|
+
{ campus: :brookhaven, prefix: 52 },
|
|
39
|
+
{ campus: :brookhaven, prefix: 54 },
|
|
40
|
+
{ campus: :brookhaven, prefix: 55 },
|
|
41
|
+
{ campus: :brookhaven, prefix: 56 },
|
|
42
|
+
{ campus: :brookhaven, prefix: 57 },
|
|
43
|
+
{ campus: :brookhaven, prefix: 58 },
|
|
44
|
+
{ campus: :brookhaven, prefix: 59 },
|
|
45
|
+
{ campus: :brookhaven, prefix: 65 },
|
|
46
|
+
{ campus: :cincinnati, prefix: 30 },
|
|
47
|
+
{ campus: :cincinnati, prefix: 32 },
|
|
48
|
+
{ campus: :cincinnati, prefix: 35 },
|
|
49
|
+
{ campus: :cincinnati, prefix: 36 },
|
|
50
|
+
{ campus: :cincinnati, prefix: 37 },
|
|
51
|
+
{ campus: :cincinnati, prefix: 38 },
|
|
52
|
+
{ campus: :cincinnati, prefix: 61 },
|
|
53
|
+
{ campus: :fresno, prefix: 15 },
|
|
54
|
+
{ campus: :fresno, prefix: 24 },
|
|
55
|
+
{ campus: :kansas_city, prefix: 40 },
|
|
56
|
+
{ campus: :kansas_city, prefix: 44 },
|
|
57
|
+
{ campus: :memphis, prefix: 94 },
|
|
58
|
+
{ campus: :memphis, prefix: 95 },
|
|
59
|
+
{ campus: :ogden, prefix: 80 },
|
|
60
|
+
{ campus: :ogden, prefix: 90 },
|
|
61
|
+
{ campus: :philadelphia, prefix: 33 },
|
|
62
|
+
{ campus: :philadelphia, prefix: 39 },
|
|
63
|
+
{ campus: :philadelphia, prefix: 41 },
|
|
64
|
+
{ campus: :philadelphia, prefix: 42 },
|
|
65
|
+
{ campus: :philadelphia, prefix: 43 },
|
|
66
|
+
{ campus: :philadelphia, prefix: 46 },
|
|
67
|
+
{ campus: :philadelphia, prefix: 48 },
|
|
68
|
+
{ campus: :philadelphia, prefix: 62 },
|
|
69
|
+
{ campus: :philadelphia, prefix: 63 },
|
|
70
|
+
{ campus: :philadelphia, prefix: 64 },
|
|
71
|
+
{ campus: :philadelphia, prefix: 66 },
|
|
72
|
+
{ campus: :philadelphia, prefix: 68 },
|
|
73
|
+
{ campus: :philadelphia, prefix: 71 },
|
|
74
|
+
{ campus: :philadelphia, prefix: 72 },
|
|
75
|
+
{ campus: :philadelphia, prefix: 73 },
|
|
76
|
+
{ campus: :philadelphia, prefix: 74 },
|
|
77
|
+
{ campus: :philadelphia, prefix: 75 },
|
|
78
|
+
{ campus: :philadelphia, prefix: 76 },
|
|
79
|
+
{ campus: :philadelphia, prefix: 77 },
|
|
80
|
+
{ campus: :philadelphia, prefix: 82 },
|
|
81
|
+
{ campus: :philadelphia, prefix: 83 },
|
|
82
|
+
{ campus: :philadelphia, prefix: 84 },
|
|
83
|
+
{ campus: :philadelphia, prefix: 85 },
|
|
84
|
+
{ campus: :philadelphia, prefix: 86 },
|
|
85
|
+
{ campus: :philadelphia, prefix: 87 },
|
|
86
|
+
{ campus: :philadelphia, prefix: 88 },
|
|
87
|
+
{ campus: :philadelphia, prefix: 91 },
|
|
88
|
+
{ campus: :philadelphia, prefix: 92 },
|
|
89
|
+
{ campus: :philadelphia, prefix: 93 },
|
|
90
|
+
{ campus: :philadelphia, prefix: 98 },
|
|
91
|
+
{ campus: :philadelphia, prefix: 99 },
|
|
92
|
+
{ campus: :internet, prefix: 20 },
|
|
93
|
+
{ campus: :internet, prefix: 26 },
|
|
94
|
+
{ campus: :internet, prefix: 27 },
|
|
95
|
+
{ campus: :internet, prefix: 45 },
