pwn 0.5.548 → 0.5.550

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 64e3a1ef05197b2f9e0f30fea8e2f62c07aa22ed513487158aacd734e3724750
-  data.tar.gz: 1b81cf5ad0e54fbbf195faacafc9cb49a153010ab9d3577be9d5421092e8447e
+  metadata.gz: 2a74ded9ce97c06a9d9351d25abdb3a2a0410d5131f8e63936c6e9432c1ab56d
+  data.tar.gz: 1983a6472a848c7c33f8de30d5c355e28056c5eb847cfab77a6894ee1d98d45f
 SHA512:
-  metadata.gz: a5d331d41705d86f02245adef12d5020b4878381fe851b71c67d4ddc48c38e462de099be9bd53e4160a86f49e5a36f096c21f0bcec4d44b3e41485501e1891de
-  data.tar.gz: '058379a913e9c2edd15ed6f02a948deffe53146574a38013845fc1bcb981c0be279726316898616f9cab8c0f93de5abdb505759cc144d502479d92639c00c220'
+  metadata.gz: 9e858bf97b28a1e9a989d52d0ff92c03ed23c6134381817d56e752cf04c27e935b91ecb8283ac242acf2708fa8b075d1b4e5af33f0becad70a793a59b9e8e4f3
+  data.tar.gz: e9e07591011448b93f47289b709c3df0545808a4aeb2309ef689f9fd59d4503b7e02c99496e22ec4e34f1f86d206749fe5b57c21f9536fa519ddfebd9f28d0f9

data/Gemfile

@@ -25,11 +25,11 @@ gem 'bundler-audit', '>=0.9.3'
 gem 'bunny', '2.24.0'
 gem 'colorize', '1.1.0'
 gem 'credit_card_validations', '8.0.0'
-gem 'curses', '1.5.3'
+gem 'curses', '1.6.0'
 gem 'diffy', '3.4.4'
 gem 'eventmachine', '1.2.7'
 gem 'executable-hooks', '1.7.1'
-gem 'faker', '3.6.0'
+gem 'faker', '3.6.1'
 gem 'faye-websocket', '0.12.0'
 gem 'ffi', '1.17.3'
 # gem 'fftw3', '0.3'
@@ -49,8 +49,8 @@ gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.9.0'
-gem 'mcp', '0.7.1'
-gem 'meshtastic', '0.0.154'
+gem 'mcp', '0.8.0'
+gem 'meshtastic', '0.0.157'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.23.0'
 gem 'msfrpc-client', '1.1.2'
@@ -74,13 +74,14 @@ gem 'pry-doc', '1.7.0'
 gem 'rake', '13.3.1'
 gem 'rb-readline', '0.5.5'
 gem 'rbvmomi2', '3.8.0'
+gem 'rdoc', '7.0.3'
 gem 'rest-client', '2.1.0'
 gem 'rex', '2.0.13'
 gem 'rmagick', '6.2.0'
 gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.85.0'
+gem 'rubocop', '1.85.1'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.9.0'
 gem 'ruby-audio', '1.6.1'
@@ -93,7 +94,7 @@ gem 'selenium-webdriver', '4.41.0'
 gem 'slack-ruby-client', '3.1.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.4'
-gem 'sqlite3', '2.9.0'
+gem 'sqlite3', '2.9.1'
 gem 'thin', '2.0.1'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.548]:001 >>> PWN.help
+pwn[v0.5.550]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-4.0.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.548]:001 >>> PWN.help
+pwn[v0.5.550]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-4.0.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.548]:001 >>> PWN.help
+pwn[v0.5.550]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/Rakefile

@@ -1,8 +1,8 @@
 # frozen_string_literal: true
 
 require 'bundler/gem_tasks'
-require 'rdoc'
 require 'rspec/core/rake_task'
+require 'rdoc/task'
 require 'rubocop/rake_task'
 
 RSpec::Core::RakeTask.new(:spec)

data/Vagrantfile

@@ -3,7 +3,6 @@
 # -*- mode: ruby -*-
 # vi: set ft=ruby :
 require 'yaml'
-require 'pathname'
 
 API_VERSION = '2'
 pwn_root = Pathname.new(__FILE__).realpath.expand_path.parent

data/lib/pwn/ai/agent/assembly.rb

@@ -56,6 +56,12 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::Assembly.analyze(
+              request: 'required - the assembly opcodes or instructions to be analyzed',
+              type: 'required - :opcodes_to_asm|:asm_to_opcodes - specify the type of analysis to perform',
+              arch: 'required - name of arch returned from `PWN::Plugins::Assembly.list_supported_archs` (e.g., :i386|:i686|:x86|:x64|:arm|:arm64, etc.)',
+              endian: 'required - the endianness of the assembly code (e.g., :little|:big)'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/btc.rb

