RubyGems - pwn - Versions diffs - 0.5.509 → 0.5.510 - Mend

pwn 0.5.509 → 0.5.510

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1057) hide show

checksums.yaml +4 -4
data/.github/FUNDING.yml +1 -0
data/.github/ISSUE_TEMPLATE/bug_report.md +38 -0
data/.gitignore +65 -0
data/.rubocop.yml +35 -0
data/.rubocop_todo.yml +178 -0
data/.ruby-gemset +1 -0
data/.ruby-version +1 -0
data/.travis.yml +24 -0
data/CHANGELOG_BETWEEN_TAGS.txt +185 -0
data/CODE_OF_CONDUCT.md +46 -0
data/CONTRIBUTING.md +13 -0
data/Gemfile +107 -0
data/LICENSE.txt +22 -0
data/README.md +100 -0
data/Rakefile +20 -0
data/Vagrantfile +250 -0
data/bin/pwn +30 -0
data/bin/pwn_android_war_dialer +151 -0
data/bin/pwn_autoinc_version +58 -0
data/bin/pwn_aws_describe_resources +717 -0
data/bin/pwn_bdba_groups +107 -0
data/bin/pwn_bdba_scan +198 -0
data/bin/pwn_burp_suite_pro_active_rest_api_scan +167 -0
data/bin/pwn_burp_suite_pro_active_scan +132 -0
data/bin/pwn_char_base64_encoding +15 -0
data/bin/pwn_char_dec_encoding +14 -0
data/bin/pwn_char_hex_escaped_encoding +17 -0
data/bin/pwn_char_html_entity_encoding +15 -0
data/bin/pwn_char_unicode_escaped_encoding +14 -0
data/bin/pwn_char_url_encoding +15 -0
data/bin/pwn_crt_sh +73 -0
data/bin/pwn_defectdojo_engagement_create +148 -0
data/bin/pwn_defectdojo_importscan +130 -0
data/bin/pwn_defectdojo_reimportscan +118 -0
data/bin/pwn_diff_csv_files_w_column_exclude +171 -0
data/bin/pwn_domain_reversewhois +76 -0
data/bin/pwn_fuzz_net_app_proto +170 -0
data/bin/pwn_gqrx_scanner +196 -0
data/bin/pwn_jenkins_create_job +58 -0
data/bin/pwn_jenkins_create_view +58 -0
data/bin/pwn_jenkins_install_plugin +83 -0
data/bin/pwn_jenkins_thinBackup_aws_s3 +113 -0
data/bin/pwn_jenkins_update_plugins +77 -0
data/bin/pwn_jenkins_useradd +76 -0
data/bin/pwn_mail_agent +114 -0
data/bin/pwn_msf_postgres_login +28 -0
data/bin/pwn_nessus_cloud_scan_crud +334 -0
data/bin/pwn_nessus_cloud_vulnscan +87 -0
data/bin/pwn_nexpose +42 -0
data/bin/pwn_nmap_discover_tcp_udp +353 -0
data/bin/pwn_openvas_vulnscan +104 -0
data/bin/pwn_pastebin_sample_filter +47 -0
data/bin/pwn_phone +129 -0
data/bin/pwn_rdoc_to_jsonl +83 -0
data/bin/pwn_sast +183 -0
data/bin/pwn_serial_check_voicemail +56 -0
data/bin/pwn_serial_msr206 +168 -0
data/bin/pwn_serial_qualcomm_commands +16 -0
data/bin/pwn_serial_son_micro_sm132_rfid +188 -0
data/bin/pwn_shodan_graphql_introspection +304 -0
data/bin/pwn_shodan_search +90 -0
data/bin/pwn_simple_http_server +44 -0
data/bin/pwn_web_cache_deception +205 -0
data/bin/pwn_www_checkip +77 -0
data/bin/pwn_www_uri_buster +363 -0
data/bin/pwn_xss_dom_vectors +149 -0
data/bin/pwn_zaproxy_active_rest_api_scan +159 -0
data/bin/pwn_zaproxy_active_scan +130 -0
data/build_pwn_gem.sh +33 -0
data/documentation/PWN.png +0 -0
data/documentation/PWN_Contributors_and_Users.png +0 -0
data/documentation/fax-spectrogram.png +0 -0
data/documentation/fax-waveform.png +0 -0
data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt +54 -0
data/documentation/pwn_android_war_dialer_session.png +0 -0
data/documentation/pwn_install.png +0 -0
data/documentation/pwn_wallpaper.jpg +0 -0
data/documentation/ringing-spectrogram.png +0 -0
data/documentation/ringing-waveform.png +0 -0
data/etc/systemd/msfrpcd.service +12 -0
data/etc/systemd/openvas.service +14 -0
data/etc/userland/aws/apache2/jenkins_443.conf +90 -0
data/etc/userland/aws/apache2/jenkins_80.conf +7 -0
data/etc/userland/aws/apache2/openvas_443.conf +87 -0
data/etc/userland/aws/apache2/openvas_80.conf +7 -0
data/etc/userland/aws/apache2/sast_443.conf +87 -0
data/etc/userland/aws/apache2/sast_80.conf +9 -0
data/etc/userland/aws/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/aws/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/aws/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/aws/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/aws/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/aws/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/aws/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/aws/jenkins/jenkins +81 -0
data/etc/userland/aws/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/aws/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/aws/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/aws/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/aws/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/aws/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/aws/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/aws/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/aws/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/aws/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/aws/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/aws/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/aws/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/aws/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/aws/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/aws/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/aws/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/aws/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/aws/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/aws/vagrant.yaml.EXAMPLE +35 -0
data/etc/userland/docker/apache2/jenkins_443.conf +90 -0
data/etc/userland/docker/apache2/jenkins_80.conf +7 -0
data/etc/userland/docker/apache2/openvas_443.conf +87 -0
data/etc/userland/docker/apache2/openvas_80.conf +7 -0
data/etc/userland/docker/apache2/sast_443.conf +87 -0
data/etc/userland/docker/apache2/sast_80.conf +9 -0
data/etc/userland/docker/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/docker/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/docker/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/docker/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/docker/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/docker/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/docker/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/docker/jenkins/jenkins +81 -0
data/etc/userland/docker/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/docker/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/docker/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/docker/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/docker/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/docker/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/docker/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/docker/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/docker/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/docker/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/docker/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/docker/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/docker/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/docker/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/docker/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/docker/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/docker/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/docker/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/docker/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/qemu/apache2/jenkins_443.conf +90 -0
data/etc/userland/qemu/apache2/jenkins_80.conf +7 -0
data/etc/userland/qemu/apache2/openvas_443.conf +87 -0
data/etc/userland/qemu/apache2/openvas_80.conf +7 -0
data/etc/userland/qemu/apache2/sast_443.conf +87 -0
data/etc/userland/qemu/apache2/sast_80.conf +9 -0