|
|
96
|
+
{ campus: :internet, prefix: 46 },
|
|
97
|
+
{ campus: :internet, prefix: 47 },
|
|
98
|
+
{ campus: :internet, prefix: 81 },
|
|
99
|
+
{ campus: :internet, prefix: 82 },
|
|
100
|
+
{ campus: :internet, prefix: 83 },
|
|
101
|
+
{ campus: :small_business_administration, prefix: 31 }
|
|
102
|
+
]
|
|
103
|
+
|
|
104
|
+
ein_result_arr = []
|
|
105
|
+
(1..count).each do
|
|
106
|
+
this_ein_prefix_data_struct_index = Random.rand(ein_prefix_data_struct.length)
|
|
107
|
+
this_ein_prefix_data_struct = ein_prefix_data_struct[this_ein_prefix_data_struct_index]
|
|
108
|
+
this_ein_prefix_campus = this_ein_prefix_data_struct[:campus]
|
|
109
|
+
this_ein_prefix = format('%0.2d', this_ein_prefix_data_struct[:prefix])
|
|
110
|
+
this_ein_suffix = format('%0.7d', Random.rand(0..9_999_999))
|
|
111
|
+
this_ein = { campus: this_ein_prefix_campus, ein: "#{this_ein_prefix}-#{this_ein_suffix}" }
|
|
112
|
+
ein_result_arr.push(this_ein)
|
|
113
|
+
end
|
|
114
|
+
|
|
115
|
+
ein_result_arr
|
|
116
|
+
rescue StandardError => e
|
|
117
|
+
raise e
|
|
118
|
+
end
|
|
119
|
+
|
|
120
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
121
|
+
|
|
122
|
+
public_class_method def self.authors
|
|
123
|
+
"AUTHOR(S):
|
|
124
|
+
0day Inc. <support@0dayinc.com>
|
|
125
|
+
"
|
|
126
|
+
end
|
|
127
|
+
|
|
128
|
+
# Display Usage for this Module
|
|
129
|
+
|
|
130
|
+
public_class_method def self.help
|
|
131
|
+
puts "USAGE:
|
|
132
|
+
#{self}.generate(
|
|
133
|
+
count: 'required - number of EIN numbers to generate'
|
|
134
|
+
)
|
|
135
|
+
|
|
136
|
+
#{self}.authors
|
|
137
|
+
"
|
|
138
|
+
end
|
|
139
|
+
end
|
|
140
|
+
end
|
|
141
|
+
end
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'fileutils'
|
|
4
|
+
require 'shellwords'
|
|
5
|
+
require 'rubygems/package'
|
|
6
|
+
require 'zlib'
|
|
7
|
+
|
|
8
|
+
module PWN
|
|
9
|
+
module Plugins
|
|
10
|
+
# This plugin is primarily used for interacting with files and directories
|
|
11
|
+
# in addition to the capabilities already built within the File and FileUtils
|
|
12
|
+
# built-in ruby classes (e.g. contains an easy to use recursion method that
|
|
13
|
+
# uses yield to interact with each entry on the fly).
|
|
14
|
+
module FileFu
|
|
15
|
+
# Supported Method Parameters::
|
|
16
|
+
# PWN::Plugins::FileFu.recurse_in_dir(
|
|
17
|
+
# dir_path: 'optional path to dir defaults to .',
|
|
18
|
+
# include_extensions: 'optional - array of file extensions to search for in scan (e.g. ['.js', '.php'])',
|
|
19
|
+
# exclude_extensions: 'optional - array of file extensions to exclude from scan (e.g. ['.log', '.txt', '.spec'])'
|
|
20
|
+
# )
|
|
21
|
+
|
|
22
|
+
public_class_method def self.recurse_in_dir(opts = {})
|
|
23
|
+
dir_path = opts[:dir_path] ||= '.'