@@ -37,6 +37,9 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::BTC.analyze(
+              request: 'required - latest block information retrieved from a bitcoin node via `PWN::Blockchain::BTC.get_latest_block`'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/burp_suite.rb

@@ -71,6 +71,9 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::BurpSuite.analyze(
+              request: 'required HTTP request/response pair or WebSocket message as a string'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/gqrx.rb

@@ -41,6 +41,10 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::GQRX.analyze(
+              request: 'required - A string containing the signal data captured by GQRX that you want to analyze. This data should be in a format that can be interpreted by the AI for analysis, such as raw signal data, frequency information, or any relevant metadata associated with the capture.',
+              location: 'required - A string containing a city, state, country, or GPS coordinates where the signal data was captured. This information will be used to provide context for the analysis and to determine if the frequency is licensed or unlicensed based on FCC records.'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/hacker_one.rb

@@ -51,6 +51,10 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::HackerOne.analyze(
+              request: 'required - dataset to analyze, such as bounty program details, scope details, or hacktivity details'
+              type: 'required - type of analysis to perform, such as :bounty_programs, :scope_details, or :hacktivity'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/sast.rb

@@ -37,6 +37,9 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::SAST.analyze(
+              request: 'required - A string containing the source code snippet to be analyzed for SAST antipatterns and vulnerabilities.'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/transparent_browser.rb

@@ -41,6 +41,10 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = PWN::AI::Agent::TransparentBrowser.analyze(
+              request: 'required - current step in the JavaScript debugging session to analyze',
+              source_to_review: 'required - the block of JavaScript code in which the current step resides'
+            )
 
             #{self}.authors
           "

data/lib/pwn/ai/agent/vuln_gen.rb

@@ -7,15 +7,34 @@ module PWN
       module VulnGen
         # Supported Method Parameters::
         # ai_analysis = PWN::AI::Agent::VulnGen.analyze(
-        #   request: 'required - high level description of vulnerability discovered (e.g. "Discovered a SQLi vulnerability in /login"'
+        #   request: 'required - high level description of vulnerability discovered (e.g. "Discovered a SQLi vulnerability in /login"',
+        #   markup_type: 'optional - specify the type of markup to generate :jira|:markdown|:html|:confluence|:xml (default: :jira)'
         # )
 
         public_class_method def self.analyze(opts = {})
           request = opts[:request]
           raise 'ERROR: request parameter is required' if request.nil? || request.empty?
 
-          system_role_content = '
-          _ALWAYS_ Generate markdown security findings for the message provided with the following content:
+          markup_type = opts[:markup_type] ||= :jira
+
+          markup = ''
+          case markup_type
+          when :jira
+            markup = 'Jira Wiki Markup'
+          when :markdown
+            markup = 'Markdown'
+          when :html
+            markup = 'HTML'
+          when :confluence
+            markup = 'Confluence Wiki Markup'
+          when :xml
+            markup = 'XML'
+          else
+            raise "ERROR: Unsupported markup_type '#{markup_type}'. Supported types are :jira, :markdown, :html, :confluence, :xml."
+          end
+
+          system_role_content = "
+          _ALWAYS_ Generate #{markup} security findings for the message provided with the following content:
 
           1. Detailed Finding Description: This should be a deep, detailed technical description that should include exploit proof-of-concepts when possible.
 
@@ -28,7 +47,7 @@ module PWN
           5. CWE Category, Brief CWE description, and CWE URI
 
           6. NIST 800-53 Security Control that is impacted by this vulnerability.
-          '
+          "
 
           PWN::AI::Introspection.reflect_on(
             system_role_content: system_role_content,
@@ -51,6 +70,10 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
+            ai_analysis = #{self}.analyze(
+              request: 'required - high level description of vulnerability discovered (e.g. \"Discovered a SQLi vulnerability in /login\"',
+              markup_type: 'optional - specify the type of markup to generate :jira|:markdown|:html|:confluence|:xml (default: :jira)'
+            )
 
             #{self}.authors
           "

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.548'
+  VERSION = '0.5.550'
 end

data/pwn.gemspec

@@ -8,7 +8,7 @@ require 'pwn/version'
 Gem::Specification.new do |spec|
   ruby_version = ">= #{File.read('.ruby-version').split('-').last.chomp}".freeze
   # spec.required_ruby_version = ruby_version
-  spec.required_ruby_version = '>= 3.3.0'
+  spec.required_ruby_version = '>= 4.0.0'
   spec.name = 'pwn'
   spec.version = PWN::VERSION
   spec.authors = ['0day Inc.']

