pwn 0.5.529 → 0.5.531

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2837cafb8268a67d624fd9115ee04597fe9edf7f126bde373f181be6ae7859bb
-  data.tar.gz: 2855cbda367a81a7c854c08edcf0f0d1d59f96321df8c23b3834003e99bb4df3
+  metadata.gz: db0acc490e9b6e0dca25ce2a5b5bcd2b19f435f129ae0221857842c267941c32
+  data.tar.gz: 53374f569fcd0484a59c1c74e1d160872c6fab8afb375b7a7ac19fdc7d4682d8
 SHA512:
-  metadata.gz: cf65609b278025eb8e3bceac9be6be4cdbd89aacf4cd506945da1b6c9b6285de2008b3bb00d7f540fe4587229649e708e0c01cf0583bf2f61f73bff985234324
-  data.tar.gz: 669851be6eaedebc14a193767f930c6101fd9fae7e843ddf2ed74642979ce8d1e02dde0e48d4eb8b9f1ac0f20fda7a009114b506085351b1e9bf31e68e97f418
+  metadata.gz: 447ff1c3aa6d7118145b4a20f555f3c5c541423f0b8799b486cf1c3ef8cb5ef2181e0676608a7aa164da72be87d8f515d1f9c7af3fdf792ddd26c95b4edc6234
+  data.tar.gz: 99ac0586844bb9b0693fa83eb406b35419d940bbff7cace73df0aa0c0da50c8bf059137cbe9aed40d63a68b9bfb7a44457fe54103fc81204b060f1e2a2dce713

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '<8.1.1'
+gem 'activesupport', '<8.1.2'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.3.0'
@@ -24,14 +24,14 @@ gem 'bundler', '>=4.0.3'
 gem 'bundler-audit', '>=0.9.3'
 gem 'bunny', '2.24.0'
 gem 'colorize', '1.1.0'
-gem 'credit_card_validations', '7.0.0'
+gem 'credit_card_validations', '7.1.0'
 gem 'curses', '1.5.3'
 gem 'diffy', '3.4.4'
 gem 'eventmachine', '1.2.7'
 gem 'executable-hooks', '1.7.1'
 gem 'faker', '3.5.3'
 gem 'faye-websocket', '0.12.0'
-gem 'ffi', '1.17.2'
+gem 'ffi', '1.17.3'
 # gem 'fftw3', '0.3'
 gem 'gdb', '1.0.0'
 gem 'gem-wrappers', '1.4.0'
@@ -49,7 +49,7 @@ gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.9.0'
-gem 'meshtastic', '0.0.149'
+gem 'meshtastic', '0.0.151'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.22.0'
 gem 'msfrpc-client', '1.1.2'
@@ -58,7 +58,7 @@ gem 'net-ldap', '0.20.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.5.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.18.10'
+gem 'nokogiri', '1.19.0'
 gem 'nokogiri-diff', '0.3.0'
 gem 'oily_png', '1.2.1'
 gem 'open3', '0.2.1'
@@ -66,9 +66,9 @@ gem 'os', '1.1.4'
 gem 'ostruct', '0.6.3'
 gem 'packetfu', '2.0.0'
 gem 'packetgen', '4.1.1'
-gem 'pdf-reader', '2.15.0'
-gem 'pg', '1.6.2'
-gem 'pry', '0.15.2'
+gem 'pdf-reader', '2.15.1'
+gem 'pg', '1.6.3'
+gem 'pry', '0.16.0'
 gem 'pry-doc', '1.6.0'
 gem 'rake', '13.3.1'
 gem 'rb-readline', '0.5.5'
@@ -76,13 +76,13 @@ gem 'rbvmomi2', '3.8.0'
 gem 'rdoc', '7.0.3'
 gem 'rest-client', '2.1.0'
 gem 'rex', '2.0.13'
-gem 'rmagick', '6.1.4'
-gem 'rqrcode', '3.1.1'
+gem 'rmagick', '6.1.5'
+gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'
 gem 'rubocop', '1.82.1'
 gem 'rubocop-rake', '0.7.1'
-gem 'rubocop-rspec', '3.8.0'
+gem 'rubocop-rspec', '3.9.0'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.1'
@@ -93,7 +93,7 @@ gem 'selenium-webdriver', '4.39.0'
 gem 'slack-ruby-client', '3.1.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.4'
-gem 'sqlite3', '2.8.1'
+gem 'sqlite3', '2.9.0'
 gem 'thin', '2.0.1'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.529]:001 >>> PWN.help
+pwn[v0.5.531]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-4.0.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.529]:001 >>> PWN.help
+pwn[v0.5.531]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-4.0.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.529]:001 >>> PWN.help
+pwn[v0.5.531]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn_gqrx_scanner