data/etc/userland/qemu/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/qemu/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/qemu/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/qemu/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/qemu/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/qemu/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/qemu/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/qemu/jenkins/jenkins +81 -0
data/etc/userland/qemu/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/qemu/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/qemu/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/qemu/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/qemu/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/qemu/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/qemu/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/qemu/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/qemu/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/qemu/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/qemu/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/qemu/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/qemu/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/qemu/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/qemu/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/qemu/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/qemu/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/qemu/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/qemu/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/ruby-gem/apache2/jenkins_443.conf +90 -0
data/etc/userland/ruby-gem/apache2/jenkins_80.conf +7 -0
data/etc/userland/ruby-gem/apache2/openvas_443.conf +87 -0
data/etc/userland/ruby-gem/apache2/openvas_80.conf +7 -0
data/etc/userland/ruby-gem/apache2/sast_443.conf +87 -0
data/etc/userland/ruby-gem/apache2/sast_80.conf +9 -0
data/etc/userland/ruby-gem/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/ruby-gem/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/ruby-gem/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/ruby-gem/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/ruby-gem/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/ruby-gem/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/ruby-gem/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/ruby-gem/jenkins/jenkins +81 -0
data/etc/userland/ruby-gem/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/ruby-gem/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/ruby-gem/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/ruby-gem/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/ruby-gem/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/ruby-gem/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/ruby-gem/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/ruby-gem/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/ruby-gem/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/ruby-gem/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/ruby-gem/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/ruby-gem/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/ruby-gem/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/virtualbox/apache2/jenkins_443.conf +90 -0
data/etc/userland/virtualbox/apache2/jenkins_80.conf +7 -0
data/etc/userland/virtualbox/apache2/openvas_443.conf +87 -0
data/etc/userland/virtualbox/apache2/openvas_80.conf +7 -0
data/etc/userland/virtualbox/apache2/sast_443.conf +87 -0
data/etc/userland/virtualbox/apache2/sast_80.conf +9 -0
data/etc/userland/virtualbox/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/virtualbox/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/virtualbox/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/virtualbox/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/virtualbox/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/virtualbox/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/virtualbox/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/virtualbox/jenkins/jenkins +81 -0
data/etc/userland/virtualbox/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/virtualbox/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/virtualbox/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/virtualbox/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/virtualbox/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/virtualbox/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/virtualbox/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/virtualbox/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/virtualbox/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/virtualbox/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/virtualbox/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/virtualbox/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/virtualbox/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/virtualbox/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/vmware/apache2/jenkins_443.conf +90 -0
data/etc/userland/vmware/apache2/jenkins_80.conf +7 -0
data/etc/userland/vmware/apache2/openvas_443.conf +87 -0
data/etc/userland/vmware/apache2/openvas_80.conf +7 -0
data/etc/userland/vmware/apache2/sast_443.conf +87 -0
data/etc/userland/vmware/apache2/sast_80.conf +9 -0
data/etc/userland/vmware/apache2/vagrant.yaml.EXAMPLE +9 -0
data/etc/userland/vmware/arachni/navigation-REST.instruct.EXAMPLE +29 -0
data/etc/userland/vmware/arachni/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/vmware/burpsuite/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/vmware/burpsuite/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/vmware/defectdojo/vagrant.yaml.EXAMPLE +3 -0
data/etc/userland/vmware/jenkins/inject_build_envs.sh +15 -0
data/etc/userland/vmware/jenkins/jenkins +81 -0
data/etc/userland/vmware/jenkins/jobs/pipeline-pwntemplate.xml +298 -0
data/etc/userland/vmware/jenkins/jobs/pipeline-selfupdate.xml +462 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-burpsuite.xml +44 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-owasp_zap.xml +35 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-DOMAIN-ssllabs-scan.xml +45 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-GITREPO_BRANCH-sast.xml +71 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_discovery_scan_tcp_udp_65k.xml +56 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-nmap_xml_results_searchsploit.xml +59 -0
data/etc/userland/vmware/jenkins/jobs/pwntemplate-NETWORKRANGE-openvas.xml +45 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-exploit-db.xml +43 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-gem.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-jenkins_plugins.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-metasploit.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-nmap_all_live_hosts.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_sync.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-openvas_wrappers.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-os.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-pwn.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-rvm.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-ssllabs-scan.xml +42 -0
data/etc/userland/vmware/jenkins/jobs/selfupdate-wpscan.xml +42 -0
data/etc/userland/vmware/jenkins/jobs_userland/.gitkeep +0 -0
data/etc/userland/vmware/jenkins/log_parser_rules/arachni.rules +5 -0
data/etc/userland/vmware/jenkins/log_parser_rules/sast.rules +2 -0
data/etc/userland/vmware/jenkins/log_parser_rules/self_update.rules +14 -0
data/etc/userland/vmware/jenkins/log_parser_rules/ssllabs-scan.rules +8 -0
data/etc/userland/vmware/jenkins/log_parser_rules/system_maintenance.rules +9 -0