|
|
24
|
+
dir_path = dir_path.to_s.scrub unless dir_path.is_a?(String)
|
|
25
|
+
raise "PWN Error: Invalid Directory #{dir_path}" unless Dir.exist?(dir_path)
|
|
26
|
+
|
|
27
|
+
include_extensions = opts[:include_extensions] ||= []
|
|
28
|
+
exclude_extensions = opts[:exclude_extensions] ||= []
|
|
29
|
+
|
|
30
|
+
previous_dir = Dir.pwd
|
|
31
|
+
Dir.chdir(dir_path)
|
|
32
|
+
# Execute this like this:
|
|
33
|
+
# recurse_in_dir(:dir_path => 'path to dir') {|entry| puts entry}
|
|
34
|
+
Dir.glob('./**/*').each do |entry|
|
|
35
|
+
next if exclude_extensions.include?(File.extname(entry))
|
|
36
|
+
|
|
37
|
+
next unless include_extensions.empty? || include_extensions.include?(File.extname(entry))
|
|
38
|
+
|
|
39
|
+
yield Shellwords.escape(entry)
|
|
40
|
+
end
|
|
41
|
+
rescue StandardError => e
|
|
42
|
+
raise e
|
|
43
|
+
ensure
|
|
44
|
+
Dir.chdir(previous_dir) if Dir.exist?(previous_dir)
|
|
45
|
+
end
|
|
46
|
+
|
|
47
|
+
# Supported Method Parameters::
|
|
48
|
+
# PWN::Plugins::FileFu.untar_gz_file(
|
|
49
|
+
# tar_gz_file: 'required - path to .tar.gz file',
|
|
50
|
+
# destination: 'required - destination folder to save extracted contents'
|
|
51
|
+
# )
|
|
52
|
+
|
|
53
|
+
public_class_method def self.untar_gz_file(opts = {})
|
|
54
|
+
tar_gz_file = opts[:tar_gz_file].to_s.scrub if File.exist?(opts[:tar_gz_file].to_s.scrub)
|
|
55
|
+
destination = opts[:destination].to_s.scrub if Dir.exist?(File.dirname(tar_gz_file))
|
|
56
|
+
puts `tar -xzvf #{tar_gz_file} -C #{destination}`
|
|
57
|
+
|
|
58
|
+
nil
|
|
59
|
+
rescue StandardError => e
|
|
60
|
+
raise e
|
|
61
|
+
end
|
|
62
|
+
|
|
63
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
64
|
+
|
|
65
|
+
public_class_method def self.authors
|
|
66
|
+
"AUTHOR(S):
|
|
67
|
+
0day Inc. <support@0dayinc.com>
|
|
68
|
+
"
|
|
69
|
+
end
|
|
70
|
+
|
|
71
|
+
# Display Usage for this Module
|
|
72
|
+
|
|
73
|
+
public_class_method def self.help
|
|
74
|
+
puts "USAGE:
|
|
75
|
+
#{self}.recurse_in_dir(
|
|
76
|
+
dir_path: 'optional path to dir defaults to .',
|
|
77
|
+
include_extensions: 'optional - array of file extensions to search for in scan (e.g. ['.js', '.php'])',
|
|
78
|
+
exclude_extensions: 'optional - array of file extensions to exclude from scan (e.g. ['.log', '.txt', '.spec'])'
|
|
79
|
+
) do |entry|
|
|
80
|
+
puts entry
|
|
81
|
+
end
|
|
82
|
+
|
|
83
|
+
#{self}.untar_gz_file(
|
|
84
|
+
tar_gz_file: 'required - path to .tar.gz file',
|
|
85
|
+
destination: 'required - destination folder to save extracted contents'
|
|
86
|
+
)
|
|
87
|
+
|
|
88
|
+
#{self}.authors
|
|
89
|
+
"
|
|
90
|
+
end
|
|
91
|
+
end
|
|
92
|
+
end
|
|
93
|
+
end
|
|
@@ -0,0 +1,204 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'base64'
|
|
4
|
+
require 'cgi'
|
|
5
|
+
require 'htmlentities'
|
|
6
|
+
|
|
7
|
+
module PWN
|
|
8
|
+
module Plugins
|
|
9
|
+
# This plugin was created to support fuzzing various networking protocols
|
|
10
|
+
module Fuzz
|
|
11
|
+
# Supported Method Parameters::
|
|
12
|
+
# socket_fuzz_results_arr = PWN::Plugins::Fuzz.socket(
|
|
13
|
+
