pwn 0.5.550 → 0.5.552

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2a74ded9ce97c06a9d9351d25abdb3a2a0410d5131f8e63936c6e9432c1ab56d
-  data.tar.gz: 1983a6472a848c7c33f8de30d5c355e28056c5eb847cfab77a6894ee1d98d45f
+  metadata.gz: 0eb71ac056fca69e9b903f0cfca9c905f1acafa556aad10dfb3da0cd64675b0d
+  data.tar.gz: 4416c11597a1ba0ee7c84267be3f47cdf67bb236f2ab89f766155a86b72eaaea
 SHA512:
-  metadata.gz: 9e858bf97b28a1e9a989d52d0ff92c03ed23c6134381817d56e752cf04c27e935b91ecb8283ac242acf2708fa8b075d1b4e5af33f0becad70a793a59b9e8e4f3
-  data.tar.gz: e9e07591011448b93f47289b709c3df0545808a4aeb2309ef689f9fd59d4503b7e02c99496e22ec4e34f1f86d206749fe5b57c21f9536fa519ddfebd9f28d0f9
+  metadata.gz: a8815c6bb53071f7a6094ced8da45d537b0bf6a454b404325cbb30e446034827fd1fcac537cc90f3dd0213da498793fd46b1d762b593d0b2040d80da09658eb8
+  data.tar.gz: efc39f2cf19f17aedf98b7fb7a8784865821e387df44382390b5488e2ae1df1da4fb0b582f86cf3c6914f42b217b0c6f4700c7d092c1c445ba16b491eb452e14

data/.rubocop.yml

@@ -18,7 +18,7 @@ Metrics/CyclomaticComplexity:
 Metrics/MethodLength:
   Max: 733
 Metrics/ModuleLength:
-  Max: 1574
+  Max: 1584
 Metrics/PerceivedComplexity:
   Max: 157
 Style/HashEachMethods:

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '<8.1.2'
+gem 'activesupport', '<8.1.3'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.3.0'
@@ -20,7 +20,7 @@ gem 'base32', '0.3.4'
 gem 'bitcoin-ruby', '0.0.20'
 gem 'brakeman', '8.0.4'
 gem 'bson', '5.2.0'
-gem 'bundler', '>=4.0.7'
+gem 'bundler', '>=4.0.9'
 gem 'bundler-audit', '>=0.9.3'
 gem 'bunny', '2.24.0'
 gem 'colorize', '1.1.0'
@@ -31,7 +31,7 @@ gem 'eventmachine', '1.2.7'
 gem 'executable-hooks', '1.7.1'
 gem 'faker', '3.6.1'
 gem 'faye-websocket', '0.12.0'
-gem 'ffi', '1.17.3'
+gem 'ffi', '1.17.4'
 # gem 'fftw3', '0.3'
 gem 'gdb', '1.0.0'
 gem 'gem-wrappers', '1.4.0'
@@ -49,8 +49,8 @@ gem 'jwt', '3.1.2'
 gem 'libusb', '0.7.2'
 gem 'luhn', '3.0.0'
 gem 'mail', '2.9.0'
-gem 'mcp', '0.8.0'
-gem 'meshtastic', '0.0.157'
+gem 'mcp', '0.9.2'
+gem 'meshtastic', '0.0.158'
 gem 'metasm', '1.0.5'
 gem 'mongo', '2.23.0'
 gem 'msfrpc-client', '1.1.2'
@@ -59,7 +59,7 @@ gem 'net-ldap', '0.20.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.5.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.19.1'
+gem 'nokogiri', '1.19.2'
 gem 'nokogiri-diff', '0.3.0'
 gem 'oily_png', '1.2.1'
 gem 'open3', '0.2.1'
@@ -81,7 +81,7 @@ gem 'rmagick', '6.2.0'
 gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.85.1'
+gem 'rubocop', '1.86.0'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.9.0'
 gem 'ruby-audio', '1.6.1'
@@ -89,12 +89,12 @@ gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.1'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.15.1'
-gem 'selenium-devtools', '0.143.0'
+gem 'selenium-devtools', '0.145.0'
 gem 'selenium-webdriver', '4.41.0'
 gem 'slack-ruby-client', '3.1.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.4'
-gem 'sqlite3', '2.9.1'
+gem 'sqlite3', '2.9.2'
 gem 'thin', '2.0.1'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.550]:001 >>> PWN.help
+pwn[v0.5.552]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-4.0.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.550]:001 >>> PWN.help
+pwn[v0.5.552]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-4.0.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.550]:001 >>> PWN.help
+pwn[v0.5.552]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/burp_suite.rb