data/etc/userland/vmware/jenkins/log_parser_rules/wpscan.rules +2 -0
data/etc/userland/vmware/jenkins/vagrant.yaml.EXAMPLE +8 -0
data/etc/userland/vmware/letsencrypt/vagrant.yaml.EXAMPLE +5 -0
data/etc/userland/vmware/metasploit/vagrant.yaml.EXAMPLE +4 -0
data/etc/userland/vmware/nessus/vagrant.yaml.EXAMPLE +15 -0
data/etc/userland/vmware/openvas/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/vmware/owasp_zap/navigation.instruct.EXAMPLE +3 -0
data/etc/userland/vmware/postgres/vagrant.yaml.EXAMPLE +2 -0
data/etc/userland/vmware/recon-ng/vagrant.yaml.EXAMPLE +52 -0
data/etc/userland/vmware/vagrant.yaml.EXAMPLE +5 -0
data/find_latest_gem_versions_per_Gemfile.sh +19 -0
data/git_commit_test_reinit_gem.sh +57 -0
data/install.sh +177 -0
data/lib/pwn/ai/grok.rb +258 -0
data/lib/pwn/ai/introspection.rb +100 -0
data/lib/pwn/ai/ollama.rb +260 -0
data/lib/pwn/ai/open_ai.rb +807 -0
data/lib/pwn/ai.rb +19 -0
data/lib/pwn/aws/acm.rb +92 -0
data/lib/pwn/aws/api_gateway.rb +92 -0
data/lib/pwn/aws/app_stream.rb +92 -0
data/lib/pwn/aws/application_auto_scaling.rb +92 -0
data/lib/pwn/aws/application_discovery_service.rb +92 -0
data/lib/pwn/aws/auto_scaling.rb +92 -0
data/lib/pwn/aws/batch.rb +92 -0
data/lib/pwn/aws/budgets.rb +92 -0
data/lib/pwn/aws/cloud_formation.rb +92 -0
data/lib/pwn/aws/cloud_front.rb +92 -0
data/lib/pwn/aws/cloud_hsm.rb +92 -0
data/lib/pwn/aws/cloud_search.rb +92 -0
data/lib/pwn/aws/cloud_search_domain.rb +92 -0
data/lib/pwn/aws/cloud_trail.rb +92 -0
data/lib/pwn/aws/cloud_watch.rb +92 -0
data/lib/pwn/aws/cloud_watch_events.rb +92 -0
data/lib/pwn/aws/cloud_watch_logs.rb +92 -0
data/lib/pwn/aws/code_build.rb +92 -0
data/lib/pwn/aws/code_commit.rb +92 -0
data/lib/pwn/aws/code_deploy.rb +92 -0
data/lib/pwn/aws/code_pipeline.rb +92 -0
data/lib/pwn/aws/cognito_identity.rb +92 -0
data/lib/pwn/aws/cognito_identity_provider.rb +92 -0
data/lib/pwn/aws/cognito_sync.rb +92 -0
data/lib/pwn/aws/config_service.rb +92 -0
data/lib/pwn/aws/data_pipleline.rb +92 -0
data/lib/pwn/aws/database_migration_service.rb +92 -0
data/lib/pwn/aws/device_farm.rb +92 -0
data/lib/pwn/aws/direct_connect.rb +92 -0
data/lib/pwn/aws/directory_service.rb +92 -0
data/lib/pwn/aws/dynamo_db.rb +92 -0
data/lib/pwn/aws/dynamo_db_streams.rb +92 -0
data/lib/pwn/aws/ec2.rb +92 -0
data/lib/pwn/aws/ecr.rb +92 -0
data/lib/pwn/aws/ecs.rb +92 -0
data/lib/pwn/aws/efs.rb +92 -0
data/lib/pwn/aws/elasti_cache.rb +92 -0
data/lib/pwn/aws/elastic_beanstalk.rb +89 -0
data/lib/pwn/aws/elastic_load_balancing.rb +92 -0
data/lib/pwn/aws/elastic_load_balancing_v2.rb +92 -0
data/lib/pwn/aws/elastic_transcoder.rb +92 -0
data/lib/pwn/aws/elasticsearch_service.rb +92 -0
data/lib/pwn/aws/emr.rb +92 -0
data/lib/pwn/aws/firehose.rb +92 -0
data/lib/pwn/aws/game_lift.rb +92 -0
data/lib/pwn/aws/glacier.rb +92 -0
data/lib/pwn/aws/health.rb +92 -0
data/lib/pwn/aws/iam.rb +200 -0
data/lib/pwn/aws/import_export.rb +92 -0
data/lib/pwn/aws/inspector.rb +92 -0
data/lib/pwn/aws/iot.rb +92 -0
data/lib/pwn/aws/iot_data_plane.rb +92 -0
data/lib/pwn/aws/kinesis.rb +92 -0
data/lib/pwn/aws/kinesis_analytics.rb +92 -0
data/lib/pwn/aws/kms.rb +92 -0
data/lib/pwn/aws/lambda.rb +92 -0
data/lib/pwn/aws/lambda_preview.rb +92 -0
data/lib/pwn/aws/lex.rb +92 -0
data/lib/pwn/aws/lightsail.rb +92 -0
data/lib/pwn/aws/machine_learning.rb +92 -0
data/lib/pwn/aws/marketplace_commerce_analytics.rb +92 -0
data/lib/pwn/aws/marketplace_metering.rb +92 -0
data/lib/pwn/aws/ops_works.rb +92 -0
data/lib/pwn/aws/ops_works_cm.rb +92 -0
data/lib/pwn/aws/pinpoint.rb +92 -0
data/lib/pwn/aws/polly.rb +92 -0
data/lib/pwn/aws/rds.rb +92 -0
data/lib/pwn/aws/redshift.rb +92 -0
data/lib/pwn/aws/rekognition.rb +92 -0
data/lib/pwn/aws/route53.rb +92 -0
data/lib/pwn/aws/route53_domains.rb +92 -0
data/lib/pwn/aws/s3.rb +92 -0
data/lib/pwn/aws/service_catalog.rb +92 -0
data/lib/pwn/aws/ses.rb +92 -0
data/lib/pwn/aws/shield.rb +92 -0
data/lib/pwn/aws/simple_db.rb +92 -0
data/lib/pwn/aws/sms.rb +92 -0
data/lib/pwn/aws/snowball.rb +92 -0
data/lib/pwn/aws/sns.rb +92 -0
data/lib/pwn/aws/sqs.rb +92 -0
data/lib/pwn/aws/ssm.rb +92 -0
data/lib/pwn/aws/states.rb +92 -0
data/lib/pwn/aws/storage_gateway.rb +92 -0
data/lib/pwn/aws/sts.rb +63 -0
data/lib/pwn/aws/support.rb +92 -0
data/lib/pwn/aws/swf.rb +92 -0
data/lib/pwn/aws/waf.rb +92 -0
data/lib/pwn/aws/waf_regional.rb +92 -0
data/lib/pwn/aws/workspaces.rb +92 -0
data/lib/pwn/aws/x_ray.rb +92 -0
data/lib/pwn/aws.rb +105 -0
data/lib/pwn/banner/anon.rb +50 -0
data/lib/pwn/banner/bubble.rb +42 -0
data/lib/pwn/banner/cheshire.rb +58 -0
data/lib/pwn/banner/code_cave.rb +1035 -0
data/lib/pwn/banner/dont_panic.rb +52 -0
data/lib/pwn/banner/f_society.rb +60 -0
data/lib/pwn/banner/fork_bomb.rb +39 -0
data/lib/pwn/banner/jmp_esp.rb +44 -0
data/lib/pwn/banner/matrix.rb +206 -0
data/lib/pwn/banner/ninja.rb +55 -0
data/lib/pwn/banner/off_the_air.rb +73 -0
data/lib/pwn/banner/pirate.rb +62 -0
data/lib/pwn/banner/radare2.rb +41 -0
data/lib/pwn/banner/radare2_ai.rb +116 -0
data/lib/pwn/banner/white_rabbit.rb +55 -0
data/lib/pwn/banner.rb +108 -0
data/lib/pwn/blockchain/btc.rb +282 -0
data/lib/pwn/blockchain/eth.rb +160 -0
data/lib/pwn/blockchain.rb +17 -0
data/lib/pwn/config.rb +304 -0
data/lib/pwn/driver.rb +85 -0
data/lib/pwn/ffi/stdio.rb +41 -0
data/lib/pwn/ffi.rb +16 -0
data/lib/pwn/plugins/android.rb +1617 -0
data/lib/pwn/plugins/assembly.rb +275 -0
data/lib/pwn/plugins/authentication_helper.rb +86 -0
data/lib/pwn/plugins/baresip.rb +708 -0
data/lib/pwn/plugins/basic_auth.rb +63 -0
data/lib/pwn/plugins/beef.rb +312 -0
data/lib/pwn/plugins/black_duck_binary_analysis.rb +790 -0
data/lib/pwn/plugins/burp_suite.rb +2208 -0
data/lib/pwn/plugins/bus_pirate.rb +147 -0
data/lib/pwn/plugins/char.rb +474 -0
data/lib/pwn/plugins/credit_card.rb +105 -0
data/lib/pwn/plugins/dao_ldap.rb +131 -0
data/lib/pwn/plugins/dao_mongo.rb +96 -0
data/lib/pwn/plugins/dao_postgres.rb +224 -0
data/lib/pwn/plugins/dao_sqlite3.rb +125 -0
data/lib/pwn/plugins/defect_dojo.rb +841 -0
data/lib/pwn/plugins/detect_os.rb +71 -0
data/lib/pwn/plugins/ein.rb +141 -0
data/lib/pwn/plugins/file_fu.rb +93 -0
data/lib/pwn/plugins/fuzz.rb +204 -0
data/lib/pwn/plugins/git.rb +159 -0
data/lib/pwn/plugins/github.rb +137 -0
data/lib/pwn/plugins/hacker_one.rb +154 -0
data/lib/pwn/plugins/hunter.rb +160 -0
data/lib/pwn/plugins/ip_info.rb +264 -0
data/lib/pwn/plugins/irc.rb +312 -0
data/lib/pwn/plugins/jenkins.rb +537 -0
data/lib/pwn/plugins/jira_data_center.rb +676 -0
data/lib/pwn/plugins/json_pathify.rb +46 -0
data/lib/pwn/plugins/log.rb +123 -0
data/lib/pwn/plugins/mail_agent.rb +344 -0
data/lib/pwn/plugins/metasploit.rb +151 -0
data/lib/pwn/plugins/monkey_patch.rb +182 -0
data/lib/pwn/plugins/msr206.rb +1257 -0
data/lib/pwn/plugins/nessus_cloud.rb +847 -0
data/lib/pwn/plugins/nexpose_vuln_scan.rb +356 -0
data/lib/pwn/plugins/nmap_it.rb +136 -0
data/lib/pwn/plugins/oauth2.rb +67 -0
data/lib/pwn/plugins/ocr.rb +43 -0
data/lib/pwn/plugins/open_api.rb +896 -0
data/lib/pwn/plugins/openvas.rb +314 -0
data/lib/pwn/plugins/packet.rb +1313 -0
data/lib/pwn/plugins/pdf_parse.rb +53 -0
data/lib/pwn/plugins/pony.rb +281 -0
data/lib/pwn/plugins/ps.rb +90 -0
data/lib/pwn/plugins/pwn_logger.rb +64 -0
data/lib/pwn/plugins/rabbit_mq.rb +70 -0
data/lib/pwn/plugins/repl.rb +999 -0
data/lib/pwn/plugins/scannable_codes.rb +87 -0
data/lib/pwn/plugins/serial.rb +273 -0
data/lib/pwn/plugins/shodan.rb +629 -0
data/lib/pwn/plugins/slack_client.rb +104 -0
data/lib/pwn/plugins/sock.rb +289 -0
data/lib/pwn/plugins/spider.rb +78 -0
data/lib/pwn/plugins/ssn.rb +52 -0
data/lib/pwn/plugins/thread_pool.rb +80 -0
data/lib/pwn/plugins/tor.rb +273 -0