@@ -5,20 +5,16 @@ require 'pwn'
 
 opts = PWN::Env[:driver_opts]
 PWN::Driver::Parser.new do |options|
-  options.on('-aPROFILE', '--assume-profile=PROFILE', '<Required if "--target-freq" is Nil - Profile to assume for common radio protocols.  Use "--list-scan-profiles" to display supported protocols (Defaults to nil)') do |p|
+  options.on('-aPROFILE', '--assume-band-plan=PROFILE', '<Required if "--target-freq" is Nil - Band Plan Profile to assume for common radio protocols.  Use "--list-band-plans" to display supported protocols (Defaults to nil)') do |p|
     opts[:profile] = p
   end
 
-  options.on('-l', '--list-scan-profiles', '<Optional - List supported scan profiles and exit>') do |l|
-    opts[:list_scan_profiles] = l
+  options.on('-l', '--list-band-plans', '<Optional - List supported band plan profiles and exit>') do |l|
+    opts[:list_band_plans] = l
   end
 
-  options.on('-sFREQ', '--start-freq=FREQ', '<Required if "--assume-profile" is Nil - Frequency to Start Scanning (e.g. 800.000.000 == 800 mHz>') do |s|
-    opts[:start_freq] = s
-  end
-
-  options.on('-tFREQ', '--target-freq=FREQ', '<Required if "--assume-profile" is Nil - Frequency to Conclude Scanning (e.g. 900.000.000 == 900 mHz>') do |e|
-    opts[:target_freq] = e
+  options.on('-sFREQS', '--scan-ranges=FREQS', '<Required if "--assume-band-plan" is Nil - Comma-Delimited List of Frequency Ranges to Scan (e.g. 800.000.000 == 800 mHz>') do |s|
+    opts[:scan_ranges] = s
   end
 
   options.on('-hHOST', '--host=HOST', '<Optional - GQRX Host (Defaults to 127.0.0.1)>') do |h|
@@ -82,26 +78,36 @@ begin
   pwn_provider = 'ruby-gem'
   pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.keys.any? { |s| s == 'PWN_PROVIDER' }
 
-  profiles_available = PWN::SDR::FrequencyAllocation.profiles
+  band_plans = PWN::SDR::FrequencyAllocation.band_plans
 
-  list_scan_profiles = opts[:list_scan_profiles]
-  if list_scan_profiles
-    puts JSON.pretty_generate(profiles_available)
+  list_band_plans = opts[:list_band_plans]
+  if list_band_plans
+    puts JSON.pretty_generate(band_plans)
     exit 0
   end
 
   profile = opts[:profile]
-  opts.merge!(profiles_available[profile.to_sym]) unless profile.nil?
-
-  start_freq = opts[:start_freq]
-  start_freq = start_freq.to_s.delete('.') unless start_freq.nil?
-  start_freq = start_freq.to_i
-  raise 'ERROR: Invalid start frequency.' if !start_freq.nil? && start_freq.zero?
-
-  target_freq = opts[:target_freq]
-  target_freq = target_freq.to_s.delete('.') unless target_freq.nil?
-  target_freq = target_freq.to_i
-  raise 'ERROR: --assume-profile || --target-freq is required.' if target_freq.zero? && profile.nil?
+  # Merge opts with profile values if profile provided
+  opts.merge!(band_plans[profile.to_sym]) unless profile.nil?
+
+  scan_ranges = opts[:scan_ranges]
+  raise 'ERROR: --assume-band-plan || --scan-ranges is required.' if scan_ranges.nil? && profile.nil?
+
+  ranges = band_plans[profile.to_sym][:ranges] unless profile.nil?
+  if ranges.nil?
+    # Convert comma-delimited string to array of hashes
+    ranges = scan_ranges.split(',').map do |r|
+      range = r.split('-')
+      { start_freq: range.first, target_freq: range.last }
+    end
+  elsif scan_ranges
+    # Append scan_ranges to profile ranges if both provided
+    additional_ranges = scan_ranges.split(',').map do |r|
+      range = r.split('-')
+      { start_freq: range.first, target_freq: range.last }
+    end
+    ranges.concat(additional_ranges)
+  end
 
   host = opts[:host]
   port = opts[:port]
@@ -137,11 +143,12 @@ begin
   decoder = opts[:decoder]
   location = opts[:location]
 