@@ -3,6 +3,7 @@
 require 'base64'
 require 'json'
 require 'socket'
+require 'tempfile'
 require 'uri'
 require 'yaml'
 
@@ -89,14 +90,22 @@ module PWN
             end
 
             default_http_ports = [80, 443]
+            offset = 0
+            limit = 200
+
             loop do
               # TODO: Implement repeater into the loop?  This reduces load to LLM but is slooow.
               # Repeater should analyze the reqesut/response pair and suggest
               # modifications to the request to further probe for vulnerabilities _quickly_.
               case type
               when :proxy_history
-                sitemap = get_sitemap(burp_obj: burp_obj)
-                proxy_history = get_proxy_history(burp_obj: burp_obj)
+                proxy_history = get_proxy_history(
+                  burp_obj: burp_obj,
+                  limit: limit,
+                  offset: offset
+                )
+
+                offset = 0 if proxy_history.empty?
                 proxy_history.each do |entry|
                   request = entry[:request]
                   response = entry[:response]
@@ -114,6 +123,7 @@ module PWN
 
                   # If sitemap comment and highlight color exists, use that instead of re-analyzing
                   sitemap_entry = nil
+                  sitemap = get_sitemap(burp_obj: burp_obj, uri: uri)
                   if sitemap.any?
                     sitemap_entry = sitemap.find do |site|
                       next unless site.key?(:http_service) && site.key?(:request)
@@ -151,8 +161,12 @@ module PWN
                 sleep Random.rand(30..60)
 
               when :sitemap
-                proxy_history = get_proxy_history(burp_obj: burp_obj)
-                sitemap = get_sitemap(burp_obj: burp_obj)
+                sitemap = get_sitemap(
+                  burp_obj: burp_obj,
+                  limit: limit,
+                  offset: offset
+                )
+                offset = 0 if sitemap.empty?
                 sitemap.each do |entry|
                   request = entry[:request]
                   response = entry[:response]
@@ -169,6 +183,7 @@ module PWN
                   next unless entry.key?(:comment) && entry[:comment].to_s.strip.empty?
 
                   proxy_history_entry = nil
+                  proxy_history = get_proxy_history(burp_obj: burp_obj, uri: uri)
                   if proxy_history.any?
                     proxy_history_entry = proxy_history.find do |proxy_entry|
                       next unless proxy_entry.key?(:http_service) && proxy_entry.key?(:request)
@@ -205,7 +220,12 @@ module PWN
                 sleep Random.rand(60..90)
 
               when :websocket_history
-                websocket_history = get_websocket_history(burp_obj: burp_obj)
+                websocket_history = get_websocket_history(
+                  burp_obj: burp_obj,
+                  limit: limit,
+                  offset: offset
+                )
+                offset = 0 if websocket_history.empty?
                 websocket_history.each do |entry|
                   uri = entry[:url]
                   next unless in_scope(burp_obj: burp_obj, uri: uri)
@@ -235,15 +255,18 @@ module PWN
                 end
                 sleep Random.rand(3..10)
               end
+              offset += limit
             end
           rescue Errno::ECONNREFUSED
             puts "BurpSuite:#{type} AI Introspection Thread >>> Terminating API Calls..."
           rescue StandardError => e
             puts "BurpSuite AI Introspection Thread Error: #{e}"
             puts e.backtrace
+            backtrace_file = Tempfile.new(["PWN_Plugins_BurpSuite_AI_Thread-#{type}", '.log'])
+            backtrace_file.write("#{e}\n#{e.backtrace.join("\n")}")
             raise e
           ensure
-            puts "BurpSuite:#{type} AI Introspection Thread >>> Goodbye."
+            puts "BurpSuite: #{type} AI Introspection Thread >>> Goodbye."
           end
 