data/lib/pwn/plugins/transparent_browser.rb +1738 -0
data/lib/pwn/plugins/twitter_api.rb +151 -0
data/lib/pwn/plugins/uri_scheme.rb +328 -0
data/lib/pwn/plugins/vault.rb +305 -0
data/lib/pwn/plugins/vin.rb +361 -0
data/lib/pwn/plugins/voice.rb +145 -0
data/lib/pwn/plugins/vsphere.rb +81 -0
data/lib/pwn/plugins/xxd.rb +298 -0
data/lib/pwn/plugins/zaproxy.rb +837 -0
data/lib/pwn/plugins.rb +81 -0
data/lib/pwn/reports/fuzz.rb +328 -0
data/lib/pwn/reports/html_footer.rb +160 -0
data/lib/pwn/reports/html_header.rb +271 -0
data/lib/pwn/reports/phone.rb +384 -0
data/lib/pwn/reports/sast.rb +435 -0
data/lib/pwn/reports/uri_buster.rb +335 -0
data/lib/pwn/reports.rb +25 -0
data/lib/pwn/sast/amqp_connect_as_guest.rb +78 -0
data/lib/pwn/sast/apache_file_system_util_api.rb +76 -0
data/lib/pwn/sast/aws.rb +77 -0
data/lib/pwn/sast/banned_function_calls_c.rb +207 -0
data/lib/pwn/sast/base64.rb +74 -0
data/lib/pwn/sast/beef_hook.rb +75 -0
data/lib/pwn/sast/cmd_execution_go_lang.rb +83 -0
data/lib/pwn/sast/cmd_execution_java.rb +80 -0
data/lib/pwn/sast/cmd_execution_python.rb +82 -0
data/lib/pwn/sast/cmd_execution_ruby.rb +90 -0
data/lib/pwn/sast/cmd_execution_scala.rb +80 -0
data/lib/pwn/sast/csrf.rb +74 -0
data/lib/pwn/sast/deserial_java.rb +85 -0
data/lib/pwn/sast/emoticon.rb +82 -0
data/lib/pwn/sast/eval.rb +76 -0
data/lib/pwn/sast/factory.rb +79 -0
data/lib/pwn/sast/http_authorization_header.rb +80 -0
data/lib/pwn/sast/inner_html.rb +76 -0
data/lib/pwn/sast/keystore.rb +75 -0
data/lib/pwn/sast/local_storage.rb +77 -0
data/lib/pwn/sast/location_hash.rb +76 -0
data/lib/pwn/sast/log4j.rb +78 -0
data/lib/pwn/sast/logger.rb +90 -0
data/lib/pwn/sast/md5.rb +75 -0
data/lib/pwn/sast/outer_html.rb +76 -0
data/lib/pwn/sast/padding_oracle.rb +72 -0
data/lib/pwn/sast/password.rb +75 -0
data/lib/pwn/sast/php_input_mechanisms.rb +84 -0
data/lib/pwn/sast/php_type_juggling.rb +82 -0
data/lib/pwn/sast/pom_version.rb +164 -0
data/lib/pwn/sast/port.rb +82 -0
data/lib/pwn/sast/post_message.rb +76 -0
data/lib/pwn/sast/private_key.rb +75 -0
data/lib/pwn/sast/redirect.rb +77 -0
data/lib/pwn/sast/redos.rb +82 -0
data/lib/pwn/sast/shell.rb +83 -0
data/lib/pwn/sast/signature.rb +75 -0
data/lib/pwn/sast/sql.rb +85 -0
data/lib/pwn/sast/ssl.rb +79 -0
data/lib/pwn/sast/sudo.rb +75 -0
data/lib/pwn/sast/task_tag.rb +89 -0
data/lib/pwn/sast/test_case_engine.rb +189 -0
data/lib/pwn/sast/throw_errors.rb +78 -0
data/lib/pwn/sast/token.rb +77 -0
data/lib/pwn/sast/type_script_type_juggling.rb +82 -0
data/lib/pwn/sast/use_after_free.rb +82 -0
data/lib/pwn/sast/version.rb +76 -0
data/lib/pwn/sast/window_location_hash.rb +75 -0
data/lib/pwn/sast.rb +67 -0
data/lib/pwn/sdr/decoder/gsm.rb +231 -0
data/lib/pwn/sdr/decoder.rb +19 -0
data/lib/pwn/sdr/flipper_zero.rb +128 -0
data/lib/pwn/sdr/frequency_allocation.rb +702 -0
data/lib/pwn/sdr/gqrx.rb +655 -0
data/lib/pwn/sdr/rfidler.rb +56 -0
data/lib/pwn/sdr/son_micro_rfid.rb +773 -0
data/lib/pwn/sdr.rb +21 -0
data/lib/pwn/version.rb +5 -0
data/lib/pwn/www/app_cobalt_io.rb +139 -0
data/lib/pwn/www/bing.rb +88 -0
data/lib/pwn/www/bug_crowd.rb +136 -0
data/lib/pwn/www/checkip.rb +69 -0
data/lib/pwn/www/coinbase_pro.rb +136 -0
data/lib/pwn/www/duckduckgo.rb +114 -0
data/lib/pwn/www/facebook.rb +124 -0
data/lib/pwn/www/google.rb +114 -0
data/lib/pwn/www/hacker_one.rb +649 -0
data/lib/pwn/www/linkedin.rb +124 -0
data/lib/pwn/www/pandora.rb +124 -0
data/lib/pwn/www/pastebin.rb +84 -0
data/lib/pwn/www/paypal.rb +208 -0
data/lib/pwn/www/synack.rb +136 -0
data/lib/pwn/www/torch.rb +107 -0
data/lib/pwn/www/trading_view.rb +127 -0
data/lib/pwn/www/twitter.rb +138 -0
data/lib/pwn/www/uber.rb +124 -0
data/lib/pwn/www/upwork.rb +124 -0
data/lib/pwn/www/wayback_machine.rb +113 -0
data/lib/pwn/www/youtube.rb +88 -0
data/lib/pwn/www.rb +36 -0
data/lib/pwn.rb +39 -0
data/packer/daemons/msfrpcd.rb +64 -0
data/packer/daemons/openvas.rb +51 -0
data/packer/deploy_docker_containers.sh +9 -0
data/packer/deploy_packer_box.sh +87 -0
data/packer/docker/kali_rolling_docker_pwn_fuzz_net_app_proto.json +44 -0
data/packer/docker/kali_rolling_docker_pwn_prototyper.json +48 -0
data/packer/docker/kali_rolling_docker_pwn_sast.json +44 -0
data/packer/docker/kali_rolling_docker_pwn_transparent_browser.json +46 -0
data/packer/docker/kali_rolling_docker_pwn_www_checkip.json +34 -0
data/packer/http/kali_rolling_preseed.cfg +81 -0
data/packer/kali_rolling_aws_ami.json +139 -0
data/packer/kali_rolling_qemu_kvm.json +159 -0
data/packer/kali_rolling_virtualbox.json +186 -0
data/packer/kali_rolling_vmware.json +167 -0
data/packer/packer_secrets.json.EXAMPLE +9 -0
data/packer/provisioners/PayloadsAllTheThings.sh +5 -0
data/packer/provisioners/SecLists.sh +5 -0
data/packer/provisioners/afl.sh +28 -0
data/packer/provisioners/aliases.rb +23 -0
data/packer/provisioners/amass.sh +5 -0
data/packer/provisioners/android.sh +18 -0
data/packer/provisioners/ansible.sh +5 -0
data/packer/provisioners/apache2.sh +24 -0
data/packer/provisioners/arachni.sh +28 -0
data/packer/provisioners/awscli.sh +5 -0
data/packer/provisioners/bashrc.sh +13 -0
data/packer/provisioners/beef.rb +23 -0
data/packer/provisioners/burpsuite.sh +24 -0
data/packer/provisioners/chrome.sh +11 -0
data/packer/provisioners/coreutils.sh +6 -0
data/packer/provisioners/curl.sh +6 -0
data/packer/provisioners/docker.sh +43 -0
data/packer/provisioners/docker_bashrc.sh +2 -0
data/packer/provisioners/docker_rvm.sh +22 -0
data/packer/provisioners/eyewitness.sh +5 -0
data/packer/provisioners/ffmpeg.sh +6 -0
data/packer/provisioners/firefox.sh +7 -0
data/packer/provisioners/fuzzdb.sh +5 -0
data/packer/provisioners/gdb.sh +5 -0
data/packer/provisioners/geckodriver.sh +9 -0
data/packer/provisioners/ghidra.sh +5 -0
data/packer/provisioners/git.sh +6 -0
data/packer/provisioners/init_image.sh +103 -0
data/packer/provisioners/install_vagrant_ssh_key.sh +15 -0
data/packer/provisioners/irc.sh +13 -0
data/packer/provisioners/jenkins.sh +77 -0
data/packer/provisioners/metasploit.rb +59 -0
data/packer/provisioners/nmap.sh +5 -0
data/packer/provisioners/openvas.sh +23 -0
data/packer/provisioners/openvas_wrappers.sh +4 -0
data/packer/provisioners/openvpn.sh +7 -0
data/packer/provisioners/peda.sh +4 -0
data/packer/provisioners/phantomjs.rb +28 -0
data/packer/provisioners/phantomjs_wrapper.sh +22 -0
data/packer/provisioners/post_install.sh +41 -0
data/packer/provisioners/postgresql.sh +49 -0
data/packer/provisioners/preeny.sh +8 -0
data/packer/provisioners/pwn.sh +100 -0
data/packer/provisioners/pwntools.sh +13 -0
data/packer/provisioners/radamsa.sh +7 -0
data/packer/provisioners/radare2.sh +29 -0
data/packer/provisioners/rc.local.sh +16 -0
data/packer/provisioners/reboot_os.sh +7 -0
data/packer/provisioners/ruby.sh +35 -0
data/packer/provisioners/rvm.sh +32 -0
data/packer/provisioners/scapy.sh +5 -0
data/packer/provisioners/scout2.sh +5 -0
data/packer/provisioners/sox.sh +5 -0
data/packer/provisioners/ssllabs-scan.sh +9 -0
data/packer/provisioners/strace.sh +5 -0
data/packer/provisioners/sublist3r.sh +5 -0
data/packer/provisioners/terminator.sh +5 -0
data/packer/provisioners/toggle_tor.sh +2 -0
data/packer/provisioners/tor.sh +5 -0
data/packer/provisioners/twinkle.sh +6 -0
data/packer/provisioners/update_os.sh +108 -0
data/packer/provisioners/upload_globals.sh +63 -0
data/packer/provisioners/vim.sh +23 -0
data/packer/provisioners/virtualbox_guest_additions.sh +20 -0
data/packer/provisioners/vmware_tools.sh +8 -0
data/packer/provisioners/wpscan.rb +23 -0
data/packer/provisioners/xrdp.sh +23 -0
data/packer/provisioners/zzuf.sh +5 -0
data/pwn.gemspec +77 -0
data/reinstall_pwn_gemset.sh +30 -0