-  # Merge opts again to ensure we override profile values with CLI values
+  # Merge opts one last time to ensure parameters passed to the driver are included
+  opts.merge!(band_plans[profile.to_sym]) unless profile.nil?
+
   PWN::SDR::GQRX.scan_range(
     gqrx_sock: gqrx_sock,
-    start_freq: start_freq,
-    target_freq: target_freq,
+    ranges: ranges,
     demodulator_mode: demodulator_mode,
     bandwidth: bandwidth,
     audio_gain_db: audio_gain_db,
@@ -159,8 +166,8 @@ begin
   puts 'Scan Complete.'
 rescue StandardError => e
   raise e
-rescue Interrupt, SystemExit
+rescue Interrupt
   puts "\nCTRL+C detected - goodbye."
 ensure
-  PWN::SDR::GQRX.disconnect(gqrx_sock: gqrx_sock) unless gqrx_sock.closed?
+  PWN::SDR::GQRX.disconnect(gqrx_sock: gqrx_sock) unless gqrx_sock.nil?
 end

data/lib/pwn/sdr/decoder/pocsag.rb

@@ -0,0 +1,130 @@
+# frozen_string_literal: true
+
+require 'json'
+require 'tty-spinner'
+
+module PWN
+  module SDR
+    module Decoder
+      # POCSAG Decoder Module for Pagers
+      module POCSAG
+        # Supported Method Parameters::
+        # pocsag_resp = PWN::SDR::Decoder::POCSAG.decode(
+        #   freq_obj: 'required - GQRX socket object returned from #connect method'
+        # )
+
+        public_class_method def self.decode(opts = {})
+          freq_obj = opts[:freq_obj]
+          gqrx_sock = freq_obj[:gqrx_sock]
+          record_path = freq_obj[:record_path]
+          freq_obj = freq_obj.dup
+          freq_obj.delete(:gqrx_sock)
+          skip_freq_char = "\n"
+          puts JSON.pretty_generate(freq_obj)
+          puts "\n*** Pager POCSAG Decoder ***"
+          puts 'Press [ENTER] to continue...'
+
+          # Toggle POCSAG off and on to reset the decoder
+          PWN::SDR::GQRX.cmd(
+            gqrx_sock: gqrx_sock,
+            cmd: 'U RECORD 0',
+            resp_ok: 'RPRT 0'
+          )
+
+          PWN::SDR::GQRX.cmd(
+            gqrx_sock: gqrx_sock,
+            cmd: 'U RECORD 1',
+            resp_ok: 'RPRT 0'
+          )
+
+          # Spinner setup with dynamic terminal width awareness
+          spinner = TTY::Spinner.new(
+            '[:spinner] :decoding',
+            format: :arrow_pulse,
+            clear: true,
+            hide_cursor: true
+          )
+
+          record_header_size = 44
+          wav_header = File.binread(record_path, record_header_size)
+          raise 'ERROR: WAV file header is invalid!' unless wav_header[0, 4] == 'RIFF' && wav_header[8, 4] == 'WAVE'
+
+          bytes_read = wav_header_size
+
+          # Conservative overhead for spinner animation, colors, and spacing
+          spinner_overhead = 12
+          max_title_length = [TTY::Screen.width - spinner_overhead, 50].max
+
+          initial_title = 'INFO: Decoding Pager POCSAG data...'
+          initial_title = initial_title[0...max_title_length] if initial_title.length > max_title_length
+          spinner.update(title: initial_title)
+          spinner.auto_spin
+
+          last_resp = {}
+
+          loop do
+            current_wav_size = File.size?(record_path) ||= 0
+            pocsag_resp = {}
+
+            # Only update when we have valid new data
+            if current_wav_size > bytes_read
+              new_bytes = current_wav_size - bytes_read
+              # Ensure full I/Q pairs (8 bytes each)
+              new_bytes -= new_bytes % 8
+              data = File.binread(record_path, new_bytes, bytes_read)
+
+              msg = "DECODED DATA"
+
+              spinner.update(decoding: msg)
+              last_resp = pocsag_resp.dup
+            end
+
+            # Non-blocking check for ENTER key to exit
+            if $stdin.wait_readable(0)
+              begin
+                char = $stdin.read_nonblock(1)
+                break if char == skip_freq_char
+              rescue IO::WaitReadable, EOFError
+                # No-op
+              end
+            end
+
+            sleep 0.01
+          end
+        rescue StandardError => e
+          spinner.error('Decoding failed') if defined?(spinner)
+          raise e
+        ensure
+          File.unlink(record_path) if File.exist?(record_path)
+          PWN::SDR::GQRX.cmd(
+            gqrx_sock: gqrx_sock,
+            cmd: 'U RECORD 0',
+            resp_ok: 'RPRT 0'
+          )
+
+          spinner.stop if defined?(spinner) && spinner
+        end
+
+        # Author(s):: 0day Inc. <support@0dayinc.com>
+
+        public_class_method def self.authors
+          "AUTHOR(S):
+            0day Inc. <support@0dayinc.com>
+          "
+        end
+
+        # Display Usage for this Module
+
+        public_class_method def self.help
+          puts "USAGE:
+            #{self}.decode(
+              freq_obj: 'required - freq_obj returned from PWN::SDR::GQRX.init_freq method'
+            )
+
+            #{self}.authors
+          "
+        end
+      end
+    end
+  end
+end