# target: 'required - target host or ip',
|
|
14
|
+
# port: 'required - target port',
|
|
15
|
+
# protocol: 'optional - :tcp || :udp (defaults to tcp)',
|
|
16
|
+
# tls: 'optional - boolean connect to target socket using TLS (defaults to false)',
|
|
17
|
+
# fuzz_delimeter: 'optional - fuzz delimeter used in request to specify where payloads should reside (defaults to \u2665)',
|
|
18
|
+
# request: 'required - String object of socket request w/ \u001A as fuzz delimeter (e.g. "GET /\u001A\u001A HTTP/1.1\r\nHost: \u001A127..0.0.1\u001A\r\n\r\n")',
|
|
19
|
+
# payload: 'required - payload string',
|
|
20
|
+
# encoding: 'optional - :base64 || :hex || :html_entity || :url (Defaults to nil)',
|
|
21
|
+
# encoding_depth: 'optional - number of times to encode payload (defaults to 1)',
|
|
22
|
+
# char_encoding: 'optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)',
|
|
23
|
+
# response_timeout: 'optional - float (defaults to 0.9)',
|
|
24
|
+
# request_rate_limit: 'optional - float (defaults to 0.3)'
|
|
25
|
+
# )
|
|
26
|
+
|
|
27
|
+
public_class_method def self.socket(opts = {})
|
|
28
|
+
target = opts[:target].to_s.scrub
|
|
29
|
+
port = opts[:port].to_i
|
|
30
|
+
protocol = opts[:protocol]
|
|
31
|
+
tls = opts[:tls]
|
|
32
|
+
opts[:encoding].nil? ? encoding = nil : encoding = opts[:encoding].to_s.strip.chomp.scrub.downcase.to_sym
|
|
33
|
+
opts[:encoding_depth].nil? ? encoding_depth = 1 : encoding_depth = opts[:encoding_depth].to_i
|
|
34
|
+
opts[:char_encoding].nil? ? char_encoding = 'UTF-8' : char_encoding = opts[:char_encoding].to_s
|
|
35
|
+
opts[:fuzz_delimeter].nil? ? fuzz_delimeter = "\u2665" : fuzz_delimeter = opts[:fuzz_delimeter]
|
|
36
|
+
request = opts[:request].to_s.encode(char_encoding, 'UTF-8')
|
|
37
|
+
payload = opts[:payload].to_s.encode(char_encoding, 'UTF-8')
|
|
38
|
+
|
|
39
|
+
if encoding
|
|
40
|
+
case encoding
|
|
41
|
+
when :base64
|
|
42
|
+
if encoding_depth > 1
|
|
43
|
+
(1..encoding_depth).each do
|
|
44
|
+
payload = Base64.strict_encode64(payload)
|
|
45
|
+
end
|
|
46
|
+
else
|
|
47
|
+
payload = Base64.strict_encode64(payload)
|
|
48
|
+
end
|
|
49
|
+
when :hex
|
|
50
|
+
if encoding_depth > 1
|
|
51
|
+
(1..encoding_depth).each do
|
|
52
|
+
hex_payload = ''
|
|
53
|
+
payload.each_byte { |b| hex_payload = "#{hex_payload}#{format('\x%02x', b)}" }
|
|
54
|
+
payload = hex_payload
|
|
55
|
+
end
|
|
56
|
+
else
|
|
57
|
+
hex_payload = ''
|
|
58
|
+
payload.each_byte { |b| hex_payload = "#{hex_payload}#{format('\x%02x', b)}" }
|
|
59
|
+
payload = hex_payload
|
|
60
|
+
end
|
|
61
|
+
when :html_entity
|
|
62
|
+
if encoding_depth > 1
|
|
63
|
+
(1..encoding_depth).each do
|
|
64
|
+
payload = HTMLEntities.new.encode(payload)
|
|
65
|
+
end
|
|
66
|
+
else
|
|
67
|
+
payload = HTMLEntities.new.encode(payload)
|
|
68
|
+
end
|
|
69
|
+
when :url
|
|
70
|
+
if encoding_depth > 1
|
|
71
|
+
(1..encoding_depth).each do
|
|
72
|
+
payload = CGI.escape(payload)
|
|
73
|
+
end
|
|
74
|
+
else
|
|
75
|
+
payload = CGI.escape(payload)
|
|
76
|
+
end
|
|
77
|
+
else
|
|
78
|
+
raise "Encoding type: #{encoding} not supported."