data/third_party/pwn_rdoc.jsonl

@@ -22,7 +22,7 @@
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TransparentBrowser.analyze Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TransparentBrowser.analyze`: Supported Method Parameters\n\nai_analysis = PWN::AI::Agent::TransparentBrowser.analyze(\n\nrequest: 'required - current step in the JavaScript debugging session to analyze',\nsource_to_review: 'required - the block of JavaScript code in which the current step resides'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TransparentBrowser.authors Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TransparentBrowser.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::TransparentBrowser.help Usage"},{"role":"assistant","content":"`PWN::AI::Agent::TransparentBrowser.help`: "}]}
-{"messages":[{"role":"user","content":"PWN::AI::Agent::VulnGen.analyze Usage"},{"role":"assistant","content":"`PWN::AI::Agent::VulnGen.analyze`: Supported Method Parameters\n\nai_analysis = PWN::AI::Agent::VulnGen.analyze(\n\nrequest: 'required - high level description of vulnerability discovered (e.g. \"Discovered a SQLi vulnerability in /login\"'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::AI::Agent::VulnGen.analyze Usage"},{"role":"assistant","content":"`PWN::AI::Agent::VulnGen.analyze`: Supported Method Parameters\n\nai_analysis = PWN::AI::Agent::VulnGen.analyze(\n\nrequest: 'required - high level description of vulnerability discovered (e.g. \"Discovered a SQLi vulnerability in /login\"',\nmarkup_type: 'optional - specify the type of markup to generate :jira|:markdown|:html|:confluence|:xml (default: :jira)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::VulnGen.authors Usage"},{"role":"assistant","content":"`PWN::AI::Agent::VulnGen.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::AI::Agent::VulnGen.help Usage"},{"role":"assistant","content":"`PWN::AI::Agent::VulnGen.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::AI::Grok.authors Usage"},{"role":"assistant","content":"`PWN::AI::Grok.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}

data/upgrade_Gemfile_gems.sh

@@ -4,16 +4,22 @@ rvmsudo gem update --system
 
 cat Gemfile | awk '{print $2}' | grep -E "^'.+$" | grep -v -e rubygems.org | while read gem; do 
   this_gem=`echo $gem | sed "s/'//g" | sed 's/\,//g'`
-  latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
   echo "${this_gem} => $latest_version"
-  if [[ $this_gem == 'activesupport' ]]; then
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '<${latest_version}'/g" Gemfile
-  elif [[ $this_gem == 'bundler' || $this_gem == 'bundler-audit' ]]; then
-    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=${latest_version}'/g" Gemfile
+  if [[ $this_gem == 'rdoc' ]]; then
+    echo 'rdoc is now bundled with Ruby. Ignorning version checks in Gemfile to avoid version mismatch issues.'
+    latest_version=`gem list rdoc | sed 's/[(|)]//g' | sed 's/,/ /g' | awk '{print $2}'`
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '${latest_version}'/g" Gemfile
   elif [[ $this_gem == 'json' ]]; then
     # Shakes fist at selenium-webdriver
     sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=2.13.2'/g" Gemfile
+  elif [[ $this_gem == 'activesupport' ]]; then
+    latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '<${latest_version}'/g" Gemfile
+  elif [[ $this_gem == 'bundler' || $this_gem == 'bundler-audit' ]]; then
+    latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
+    sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '>=${latest_version}'/g" Gemfile
   else
+    latest_version=`gem search -r $this_gem | grep -E "^${this_gem}\s.+$" | awk '{print $2}' | sed 's/(//g' | sed 's/)//g' | sed 's/,//g'`
     sed -i "s/^gem '${this_gem}'.*$/gem '${this_gem}', '${latest_version}'/g" Gemfile
   fi
 done

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.548
+  version: 0.5.550
 platform: ruby
 authors:
 - 0day Inc.
@@ -211,14 +211,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.5.3
+        version: 1.6.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.5.3
+        version: 1.6.0
 - !ruby/object:Gem::Dependency
   name: diffy
   requirement: !ruby/object:Gem::Requirement
@@ -267,14 +267,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: 3.6.1
 - !ruby/object:Gem::Dependency
   name: faye-websocket
   requirement: !ruby/object:Gem::Requirement
@@ -533,28 +533,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.7.1
+        version: 0.8.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.7.1
+        version: 0.8.0
 - !ruby/object:Gem::Dependency
   name: meshtastic
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.154
+        version: 0.0.157
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.154
+        version: 0.0.157
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -877,6 +877,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 3.8.0
+- !ruby/object:Gem::Dependency
+  name: rdoc
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 7.0.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 7.0.3
 - !ruby/object:Gem::Dependency
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
@@ -967,14 +981,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.85.0
+        version: 1.85.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.85.0
+        version: 1.85.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1149,14 +1163,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement
@@ -2462,7 +2476,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.3.0
+      version: 4.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="