data/spec/lib/pwn/ai/grok_spec.rb +15 -0
data/spec/lib/pwn/ai/introspection_spec.rb +15 -0
data/spec/lib/pwn/ai/ollama_spec.rb +15 -0
data/spec/lib/pwn/ai/open_ai_spec.rb +15 -0
data/spec/lib/pwn/ai_spec.rb +10 -0
data/spec/lib/pwn/aws/acm_spec.rb +15 -0
data/spec/lib/pwn/aws/api_gateway_spec.rb +15 -0
data/spec/lib/pwn/aws/app_stream_spec.rb +15 -0
data/spec/lib/pwn/aws/application_auto_scaling_spec.rb +15 -0
data/spec/lib/pwn/aws/application_discovery_service_spec.rb +15 -0
data/spec/lib/pwn/aws/auto_scaling_spec.rb +15 -0
data/spec/lib/pwn/aws/batch_spec.rb +15 -0
data/spec/lib/pwn/aws/budgets_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_formation_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_front_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_hsm_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_search_domain_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_search_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_trail_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_watch_events_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_watch_logs_spec.rb +15 -0
data/spec/lib/pwn/aws/cloud_watch_spec.rb +15 -0
data/spec/lib/pwn/aws/code_build_spec.rb +15 -0
data/spec/lib/pwn/aws/code_commit_spec.rb +15 -0
data/spec/lib/pwn/aws/code_deploy_spec.rb +15 -0
data/spec/lib/pwn/aws/code_pipeline_spec.rb +15 -0
data/spec/lib/pwn/aws/cognito_identity_provider_spec.rb +15 -0
data/spec/lib/pwn/aws/cognito_identity_spec.rb +15 -0
data/spec/lib/pwn/aws/cognito_sync_spec.rb +15 -0
data/spec/lib/pwn/aws/config_service_spec.rb +15 -0
data/spec/lib/pwn/aws/data_pipleline_spec.rb +15 -0
data/spec/lib/pwn/aws/database_migration_service_spec.rb +15 -0
data/spec/lib/pwn/aws/device_farm_spec.rb +15 -0
data/spec/lib/pwn/aws/direct_connect_spec.rb +15 -0
data/spec/lib/pwn/aws/directory_service_spec.rb +15 -0
data/spec/lib/pwn/aws/dynamo_db_spec.rb +15 -0
data/spec/lib/pwn/aws/dynamo_db_streams_spec.rb +15 -0
data/spec/lib/pwn/aws/ec2_spec.rb +15 -0
data/spec/lib/pwn/aws/ecr_spec.rb +15 -0
data/spec/lib/pwn/aws/ecs_spec.rb +15 -0
data/spec/lib/pwn/aws/efs_spec.rb +15 -0
data/spec/lib/pwn/aws/elasti_cache_spec.rb +15 -0
data/spec/lib/pwn/aws/elastic_beanstalk_spec.rb +15 -0
data/spec/lib/pwn/aws/elastic_load_balancing_spec.rb +15 -0
data/spec/lib/pwn/aws/elastic_load_balancing_v2_spec.rb +15 -0
data/spec/lib/pwn/aws/elastic_transcoder_spec.rb +15 -0
data/spec/lib/pwn/aws/elasticsearch_service_spec.rb +15 -0
data/spec/lib/pwn/aws/emr_spec.rb +15 -0
data/spec/lib/pwn/aws/firehose_spec.rb +15 -0
data/spec/lib/pwn/aws/game_lift_spec.rb +15 -0
data/spec/lib/pwn/aws/glacier_spec.rb +15 -0
data/spec/lib/pwn/aws/health_spec.rb +15 -0
data/spec/lib/pwn/aws/iam_spec.rb +15 -0
data/spec/lib/pwn/aws/import_export_spec.rb +15 -0
data/spec/lib/pwn/aws/inspector_spec.rb +15 -0
data/spec/lib/pwn/aws/iot_data_plane_spec.rb +15 -0
data/spec/lib/pwn/aws/iot_spec.rb +15 -0
data/spec/lib/pwn/aws/kinesis_analytics_spec.rb +15 -0
data/spec/lib/pwn/aws/kinesis_spec.rb +15 -0
data/spec/lib/pwn/aws/kms_spec.rb +15 -0
data/spec/lib/pwn/aws/lambda_preview_spec.rb +15 -0
data/spec/lib/pwn/aws/lambda_spec.rb +15 -0
data/spec/lib/pwn/aws/lex_spec.rb +15 -0
data/spec/lib/pwn/aws/lightsail_spec.rb +15 -0
data/spec/lib/pwn/aws/machine_learning_spec.rb +15 -0
data/spec/lib/pwn/aws/marketplace_commerce_analytics_spec.rb +15 -0
data/spec/lib/pwn/aws/marketplace_metering_spec.rb +15 -0
data/spec/lib/pwn/aws/ops_works_cm_spec.rb +15 -0
data/spec/lib/pwn/aws/ops_works_spec.rb +15 -0
data/spec/lib/pwn/aws/pinpoint_spec.rb +15 -0
data/spec/lib/pwn/aws/polly_spec.rb +15 -0
data/spec/lib/pwn/aws/rds_spec.rb +15 -0
data/spec/lib/pwn/aws/redshift_spec.rb +15 -0
data/spec/lib/pwn/aws/rekognition_spec.rb +15 -0
data/spec/lib/pwn/aws/route53_domains_spec.rb +15 -0
data/spec/lib/pwn/aws/route53_spec.rb +15 -0
data/spec/lib/pwn/aws/s3_spec.rb +15 -0
data/spec/lib/pwn/aws/service_catalog_spec.rb +15 -0
data/spec/lib/pwn/aws/ses_spec.rb +15 -0
data/spec/lib/pwn/aws/shield_spec.rb +15 -0
data/spec/lib/pwn/aws/simple_db_spec.rb +15 -0
data/spec/lib/pwn/aws/sms_spec.rb +15 -0
data/spec/lib/pwn/aws/snowball_spec.rb +15 -0
data/spec/lib/pwn/aws/sns_spec.rb +15 -0
data/spec/lib/pwn/aws/sqs_spec.rb +15 -0
data/spec/lib/pwn/aws/ssm_spec.rb +15 -0
data/spec/lib/pwn/aws/states_spec.rb +15 -0
data/spec/lib/pwn/aws/storage_gateway_spec.rb +15 -0
data/spec/lib/pwn/aws/sts_spec.rb +15 -0
data/spec/lib/pwn/aws/support_spec.rb +15 -0
data/spec/lib/pwn/aws/swf_spec.rb +15 -0
data/spec/lib/pwn/aws/waf_regional_spec.rb +15 -0
data/spec/lib/pwn/aws/waf_spec.rb +15 -0
data/spec/lib/pwn/aws/workspaces_spec.rb +15 -0
data/spec/lib/pwn/aws/x_ray_spec.rb +15 -0
data/spec/lib/pwn/aws_spec.rb +10 -0
data/spec/lib/pwn/banner/anon_spec.rb +20 -0
data/spec/lib/pwn/banner/bubble_spec.rb +20 -0
data/spec/lib/pwn/banner/cheshire_spec.rb +20 -0
data/spec/lib/pwn/banner/code_cave_spec.rb +20 -0
data/spec/lib/pwn/banner/dont_panic_spec.rb +20 -0
data/spec/lib/pwn/banner/f_society_spec.rb +20 -0
data/spec/lib/pwn/banner/fork_bomb_spec.rb +20 -0
data/spec/lib/pwn/banner/jmp_esp_spec.rb +20 -0
data/spec/lib/pwn/banner/matrix_spec.rb +20 -0
data/spec/lib/pwn/banner/ninja_spec.rb +20 -0
data/spec/lib/pwn/banner/off_the_air_spec.rb +20 -0
data/spec/lib/pwn/banner/pirate_spec.rb +20 -0
data/spec/lib/pwn/banner/radare2_ai_spec.rb +20 -0
data/spec/lib/pwn/banner/radare2_spec.rb +20 -0
data/spec/lib/pwn/banner/white_rabbit_spec.rb +20 -0
data/spec/lib/pwn/banner_spec.rb +15 -0
data/spec/lib/pwn/blockchain/btc_spec.rb +15 -0
data/spec/lib/pwn/blockchain/eth_spec.rb +15 -0
data/spec/lib/pwn/blockchain_spec.rb +10 -0
data/spec/lib/pwn/config_spec.rb +15 -0
data/spec/lib/pwn/driver_spec.rb +15 -0
data/spec/lib/pwn/ffi/stdio_spec.rb +15 -0
data/spec/lib/pwn/ffi_spec.rb +10 -0
data/spec/lib/pwn/plugins/android_spec.rb +15 -0
data/spec/lib/pwn/plugins/assembly_spec.rb +15 -0
data/spec/lib/pwn/plugins/authentication_helper_spec.rb +15 -0
data/spec/lib/pwn/plugins/baresip_spec.rb +15 -0
data/spec/lib/pwn/plugins/basic_auth_spec.rb +15 -0
data/spec/lib/pwn/plugins/beef_spec.rb +15 -0
data/spec/lib/pwn/plugins/black_duck_binary_analysis_spec.rb +15 -0
data/spec/lib/pwn/plugins/burp_suite_spec.rb +15 -0
data/spec/lib/pwn/plugins/bus_pirate_spec.rb +15 -0
data/spec/lib/pwn/plugins/char_spec.rb +15 -0
data/spec/lib/pwn/plugins/credit_card_spec.rb +15 -0
data/spec/lib/pwn/plugins/dao_ldap_spec.rb +15 -0
data/spec/lib/pwn/plugins/dao_mongo_spec.rb +15 -0
data/spec/lib/pwn/plugins/dao_postgres_spec.rb +15 -0
data/spec/lib/pwn/plugins/dao_sqlite3_spec.rb +15 -0
data/spec/lib/pwn/plugins/defect_dojo_spec.rb +15 -0
data/spec/lib/pwn/plugins/detect_os_spec.rb +15 -0
data/spec/lib/pwn/plugins/ein_spec.rb +15 -0
data/spec/lib/pwn/plugins/file_fu_spec.rb +15 -0
data/spec/lib/pwn/plugins/fuzz_spec.rb +15 -0
data/spec/lib/pwn/plugins/git_spec.rb +15 -0
data/spec/lib/pwn/plugins/github_spec.rb +15 -0
data/spec/lib/pwn/plugins/hacker_one_spec.rb +15 -0
data/spec/lib/pwn/plugins/hunter_spec.rb +15 -0
data/spec/lib/pwn/plugins/ip_info_spec.rb +15 -0
data/spec/lib/pwn/plugins/irc_spec.rb +15 -0
data/spec/lib/pwn/plugins/jenkins_spec.rb +15 -0
data/spec/lib/pwn/plugins/jira_data_center_spec.rb +15 -0
data/spec/lib/pwn/plugins/json_pathify_spec.rb +15 -0
data/spec/lib/pwn/plugins/log_spec.rb +15 -0
data/spec/lib/pwn/plugins/mail_agent_spec.rb +15 -0
data/spec/lib/pwn/plugins/metasploit_spec.rb +15 -0
data/spec/lib/pwn/plugins/monkey_patch_spec.rb +15 -0
data/spec/lib/pwn/plugins/msr206_spec.rb +15 -0
data/spec/lib/pwn/plugins/nessus_cloud_spec.rb +15 -0
data/spec/lib/pwn/plugins/nexpose_vuln_scan_spec.rb +15 -0