|
|
79
|
+
end
|
|
80
|
+
end
|
|
81
|
+
|
|
82
|
+
opts[:response_timeout].nil? ? response_timeout = 0.9 : response_timeout = opts[:response_timeout].to_f
|
|
83
|
+
opts[:request_rate_limit].nil? ? request_rate_limit = 0.3 : request_rate_limit = opts[:request_rate_limit].to_f
|
|
84
|
+
socket_fuzz_results_arr = []
|
|
85
|
+
|
|
86
|
+
# Find fuzz delimeter index numbers in request
|
|
87
|
+
request_delim_index_arr = []
|
|
88
|
+
request.each_char.with_index do |char, char_index|
|
|
89
|
+
request_delim_index_arr.push(char_index) if char == fuzz_delimeter
|
|
90
|
+
end
|
|
91
|
+
|
|
92
|
+
# request_delim_index_arr should always return an even length,
|
|
93
|
+
# otherwise the request is missing a fuzz delimeter.
|
|
94
|
+
request_delim_index_arr.each_slice(2).with_index do |placeholder_slice, placeholder_slice_index|
|
|
95
|
+
this_socket_fuzz_result = {}
|
|
96
|
+
begin_delim_char_index_shift_width = placeholder_slice_index * 2
|
|
97
|
+
begin_delim_char_index = placeholder_slice[0].to_i - begin_delim_char_index_shift_width
|
|
98
|
+
|
|
99
|
+
end_delim_char_index_shift_width = (placeholder_slice_index * 2) + 2
|
|
100
|
+
end_delim_char_index = placeholder_slice[1].to_i - end_delim_char_index_shift_width
|
|
101
|
+
|
|
102
|
+
this_request = request.dup.delete(fuzz_delimeter).encode(char_encoding, 'UTF-8')
|
|
103
|
+
|
|
104
|
+
if end_delim_char_index.positive?
|
|
105
|
+
this_request[begin_delim_char_index..end_delim_char_index] = payload
|
|
106
|
+
else
|
|
107
|
+
# begin_delim_char_index should always be 0
|
|
108
|
+
this_request[begin_delim_char_index] = payload
|
|
109
|
+
end
|
|
110
|
+
|
|
111
|
+
sock_obj = PWN::Plugins::Sock.connect(
|
|
112
|
+
target: target,
|
|
113
|
+
port: port,
|
|
114
|
+
protocol: protocol,
|
|
115
|
+
tls: tls
|
|
116
|
+
)
|
|
117
|
+
|
|
118
|
+
this_socket_fuzz_result[:timestamp] = Time.now.strftime('%Y-%m-%d %H:%M:%S.%9N %z').to_s
|
|
119
|
+
|
|
120
|
+
this_socket_fuzz_result[:request] = this_request
|
|
121
|
+
this_socket_fuzz_result[:request_encoding] = this_request.encoding.name
|
|
122
|
+
this_socket_fuzz_result[:request_len] = this_request.length
|
|
123
|
+
|
|
124
|
+
# Send Fuzz Payload in its rawest form (as long as it will undump first)
|
|
125
|
+
sock_obj.write(this_request.encode('ASCII-8BIT', undef: :replace).undump)
|
|
126
|
+
|
|
127
|
+
does_respond = sock_obj.wait_readable(response_timeout)
|
|
128
|
+
if does_respond
|
|
129
|
+
response = sock_obj.read
|
|
130
|
+
response_len = response.length
|
|
131
|
+
this_socket_fuzz_result[:response] = response.to_s.inspect
|
|
132
|
+
this_socket_fuzz_result[:response_len] = response_len
|
|
133
|
+
else
|
|
134
|
+
this_socket_fuzz_result[:response] = ''
|
|
135
|
+
this_socket_fuzz_result[:response_len] = 0
|
|
136
|
+
end
|
|
137
|
+
sleep request_rate_limit
|
|
138
|
+
sock_obj = PWN::Plugins::Sock.disconnect(sock_obj: sock_obj)
|
|
139
|
+
# TODO: dump into file once array reaches max length (avoid memory consumption issues)
|
|
140
|
+
socket_fuzz_results_arr.push(this_socket_fuzz_result)
|
|
141
|
+
rescue Errno::ECONNRESET => e
|
|
142
|
+
response = e.message
|
|
143
|
+
this_socket_fuzz_result[:response] = response
|
|
144
|
+
this_socket_fuzz_result[:response_len] = response.length
|
|
145
|
+
|
|
146
|
+
sleep request_rate_limit
|
|
147
|
+
sock_obj = PWN::Plugins::Sock.disconnect(sock_obj: sock_obj) unless sock_obj.nil?