           burp_obj[:introspection_threads] = introspection_thread_arr.push(introspection_thread)
@@ -589,6 +612,9 @@ module PWN
       # Supported Method Parameters::
       # json_proxy_history = PWN::Plugins::BurpSuite.get_proxy_history(
       #   burp_obj: 'required - burp_obj returned by #start method',
+      #   limit: 'optional - number of proxy history entries to return (default: 200)',
+      #   offset: 'optional - offset for pagination of proxy history entries (default: 0)',
+      #   uri: 'optional - filter proxy history entries by URI (default: nil)',
       #   keyword: 'optional - keyword to filter proxy history entries (default: nil)',
       #   return_as: 'optional - :base64 or :har (defaults to :base64)'
       # )
@@ -597,10 +623,19 @@ module PWN
         burp_obj = opts[:burp_obj]
         rest_browser = burp_obj[:rest_browser]
         mitm_rest_api = burp_obj[:mitm_rest_api]
+
+        limit = opts[:limit] ||= 200
+        offset = opts[:offset] ||= 0
+        uri = opts[:uri]
         keyword = opts[:keyword]
         return_as = opts[:return_as] ||= :base64
 
-        rest_call = "http://#{mitm_rest_api}/proxy/history"
+        if uri.nil?
+          rest_call = "http://#{mitm_rest_api}/proxy/history?limit=#{limit}&offset=#{offset}"
+        else
+          base64_encoded_uri = Base64.strict_encode64(uri.to_s.scrub.strip.chomp)
+          rest_call = "http://#{mitm_rest_api}/proxy/history/#{base64_encoded_uri}?limit=#{limit}&offset=#{offset}"
+        end
 
         sitemap = rest_browser.get(
           rest_call,
@@ -807,6 +842,8 @@ module PWN
       # Supported Method Parameters::
       # json_web_socket_history = PWN::Plugins::BurpSuite.get_websocket_history(
       #   burp_obj: 'required - burp_obj returned by #start method',
+      #   limit: 'optional - number of websocket history entries to return (default: 200)',
+      #   offset: 'optional - offset for pagination of websocket history entries (default: 0)',
       #   keyword: 'optional - keyword to filter websocket history entries (default: nil)'
       # )
 
@@ -814,9 +851,12 @@ module PWN
         burp_obj = opts[:burp_obj]
         rest_browser = burp_obj[:rest_browser]
         mitm_rest_api = burp_obj[:mitm_rest_api]
+
+        limit = opts[:limit] ||= 200
+        offset = opts[:offset] ||= 0
         keyword = opts[:keyword]
 
-        rest_call = "http://#{mitm_rest_api}/websocket/history"
+        rest_call = "http://#{mitm_rest_api}/websocket/history?limit=#{limit}&offset=#{offset}"
 
         sitemap = rest_browser.get(
           rest_call,
@@ -878,6 +918,9 @@ module PWN
       # Supported Method Parameters::
       # json_sitemap = PWN::Plugins::BurpSuite.get_sitemap(
       #   burp_obj: 'required - burp_obj returned by #start method',
+      #   limit: 'optional - number of sitemap entries to return (default: 200)',
+      #   offset: 'optional - offset for pagination of sitemap entries (default: 0)',
+      #   uri: 'optional - URI to filter sitemap entries (default: nil)',
       #   keyword: 'optional - keyword to filter sitemap entries (default: nil)',
       #   return_as: 'optional - :base64 or :har (defaults to :base64)'
       # )
@@ -886,10 +929,19 @@ module PWN
         burp_obj = opts[:burp_obj]
         rest_browser = burp_obj[:rest_browser]
         mitm_rest_api = burp_obj[:mitm_rest_api]
+
+        limit = opts[:limit] ||= 200
+        offset = opts[:offset] ||= 0
+        uri = opts[:uri]
         keyword = opts[:keyword]
         return_as = opts[:return_as] ||= :base64
 