data/spec/lib/pwn/plugins/nmap_it_spec.rb +15 -0
data/spec/lib/pwn/plugins/oauth2_spec.rb +15 -0
data/spec/lib/pwn/plugins/ocr_spec.rb +15 -0
data/spec/lib/pwn/plugins/open_api_spec.rb +15 -0
data/spec/lib/pwn/plugins/openvas_spec.rb +15 -0
data/spec/lib/pwn/plugins/packet_spec.rb +15 -0
data/spec/lib/pwn/plugins/pdf_parse_spec.rb +15 -0
data/spec/lib/pwn/plugins/pony_spec.rb +15 -0
data/spec/lib/pwn/plugins/ps_spec.rb +15 -0
data/spec/lib/pwn/plugins/pwn_logger_spec.rb +15 -0
data/spec/lib/pwn/plugins/rabbit_mq_spec.rb +15 -0
data/spec/lib/pwn/plugins/repl_spec.rb +15 -0
data/spec/lib/pwn/plugins/scannable_codes_spec.rb +15 -0
data/spec/lib/pwn/plugins/serial_spec.rb +15 -0
data/spec/lib/pwn/plugins/shodan_spec.rb +15 -0
data/spec/lib/pwn/plugins/slack_client_spec.rb +15 -0
data/spec/lib/pwn/plugins/sock_spec.rb +15 -0
data/spec/lib/pwn/plugins/spider_spec.rb +15 -0
data/spec/lib/pwn/plugins/ssn_spec.rb +15 -0
data/spec/lib/pwn/plugins/thread_pool_spec.rb +15 -0
data/spec/lib/pwn/plugins/tor_spec.rb +15 -0
data/spec/lib/pwn/plugins/transparent_browser_spec.rb +15 -0
data/spec/lib/pwn/plugins/twitter_api_spec.rb +15 -0
data/spec/lib/pwn/plugins/uri_scheme_spec.rb +15 -0
data/spec/lib/pwn/plugins/vault_spec.rb +15 -0
data/spec/lib/pwn/plugins/vin_spec.rb +15 -0
data/spec/lib/pwn/plugins/voice_spec.rb +15 -0
data/spec/lib/pwn/plugins/vsphere_spec.rb +15 -0
data/spec/lib/pwn/plugins/xxd_spec.rb +15 -0
data/spec/lib/pwn/plugins/zaproxy_spec.rb +15 -0
data/spec/lib/pwn/plugins_spec.rb +10 -0
data/spec/lib/pwn/reports/fuzz_spec.rb +15 -0
data/spec/lib/pwn/reports/html_footer_spec.rb +15 -0
data/spec/lib/pwn/reports/html_header_spec.rb +15 -0
data/spec/lib/pwn/reports/phone_spec.rb +15 -0
data/spec/lib/pwn/reports/sast_spec.rb +15 -0
data/spec/lib/pwn/reports/uri_buster_spec.rb +15 -0
data/spec/lib/pwn/reports_spec.rb +10 -0
data/spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb +25 -0
data/spec/lib/pwn/sast/apache_file_system_util_api_spec.rb +25 -0
data/spec/lib/pwn/sast/aws_spec.rb +25 -0
data/spec/lib/pwn/sast/banned_function_calls_c_spec.rb +25 -0
data/spec/lib/pwn/sast/base64_spec.rb +25 -0
data/spec/lib/pwn/sast/beef_hook_spec.rb +25 -0
data/spec/lib/pwn/sast/cmd_execution_go_lang_spec.rb +25 -0
data/spec/lib/pwn/sast/cmd_execution_java_spec.rb +25 -0
data/spec/lib/pwn/sast/cmd_execution_python_spec.rb +25 -0
data/spec/lib/pwn/sast/cmd_execution_ruby_spec.rb +25 -0
data/spec/lib/pwn/sast/cmd_execution_scala_spec.rb +25 -0
data/spec/lib/pwn/sast/csrf_spec.rb +25 -0
data/spec/lib/pwn/sast/deserial_java_spec.rb +25 -0
data/spec/lib/pwn/sast/emoticon_spec.rb +25 -0
data/spec/lib/pwn/sast/eval_spec.rb +25 -0
data/spec/lib/pwn/sast/factory_spec.rb +25 -0
data/spec/lib/pwn/sast/http_authorization_header_spec.rb +25 -0
data/spec/lib/pwn/sast/inner_html_spec.rb +25 -0
data/spec/lib/pwn/sast/keystore_spec.rb +25 -0
data/spec/lib/pwn/sast/local_storage_spec.rb +25 -0
data/spec/lib/pwn/sast/location_hash_spec.rb +25 -0
data/spec/lib/pwn/sast/log4j_spec.rb +25 -0
data/spec/lib/pwn/sast/logger_spec.rb +25 -0
data/spec/lib/pwn/sast/md5_spec.rb +25 -0
data/spec/lib/pwn/sast/outer_html_spec.rb +25 -0
data/spec/lib/pwn/sast/padding_oracle_spec.rb +25 -0
data/spec/lib/pwn/sast/password_spec.rb +25 -0
data/spec/lib/pwn/sast/php_input_mechanisms_spec.rb +25 -0
data/spec/lib/pwn/sast/php_type_juggling_spec.rb +25 -0
data/spec/lib/pwn/sast/pom_version_spec.rb +25 -0
data/spec/lib/pwn/sast/port_spec.rb +25 -0
data/spec/lib/pwn/sast/post_message_spec.rb +25 -0
data/spec/lib/pwn/sast/private_key_spec.rb +25 -0
data/spec/lib/pwn/sast/redirect_spec.rb +25 -0
data/spec/lib/pwn/sast/redos_spec.rb +25 -0
data/spec/lib/pwn/sast/shell_spec.rb +25 -0
data/spec/lib/pwn/sast/signature_spec.rb +25 -0
data/spec/lib/pwn/sast/sql_spec.rb +25 -0
data/spec/lib/pwn/sast/ssl_spec.rb +25 -0
data/spec/lib/pwn/sast/sudo_spec.rb +25 -0
data/spec/lib/pwn/sast/task_tag_spec.rb +25 -0
data/spec/lib/pwn/sast/test_case_engine_spec.rb +20 -0
data/spec/lib/pwn/sast/throw_errors_spec.rb +25 -0
data/spec/lib/pwn/sast/token_spec.rb +25 -0
data/spec/lib/pwn/sast/type_script_type_juggling_spec.rb +25 -0
data/spec/lib/pwn/sast/use_after_free_spec.rb +25 -0
data/spec/lib/pwn/sast/version_spec.rb +25 -0
data/spec/lib/pwn/sast/window_location_hash_spec.rb +25 -0
data/spec/lib/pwn/sast_spec.rb +10 -0
data/spec/lib/pwn/sdr/decoder/gsm_spec.rb +15 -0
data/spec/lib/pwn/sdr/decoder_spec.rb +10 -0
data/spec/lib/pwn/sdr/flipper_zero_spec.rb +15 -0
data/spec/lib/pwn/sdr/frequency_allocation_spec.rb +15 -0
data/spec/lib/pwn/sdr/gqrx_spec.rb +15 -0
data/spec/lib/pwn/sdr/rfidler_spec.rb +15 -0
data/spec/lib/pwn/sdr/son_micro_rfid_spec.rb +15 -0
data/spec/lib/pwn/sdr_spec.rb +10 -0
data/spec/lib/pwn/version_spec.rb +17 -0
data/spec/lib/pwn/www/app_cobalt_io_spec.rb +15 -0
data/spec/lib/pwn/www/bing_spec.rb +15 -0
data/spec/lib/pwn/www/bug_crowd_spec.rb +15 -0
data/spec/lib/pwn/www/checkip_spec.rb +15 -0
data/spec/lib/pwn/www/coinbase_pro_spec.rb +15 -0
data/spec/lib/pwn/www/duckduckgo_spec.rb +15 -0
data/spec/lib/pwn/www/facebook_spec.rb +15 -0
data/spec/lib/pwn/www/google_spec.rb +15 -0
data/spec/lib/pwn/www/hacker_one_spec.rb +15 -0
data/spec/lib/pwn/www/linkedin_spec.rb +15 -0
data/spec/lib/pwn/www/pandora_spec.rb +15 -0
data/spec/lib/pwn/www/pastebin_spec.rb +15 -0
data/spec/lib/pwn/www/paypal_spec.rb +15 -0
data/spec/lib/pwn/www/synack_spec.rb +15 -0
data/spec/lib/pwn/www/torch_spec.rb +15 -0
data/spec/lib/pwn/www/trading_view_spec.rb +15 -0
data/spec/lib/pwn/www/twitter_spec.rb +15 -0
data/spec/lib/pwn/www/uber_spec.rb +15 -0
data/spec/lib/pwn/www/upwork_spec.rb +15 -0
data/spec/lib/pwn/www/wayback_machine_spec.rb +15 -0
data/spec/lib/pwn/www/youtube_spec.rb +15 -0
data/spec/lib/pwn/www_spec.rb +10 -0
data/spec/lib/pwn_spec.rb +10 -0
data/spec/spec_helper.rb +3 -0
data/third_party/.gitkeep +0 -0
data/third_party/http-request-headers-fields-large.txt +1185 -0
data/third_party/pwn_rdoc.jsonl +1445 -0
data/third_party/r2-pwn-layout +1 -0
data/update_pwn.sh +9 -0
data/upgrade_ruby.sh +42 -0
data/vagrant/provisioners/apache2.sh +76 -0
data/vagrant/provisioners/beef.rb +30 -0
data/vagrant/provisioners/burpsuite_pro.rb +37 -0
data/vagrant/provisioners/exploit-db.sh +2 -0
data/vagrant/provisioners/gem.sh +4 -0
data/vagrant/provisioners/init_env.sh +22 -0
data/vagrant/provisioners/jenkins.sh +87 -0
data/vagrant/provisioners/jenkins_ssh-keygen.rb +86 -0
data/vagrant/provisioners/kali_customize.rb +130 -0
data/vagrant/provisioners/letsencrypt.rb +35 -0
data/vagrant/provisioners/metasploit.rb +25 -0
data/vagrant/provisioners/nmap_all_live_hosts.sh +2 -0
data/vagrant/provisioners/openvas.sh +23 -0
data/vagrant/provisioners/openvas_wrappers.sh +2 -0
data/vagrant/provisioners/post_install.sh +14 -0
data/vagrant/provisioners/postgres.sh +22 -0
data/vagrant/provisioners/pwn.sh +13 -0
data/vagrant/provisioners/rvm.sh +18 -0
data/vagrant/provisioners/ssllabs-scan.sh +10 -0
data/vagrant/provisioners/toggle_tor.sh +2 -0
data/vagrant/provisioners/update_jenkins_plugins.rb +30 -0
data/vagrant/provisioners/update_os.sh +108 -0
data/vagrant/provisioners/upload_globals.sh +63 -0
data/vagrant/provisioners/userland_fdisk.sh +22 -0
data/vagrant/provisioners/userland_lvm.sh +5 -0
data/vagrant/provisioners/wpscan.rb +25 -0
data/vagrant_rsync_third_party.lst +1 -0
data/vagrant_rsync_userland_template.lst +8 -0
metadata +1112 -5

data/lib/pwn/reports/uri_buster.rb ADDED Viewed

@@ -0,0 +1,335 @@
+# frozen_string_literal: true
+require 'json'
+module PWN
+  module Reports
+    # This plugin generates the War Dialing results produced by pwn_www_uri_buster.