|
|
148
|
+
# TODO: dump into file once array reaches max length (avoid memory consumption issues)
|
|
149
|
+
socket_fuzz_results_arr.push(this_socket_fuzz_result)
|
|
150
|
+
|
|
151
|
+
next
|
|
152
|
+
rescue StandardError => e
|
|
153
|
+
response = "#{e.class}: #{e.message} #{e.backtrace}"
|
|
154
|
+
this_socket_fuzz_result[:response] = response
|
|
155
|
+
this_socket_fuzz_result[:response_len] = response.length
|
|
156
|
+
|
|
157
|
+
sleep request_rate_limit
|
|
158
|
+
sock_obj = PWN::Plugins::Sock.disconnect(sock_obj: sock_obj) unless sock_obj.nil?
|
|
159
|
+
# TODO: dump into file once array reaches max length (avoid memory consumption issues)
|
|
160
|
+
socket_fuzz_results_arr.push(this_socket_fuzz_result)
|
|
161
|
+
|
|
162
|
+
next
|
|
163
|
+
end
|
|
164
|
+
|
|
165
|
+
socket_fuzz_results_arr
|
|
166
|
+
rescue StandardError => e
|
|
167
|
+
raise e
|
|
168
|
+
ensure
|
|
169
|
+
sock_obj = PWN::Plugins::Sock.disconnect(sock_obj: sock_obj) unless sock_obj.nil?
|
|
170
|
+
end
|
|
171
|
+
|
|
172
|
+
# Author(s):: 0day Inc. <support@0dayinc.com>
|
|
173
|
+
|
|
174
|
+
public_class_method def self.authors
|
|
175
|
+
"AUTHOR(S):
|
|
176
|
+
0day Inc. <support@0dayinc.com>
|
|
177
|
+
"
|
|
178
|
+
end
|
|
179
|
+
|
|
180
|
+
# Display Usage for this Module
|
|
181
|
+
|
|
182
|
+
public_class_method def self.help
|
|
183
|
+
puts "USAGE:
|
|
184
|
+
socket_fuzz_results_arr = #{self}.socket(
|
|
185
|
+
target: 'required = target host or ip',
|
|
186
|
+
port: 'required => target port',
|
|
187
|
+
protocol: 'optional => :tcp || :udp (defaults to tcp)',
|
|
188
|
+
tls: 'optional - boolean connect to target socket using TLS (defaults to false)',
|
|
189
|
+
fuzz_delimeter: \"optional - fuzz delimeter used in request to specify where payloads should reside (defaults to \u2665)\",
|
|
190
|
+
request: \"required - String object of socket request w/ \u2665 as fuzz delimeter (e.g. '\"GET /\u2665\u2665 HTTP/1.1\\r\\nHost: \u2665127.0.0.1\u2665\\r\\n\\r\\n\"')\",
|
|
191
|
+
payload: 'required - payload string',
|
|
192
|
+
encoding: 'optional - :base64 || :hex || :html_entity || :url (Defaults to nil)',
|
|
193
|
+
encoding_depth: 'optional - number of times to encode payload (defaults to 1)',
|
|
194
|
+
char_encoding: 'optional - character encoding returned by PWN::Plugins::Char.list_encoders (defaults to UTF-8)',
|
|
195
|
+
response_timeout: 'optional - float (defaults to 0.9)',
|
|
196
|
+
request_rate_limit: 'optional - float (defaults to 0.3)'
|
|
197
|
+
)
|
|
198
|
+
|
|
199
|
+
#{self}.authors
|
|
200
|
+
"
|
|
201
|
+
end
|
|
202
|
+
end
|
|
203
|
+
end
|
|
204
|
+
end
|
|
@@ -0,0 +1,159 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'shellwords'