data/lib/pwn/sdr/decoder/rds.rb

@@ -9,7 +9,7 @@ module PWN
       # RDS Decoder Module for FM Radio Signals
       module RDS
         # Supported Method Parameters::
-        # rds_resp = PWN::SDR::GQRX.decode_rds(
+        # rds_resp = PWN::SDR::Decoder::RDS.decode(
         #   freq_obj: 'required - GQRX socket object returned from #connect method'
         # )
 
@@ -19,19 +19,19 @@ module PWN
 
           freq_obj = freq_obj.dup
           freq_obj.delete(:gqrx_sock)
-          skip_rds = "\n"
+          skip_freq_char = "\n"
           puts JSON.pretty_generate(freq_obj)
           puts "\n*** FM Radio RDS Decoder ***"
           puts 'Press [ENTER] to continue...'
 
           # Toggle RDS off and on to reset the decoder
-          PWN::SDR::GQRX.gqrx_cmd(
+          PWN::SDR::GQRX.cmd(
             gqrx_sock: gqrx_sock,
             cmd: 'U RDS 0',
             resp_ok: 'RPRT 0'
           )
 
-          PWN::SDR::GQRX.gqrx_cmd(
+          PWN::SDR::GQRX.cmd(
             gqrx_sock: gqrx_sock,
             cmd: 'U RDS 1',
             resp_ok: 'RPRT 0'
@@ -58,9 +58,9 @@ module PWN
 
           loop do
             rds_resp = {
-              rds_pi: PWN::SDR::GQRX.gqrx_cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_PI').to_s.strip.chomp.delete('.'),
-              rds_ps_name: PWN::SDR::GQRX.gqrx_cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_PS_NAME').to_s.strip.chomp,
-              rds_radiotext: PWN::SDR::GQRX.gqrx_cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_RADIOTEXT').to_s.strip.chomp
+              rds_pi: PWN::SDR::GQRX.cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_PI').to_s.strip.chomp.delete('.'),
+              rds_ps_name: PWN::SDR::GQRX.cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_PS_NAME').to_s.strip.chomp,
+              rds_radiotext: PWN::SDR::GQRX.cmd(gqrx_sock: gqrx_sock, cmd: 'p RDS_RADIOTEXT').to_s.strip.chomp
             }
 
             # Only update when we have valid new data
@@ -81,13 +81,13 @@ module PWN
               prefix = "Program ID: #{rds_pi} | Station Name: #{rds_ps} | Radio Txt: "
 
               # minimum visibility
-              available_for_rt = max_title_length - prefix.length
-              available_for_rt = [available_for_rt, 10].max
+              available_for_term = max_title_length - prefix.length
+              available_for_term = [available_for_term, 10].max
 
               rt_display = rds_rt
-              rt_display = "#{rt_display[0...available_for_rt]}..." if rt_display.length > available_for_rt
+              rt_display = "#{rt_display[0...available_for_term]}..." if rt_display.length > available_for_term
 
-              msg = prefix + rt_display
+              msg = "#{prefix}#{rt_display}"
               spinner.update(decoding: msg)
               last_resp = rds_resp.dup
             end
@@ -96,7 +96,7 @@ module PWN
             if $stdin.wait_readable(0)
               begin
                 char = $stdin.read_nonblock(1)
-                break if char == skip_rds
+                break if char == skip_freq_char
               rescue IO::WaitReadable, EOFError
                 # No-op
               end
@@ -124,7 +124,7 @@ module PWN
         public_class_method def self.help
           puts "USAGE:
             #{self}.decode(
-              freq_obj: 'required - freq_obj returned from PWN::SDR::Receiver::GQRX.init_freq method'
+              freq_obj: 'required - freq_obj returned from PWN::SDR::GQRX.init_freq method'
             )
 
             #{self}.authors

data/lib/pwn/sdr/decoder.rb

@@ -8,6 +8,7 @@ module PWN
     # Deocder Module for SDR signals.
     module Decoder
       autoload :GSM, 'pwn/sdr/decoder/gsm'
+      autoload :POCSAG, 'pwn/sdr/decoder/pocsag'
       autoload :RDS, 'pwn/sdr/decoder/rds'
 
       # Display a List of Every PWN::AI Module