+    module URIBuster
+      # Supported Method Parameters::
+      # PWN::Reports::URIBuster.generate(
+      #   dir_path: dir_path,
+      #   results_hash: results_hash
+      # )
+      public_class_method def self.generate(opts = {})
+        dir_path = opts[:dir_path].to_s if File.directory?(opts[:dir_path].to_s)
+        raise "PWN Error: Invalid Directory #{dir_path}" if dir_path.nil?
+        results_hash = opts[:results_hash]
+        report_name = results_hash[:report_name]
+        File.write(
+          "#{dir_path}/#{report_name}.json",
+          JSON.pretty_generate(results_hash)
+        )
+        html_report = %{<!DOCTYPE HTML>
+        <html>
+          <head>
+            <!-- favicon.ico from https://0dayinc.com -->
+            <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
+            <style>
+              body {
+                font-family: Verdana, Geneva, sans-serif;
+                font-size: 11px;
+                background-color: #FFFFFF;
+                color: #084B8A !important;
+              }
+              a:link {
+                color: #0174DF;
+                text-decoration: none;
+              }
+              a:visited {
+                color: #B40404;
+                text-decoration: none;
+              }
+              a:hover {
+                color: #01A9DB;
+                text-decoration: underline;
+              }
+              a:active {
+                color: #610B5E;
+                text-decoration: underline;
+              }
+              table {
+                width: 100%;
+                border-spacing:0px;
+              }
+              td {
+                vertical-align: top;
+                word-wrap: break-word !important;
+              }
+              tr.selected td {
+                background-color: #FFF396 !important;
+              }
+            </style>
+            <!-- jQuery, DataTables, & FancyApps -->
+            <script type="text/javascript" src="//code.jquery.com/jquery-3.6.0.min.js"></script>
+            <link rel="stylesheet" type="text/css" href="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.css"/>
+            <script type="text/javascript" src="//cdn.datatables.net/v/dt/dt-1.11.4/b-2.2.2/b-colvis-2.2.2/b-html5-2.2.2/b-print-2.2.2/cr-1.5.5/fc-4.0.1/fh-3.2.1/kt-2.6.4/r-2.2.9/rg-1.1.4/rr-1.2.8/sc-2.0.5/sp-1.4.0/sl-1.3.4/datatables.min.js"></script>
+          </head>
+          <body id="pwn_body">
+            <h1 style="display:inline">
+              <a href="https://github.com/0dayinc/pwn/tree/master">~ pwn www uri buster</a>
+            </h1><br /><br />
+            <h2 id="report_name"></h2><br />
+            <div>
+              <!--<button type="button" id="button">Rows Selected</button>-->
+              <button type="button" id="export_selected">Export Selected to JSON</button>
+            </div><br />
+            <div>
+              <b>Toggle Column(s) Visibility:</b>&nbsp;
+              <a class="toggle-vis" data-column="1" href="#">Request Time</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="2" href="#">Response Time</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="3" href="#">Duration</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="4" href="#">URI</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="5" href="#">HTTP Method</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="6" href="#">HTTP Response Code</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="7" href="#">HTTP Response Length</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="8" href="#">HTTP Response Headers</a>&nbsp;|&nbsp;
+              <a class="toggle-vis" data-column="9" href="#">HTTP Response Body</a>&nbsp;|&nbsp;
+            </div>
+            <br /><br />
+            <div>
+              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
+            </div><br />
+            <div>
+              <table id="pwn_www_uri_buster_results" class="display" cellspacing="0">
+                <thead>
+                  <tr>
+                    <th>#</th>
+                    <th>Request Time</th>
+                    <th>Response Time</th>
+                    <th>Duration</th>
+                    <th>URI</th>
+                    <th>HTTP Method</th>
+                    <th>HTTP Response Code</th>
+                    <th>HTTP Response Length</th>
+                    <th>HTTP Response Headers</th>
+                    <th>HTTP Response Body (300 bytes)</th>
+                  </tr>
+                </thead>
+                <col width="30px" />
+                <col width="60px" />
+                <col width="60px" />
+                <col width="30px" />
+                <col width="90px" />
+                <col width="30px" />
+                <col width="30px" />
+                <col width="30px" />
+                <col width="300px" />
+                <col width="300px" />
+                <!-- DataTables <tbody> -->
+              </table>
+            </div>
+            <script>
+              var htmlEntityEncode = $.fn.dataTable.render.text().display;
+              $(document).ready(function() {
+                var oldStart = 0;
+                var table = $('#pwn_www_uri_buster_results').DataTable( {
+                  "paging": true,
+                  "lengthMenu": [10, 25, 50, 100, 250, 500, 1000, 2500, 5000],
+                  "pagingType": "full_numbers",
+                  "fnDrawCallback": function ( oSettings ) {
+                    /* Need to redo the counters if filtered or sorted */
+                    if ( oSettings.bSorted || oSettings.bFiltered ) {
+                      for ( var i=0, iLen=oSettings.aiDisplay.length ; i<iLen ; i++ ) {
+                        $('td:eq(0)', oSettings.aoData[ oSettings.aiDisplay[i] ].nTr ).html( i+1 );
+                      }
+                    }
+                    // Jump to top when utilizing pagination
+                    if ( oSettings._iDisplayStart != oldStart ) {
+                      var targetOffset = $('#pwn_body').offset().top;
+                      $('html,body').animate({scrollTop: targetOffset}, 500);
+                      oldStart = oSettings._iDisplayStart;
+                    }
+                  },
+                  "ajax": "#{report_name}.json",
+                  //"deferRender": true,
+                  "dom": "fplitfpliS",
+                  "autoWidth": false,
+                  "select": {
+                    "style": "multi"
+                  },
+                  "columns": [
+                    { "data": null },
+                    {
+                      "data": "request_timestamp",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "response_timestamp",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "duration",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "http_uri",
+                      "render": function (data, type, row, meta) {
+                        return '<a href="' + data + '" target="_blank">' + data + '</a>';
+                      }
+                    },
+                    {
+                      "data": "http_method",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "http_resp_code",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "http_resp_length",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "http_resp_headers",
+                      "render": $.fn.dataTable.render.text()
+                    },
+                    {
+                      "data": "http_resp",
+                      "render": $.fn.dataTable.render.text()
+                    }
+                  ]
+                });
+                // Custom advanced search handling
+                $('.dataTables_filter input').unbind();
+                $('.dataTables_filter input').on('keyup', function() {
+                  var search = $(this).val();
+                  var filterFunc;
+                  if (search.match(/^\\/.*\\/$/)) {
+                    try {
+                      var regex = new RegExp(search.slice(1, -1), 'i');
+                      filterFunc = function(settings, data, dataIndex) {
+                        var rowData = data.join(' ');
+                        return regex.test(rowData);
+                      };
+                    } catch (e) {
+                      filterFunc = function(settings, data, dataIndex) {
+                        return true;
+                      };
+                    }
+                  } else {
+                    var positives = [];
+                    var negatives = [];
+                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
+                    for (var i = 0; i < terms.length; i++) {
+                      var term = terms[i];
+                      if (term.startsWith('-')) {
+                        var cleanTerm = term.substring(1).toLowerCase();
+                        if (cleanTerm) negatives.push(cleanTerm);
+                      } else {
+                        positives.push(term.toLowerCase());
+                      }
+                    }
+                    filterFunc = function(settings, data, dataIndex) {
+                      var rowData = data.join(' ').toLowerCase();
+                      for (var j = 0; j < positives.length; j++) {
+                        if (!rowData.includes(positives[j])) return false;
+                      }
+                      for (var k = 0; k < negatives.length; k++) {
+                        if (rowData.includes(negatives[k])) return false;
+                      }
+                      return true;
+                    };
+                  }
+                  $.fn.dataTable.ext.search.pop();
+                  $.fn.dataTable.ext.search.push(filterFunc);