|
|
4
|
+
|
|
5
|
+
module PWN
|
|
6
|
+
module Plugins
|
|
7
|
+
# Used primarily in the past to clone local repos and generate an
|
|
8
|
+
# html diff to be sent via email (deprecated). In the future this
|
|
9
|
+
# plugin may be used to expand upon capabilities required w/ Git.
|
|
10
|
+
module Git
|
|
11
|
+
@@logger = PWN::Plugins::PWNLogger.create
|
|
12
|
+
# Supported Method Parameters::
|
|
13
|
+
# PWN::Plugins::Git.gen_html_diff(
|
|
14
|
+
# repo: 'required git repo name',
|
|
15
|
+
# branch: 'required git repo branch (e.g. master, develop, etc)',
|
|
16
|
+
# since: 'optional date, otherwise default to last pull'
|
|
17
|
+
# )
|
|
18
|
+
|
|
19
|
+
public_class_method def self.gen_html_diff(opts = {})
|
|
20
|
+
git_repo_name = opts[:repo].to_s
|
|
21
|
+
git_repo_branch = opts[:branch].to_s
|
|
22
|
+
since_date = opts[:since]
|
|
23
|
+
|
|
24
|
+
git_pull_output = '<div style="background-color:#CCCCCC; white-space: pre-wrap; white-space: -moz-pre-wrap; white-space: -pre-wrap; white-space: -o-pre-wrap; word-wrap: break-word;">'
|
|
25
|
+
if since_date
|
|
26
|
+
git_pull_output << "<h3>#{git_repo_name}->#{git_repo_branch} Diff Summary Since #{since_date}</h3>"
|
|
27
|
+
git_entity = `git log --since #{since_date} --stat-width=65535 --graph`.to_s.scrub
|
|
28
|
+
else
|
|
29
|
+
git_pull_output << "<h3>#{git_repo_name}->#{git_repo_branch} Diff Summary Since Last Pull</h3>"
|
|
30
|
+
git_entity = `git log ORIG_HEAD.. --stat-width=65535 --graph 2> /dev/null`.to_s.scrub
|
|
31
|
+
end
|
|
32
|
+
# For debugging purposes
|
|
33
|
+
@@logger.info(git_entity)
|
|
34
|
+
git_pull_output << git_entity.gsub("\n", '<br />')
|
|
35
|
+
git_pull_output << '</div>'
|
|
36
|
+
git_pull_output << '<br />'
|
|
37
|
+
|
|
38
|
+
git_pull_output
|
|
39
|
+
rescue StandardError => e
|
|
40
|
+
raise e
|
|
41
|
+
end
|
|
42
|
+
|
|
43
|
+
# Supported Method Parameters::
|
|
44
|
+
# get_author_by_line_range(
|
|
45
|
+
# repo_root: 'optional path to git repo root (defaults to ".")'
|
|
46
|
+
# from_line: 'required line number to start in range',
|
|
47
|
+
# to_line: 'required line number to stop in range',
|
|
48
|
+
# target_file: 'require file in which line range is queried'
|
|
49
|
+
# )
|
|
50
|
+
|
|
51
|
+
private_class_method def self.get_author_by_line_range(opts = {})
|
|
52
|
+
repo_root = opts[:repo_root] ||= '.'
|
|
53
|
+
repo_root = opts[:repo_root].to_s unless repo_root.is_a?(String)
|
|
54
|
+
from_line = opts[:from_line].to_i
|
|
55
|
+
to_line = opts[:to_line].to_i
|
|
56
|
+
target_file = opts[:target_file].to_s
|
|
57
|
+
target_file.gsub!(%r{^#{repo_root}/}, '')
|
|
58
|
+
|
|
59
|
+
`git --git-dir="#{Shellwords.escape(repo_root)}/.git" log -L #{from_line},#{to_line}:"#{Shellwords.escape(target_file)}" 2> /dev/null | grep Author | head -n 1`.to_s.scrub if File.directory?(repo_root) && File.file?("#{repo_root}/#{target_file}")
|
|
60
|
+
rescue StandardError => e
|
|
61
|
+
raise e
|
|
62
|
+
end
|
|
63
|
+
|
|
64
|
+
# Supported Method Parameters::
|
|
65
|
+
# PWN::Plugins::Git.dump_all_repo_branches(
|
|
66
|
+
# git_url: 'required git repo url'
|
|
67
|
+
# )
|
|
68
|
+
|
|
69
|
+