+                  table.search('');
+                  table.draw();
+                });
+                // Toggle Columns
+                $('a.toggle-vis').on('click', function (e) {
+                  e.preventDefault();
+                  // Get the column API object
+                  var column = table.column( $(this).attr('data-column') );
+                  // Toggle the visibility
+                  column.visible( ! column.visible() );
+                });
+                $('#export_selected').click( function () {
+                  var selectedRows = table.rows({ selected: true });
+                  if (selectedRows.count() === 0) {
+                    alert('No rows selected');
+                    return;
+                  }
+                  $.getJSON(table.ajax.url(), function(original_json) {
+                    var selected_data = selectedRows.data().toArray();
+                    original_json.data = selected_data;
+                    var json_str = JSON.stringify(original_json, null, 2);
+                    var blob = new Blob([json_str], { type: 'application/json' });
+                    var url = URL.createObjectURL(blob);
+                    var a = document.createElement('a');
+                    a.href = url;
+                    a.download = (original_json.report_name || 'selected') + '.json';
+                    document.body.appendChild(a);
+                    a.click();
+                    document.body.removeChild(a);
+                    URL.revokeObjectURL(url);
+                  });
+                });
+              });
+            </script>
+          </body>
+        </html>
+        }
+        File.open("#{dir_path}/#{report_name}.html", 'w') do |f|
+          f.print(html_report)
+        end
+      rescue StandardError => e
+        raise e
+      end
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+      # Display Usage for this Module
+      public_class_method def self.help
+        puts "USAGE:
+          #{self}.generate(
+            dir_path: dir_path,
+            results_hash: results_hash
+          )
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/reports.rb ADDED Viewed

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+module PWN
+  # This file, using the autoload directive loads Report modules
+  # into memory only when they're needed. For more information, see:
+  # http://www.rubyinside.com/ruby-techniques-revealed-autoload-1652.html
+  module Reports
+    # autoload :HTML, 'pwn/reports/html'
+    # autoload :JSON, 'pwn/reports/json'
+    # autoload :PDF, 'pwn/reports/pdf'
+    autoload :Fuzz, 'pwn/reports/fuzz'
+    autoload :HTMLFooter, 'pwn/reports/html_footer'
+    autoload :HTMLHeader, 'pwn/reports/html_header'
+    autoload :Phone, 'pwn/reports/phone'
+    autoload :SAST, 'pwn/reports/sast'
+    autoload :URIBuster, 'pwn/reports/uri_buster'
+    # autoload :XML, 'pwn/reports/xml'
+    # Display a List of Every PWN::Reports Module
+    public_class_method def self.help
+      constants.sort
+    end
+  end
+end

data/lib/pwn/sast/amqp_connect_as_guest.rb ADDED Viewed

@@ -0,0 +1,78 @@
+# frozen_string_literal: false
+require 'json'
+require 'socket'
+module PWN
+  module SAST
+    # SAST Module used to detect connection references
+    # within source code to determine if connections to RabbitMQ servers
+    # are using guest accounts.
+    module AMQPConnectAsGuest
+      # Supported Method Parameters::
+      # PWN::SAST::AMQPConnectAsGuest.scan(
+      #   dir_path: 'optional path to dir defaults to .'
+      #   git_repo_root_uri: 'optional http uri of git repo scanned'
+      # )
+      public_class_method def self.scan(opts = {})
+        dir_path = opts[:dir_path]
+        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
+        test_case_filter = "
+          grep -in \
+          -e amqp \
+          -e rabbit {PWN_SAST_SRC_TARGET} 2> /dev/null | \
+          grep guest
+        "
+        PWN::SAST::TestCaseEngine.execute(
+          test_case_filter: test_case_filter,
+          security_references: security_references,
+          dir_path: dir_path,
+          git_repo_root_uri: git_repo_root_uri
+        )
+      rescue StandardError => e
+        raise e
+      end
+      # Used primarily to map NIST 800-53 Revision 4 Security Controls
+      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
+      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
+      # Determine the level of Testing Coverage w/ PWN.
+      public_class_method def self.security_references
+        {
+          sast_module: self,
+          section: 'ACCOUNT MANAGEMENT',
+          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=AC-02',
+          cwe_id: '285',
+          cwe_uri: 'https://cwe.mitre.org/data/definitions/285.html'
+        }
+      rescue StandardError => e
+        raise e
+      end
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+      # Display Usage for this Module
+      public_class_method def self.help
+        puts "USAGE:
+          sast_arr = #{self}.scan(
+            dir_path: 'optional path to dir defaults to .',
+            git_repo_root_uri: 'optional http uri of git repo scanned'
+          )
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/sast/apache_file_system_util_api.rb ADDED Viewed

@@ -0,0 +1,76 @@
+# frozen_string_literal: false
+require 'json'
+require 'socket'
+module PWN
+  module SAST
+    # SAST Module used to identify arbitrary command execution
+    # within Apache Common's API Class, org.apache.commons.io.FileSystemUtils
+    module ApacheFileSystemUtilAPI
+      # Supported Method Parameters::
+      # PWN::SAST::ApacheFileSystemUtilAPI.scan(
+      #   :dir_path => 'optional path to dir defaults to .'
+      #   :git_repo_root_uri => 'optional http uri of git repo scanned'
+      # )
+      public_class_method def self.scan(opts = {})
+        dir_path = opts[:dir_path]
+        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
+        test_case_filter = "
+          grep -n \
+          -e 'import org.apache.commons.io.FileSystemUtils' \
+          -e 'freeSpaceKb' {PWN_SAST_SRC_TARGET} 2> /dev/null
+        "
+        PWN::SAST::TestCaseEngine.execute(
+          test_case_filter: test_case_filter,
+          security_references: security_references,
+          dir_path: dir_path,
+          git_repo_root_uri: git_repo_root_uri
+        )
+      rescue StandardError => e
+        raise e
+      end
+      # Used primarily to map NIST 800-53 Revision 4 Security Controls
+      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
+      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
+      # Determine the level of Testing Coverage w/ PWN.
+      public_class_method def self.security_references
+        {
+          sast_module: self,
+          section: 'INFORMATION INPUT VALIDATION',
+          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SI-10',
+          cwe_id: '78',
+          cwe_uri: 'https://cwe.mitre.org/data/definitions/78.html'
+        }
+      rescue StandardError => e
+        raise e
+      end
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+      # Display Usage for this Module
+      public_class_method def self.help
+        puts "USAGE:
+          sast_arr = #{self}.scan(
+            :dir_path => 'optional path to dir defaults to .',
+            :git_repo_root_uri => 'optional http uri of git repo scanned'
+          )
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/sast/aws.rb ADDED Viewed

@@ -0,0 +1,77 @@
+# frozen_string_literal: false
+require 'json'
+require 'socket'
+module PWN
+  module SAST
+    # SAST Module used to identify sensitive AWS AuthN artifacts.
+    module AWS
+      # Supported Method Parameters::
+      # PWN::SAST::Port.scan(
+      #   dir_path: 'optional path to dir defaults to .'
+      #   git_repo_root_uri: 'optional http uri of git repo scanned'
+      # )
+      public_class_method def self.scan(opts = {})
+        dir_path = opts[:dir_path]
+        git_repo_root_uri = opts[:git_repo_root_uri].to_s.scrub
+        test_case_filter = "
+          grep -niE \
+          -e 'ec2-' \
+          -e 'access.key' \
+          -e 'secret.access' \
+          -e 'secret.key' {PWN_SAST_SRC_TARGET} 2> /dev/null
+        "
+        PWN::SAST::TestCaseEngine.execute(
+          test_case_filter: test_case_filter,
+          security_references: security_references,
+          dir_path: dir_path,
+          git_repo_root_uri: git_repo_root_uri
+        )
+      rescue StandardError => e
+        raise e
+      end
+      # Used primarily to map NIST 800-53 Revision 4 Security Controls
+      # https://web.nvd.nist.gov/view/800-53/Rev4/impact?impactName=HIGH
+      # to PWN Exploit & Static Code Anti-Pattern Matching Modules to
+      # Determine the level of Testing Coverage w/ PWN.
+      public_class_method def self.security_references
+        {
+          sast_module: self,
+          section: 'TRANSMISSION CONFIDENTIALITY AND INTEGRITY',
+          nist_800_53_uri: 'https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=SC-08',
+          cwe_id: '256',
+          cwe_uri: 'https://cwe.mitre.org/data/definitions/256.html'
+        }
+      rescue StandardError => e
+        raise e
+      end
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+      # Display Usage for this Module
+      public_class_method def self.help
+        puts "USAGE:
+          sast_arr = #{self}.scan(
+            dir_path: 'optional path to dir defaults to .',
+            git_repo_root_uri: 'optional http uri of git repo scanned'
+          )
+          #{self}.authors
+        "
+      end
+    end
+  end
+end