public_class_method def self.dump_all_repo_branches(opts = {})
|
|
70
|
+
git_url = opts[:git_url].to_s.scrub
|
|
71
|
+
`git ls-remote #{git_url} 2> /dev/null`.to_s.scrub
|
|
72
|
+
rescue StandardError => e
|
|
73
|
+
raise e
|
|
74
|
+
end
|
|
75
|
+
|
|
76
|
+
# Supported Method Parameters::
|
|
77
|
+
# get_author(
|
|
78
|
+
# repo_root: dir_path,
|
|
79
|
+
# from_line: line_no,
|
|
80
|
+
# to_line:line_no,
|
|
81
|
+
# target_file: entry,
|
|
82
|
+
# entry_beautified: entry_beautified
|
|
83
|
+
# )
|
|
84
|
+
|
|
85
|
+
public_class_method def self.get_author(opts = {})
|
|
86
|
+
repo_root = opts[:repo_root]
|
|
87
|
+
from_line = opts[:from_line]
|
|
88
|
+
to_line = opts[:to_line]
|
|
89
|
+
target_file = opts[:target_file]
|
|
90
|
+
entry_beautified = opts[:entry_beautified]
|
|
91
|
+
|
|
92
|
+
# In order to get the original author
|
|
93
|
+
# we need to query the original file
|
|
94
|
+
# instead of the .JS-BEAUTIFIED file
|
|
95
|
+
if entry_beautified
|
|
96
|
+
target_file.gsub!(/\.JS-BEAUTIFIED$/, '')
|
|
97
|
+
target_file_line_length = `wc -l #{target_file}`.split.first.to_i
|
|
98
|
+
target_file_line_length = 1 if target_file_line_length < 1 # wc -l doesn't count line is \n is missing
|
|
99
|
+
|
|
100
|
+
author = get_author_by_line_range(
|
|
101
|
+
repo_root: repo_root,
|
|
102
|
+
from_line: 1,
|
|
103
|
+
to_line: target_file_line_length,
|
|
104
|
+
target_file: target_file
|
|
105
|
+
)
|
|
106
|
+
else
|
|
107
|
+
if from_line.to_i && to_line.to_i < 1
|
|
108
|
+
from_line = 1
|
|
109
|
+
to_line = 1
|
|
110
|
+
end
|
|
111
|
+
author = get_author_by_line_range(
|
|
112
|
+
repo_root: repo_root,
|
|
113
|
+
from_line: from_line,
|
|
114
|
+
to_line: to_line,
|
|
115
|
+
target_file: target_file
|
|
116
|
+
)
|
|
117
|
+
end
|
|
118
|
+
|
|
119
|
+
author ||= 'N/A'
|
|
120
|
+
rescue StandardError => e
|
|
121
|
+
raise e
|
|
122
|
+
end
|
|
123
|
+
|
|
124
|
+
# Author(s):: Jacob Hoopes <jake.hoopes@gmail.com>
|
|
125
|
+
|
|
126
|
+
public_class_method def self.authors
|
|
127
|
+
"AUTHOR(S):
|
|
128
|
+
Jacob Hoopes <jake.hoopes@gmail.com>
|
|
129
|
+
"
|
|
130
|
+
end
|
|
131
|
+
|
|
132
|
+
# Display Usage for this Module
|
|
133
|
+
|
|
134
|
+
public_class_method def self.help
|
|
135
|
+
puts %{USAGE:
|
|
136
|
+
git_html_resp = #{self}.gen_html_diff(
|
|
137
|
+
repo: 'required git repo name',
|
|
138
|
+
branch: 'required git repo branch (e.g. master, develop, etc)',
|
|
139
|
+
since: 'optional date, otherwise default to last pull'
|
|
140
|
+
)
|
|
141
|
+
|
|
142
|
+
author = #{self}.get_author(
|
|
143
|
+
repo_root: 'optional path to git repo root (defaults to ".")'
|
|
144
|
+
from_line: 'required line number to start in range',
|
|
145
|
+
to_line: 'required line number to stop in range',
|
|
146
|
+
target_file: 'required file in which line range is queried'
|
|
147
|
+
entry_beautified: 'required boolean'
|
|
148
|
+
)
|
|
149
|
+
|
|
150
|
+
all_repo_branches = #{self}.dump_all_repo_branches(
|
|
151
|
+
git_url: 'required git repo url'
|
|
152
|
+
)
|
|
153
|
+
|
|
154
|
+
#{self}.authors
|
|
155
|
+
}
|
|
156
|
+
end
|
|
157
|
+
end
|
|
158
|
+
end
|
|
159
|
+
end
|