-        rest_call = "http://#{mitm_rest_api}/sitemap"
+        if uri.nil?
+          rest_call = "http://#{mitm_rest_api}/sitemap?limit=#{limit}&offset=#{offset}"
+        else
+          base64_encoded_uri = Base64.strict_encode64(uri.to_s.scrub.strip.chomp)
+          rest_call = "http://#{mitm_rest_api}/sitemap/#{base64_encoded_uri}?limit=#{limit}&offset=#{offset}"
+        end
 
         sitemap = rest_browser.get(
           rest_call,
@@ -1611,7 +1663,7 @@ module PWN
         target_port = URI.parse(target_url).port.to_i
         active_scan_url_arr = []
 
-        json_sitemap = get_sitemap(burp_obj: burp_obj, target_url: target_url)
+        json_sitemap = get_sitemap(burp_obj: burp_obj, url: target_url)
         json_sitemap.uniq.each do |site|
           # Skip if the site does not have a request or http_service
           next if site[:request].empty?
@@ -2058,6 +2110,9 @@ module PWN
 
           json_proxy_history = #{self}.get_proxy_history(
             burp_obj: 'required - burp_obj returned by #start method',
+            limit: 'optional - integer to limit number of proxy history entries returned (default: 200)',
+            offset: 'optional - integer to offset proxy history results (default: 0)',
+            uri: 'optional - URI to filter proxy history results (default: nil)',
             keyword: 'optional - keyword to filter proxy history results (default: nil)',
             return_as: 'optional - :base64 or :har (defaults to :base64)'
           )
@@ -2069,6 +2124,8 @@ module PWN
 
           json_proxy_history = #{self}.get_websocket_history(
             burp_obj: 'required - burp_obj returned by #start method',
+            limit: 'optional - integer to limit number of websocket history entries returned (default: 200)',
+            offset: 'optional - integer to offset websocket history results (default: 0)',
             keyword: 'optional - keyword to filter websocket history results (default: nil)'
           )
 
@@ -2079,6 +2136,9 @@ module PWN
 
           json_sitemap = #{self}.get_sitemap(
             burp_obj: 'required - burp_obj returned by #start method',
+            limit: 'optional - integer to limit number of sitemap entries returned (default: 200)',
+            offset: 'optional - integer to offset sitemap results (default: 0)',
+            uri: 'optional - URI to filter sitemap results (default: nil)',
             keyword: 'optional - keyword to filter sitemap results (default: nil)',
             return_as: 'optional - :base64 or :har (defaults to :base64)'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.550'
+  VERSION = '0.5.552'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.550
+  version: 0.5.552
 platform: ruby
 authors:
 - 0day Inc.
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: 8.1.2
+        version: 8.1.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: 8.1.2
+        version: 8.1.3
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -141,14 +141,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.7
+        version: 4.0.9
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.7
+        version: 4.0.9
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -295,14 +295,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.17.3
+        version: 1.17.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.17.3
+        version: 1.17.4
 - !ruby/object:Gem::Dependency
   name: gdb
   requirement: !ruby/object:Gem::Requirement
@@ -533,28 +533,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.2
 - !ruby/object:Gem::Dependency
   name: meshtastic
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.157
+        version: 0.0.158
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.157
+        version: 0.0.158
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -673,14 +673,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.1
+        version: 1.19.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.1
+        version: 1.19.2
 - !ruby/object:Gem::Dependency
   name: nokogiri-diff
   requirement: !ruby/object:Gem::Requirement
@@ -981,14 +981,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.85.1
+        version: 1.86.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.85.1
+        version: 1.86.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1093,14 +1093,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.143.0
+        version: 0.145.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.143.0
+        version: 0.145.0
 - !ruby/object:Gem::Dependency
   name: selenium-webdriver
   requirement: !ruby/object:Gem::Requirement
@@ -1163,14 +1163,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.1
+        version: 2.9.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.1
+        version: 2.9.2
 - !ruby/object:Gem::Dependency
   name: thin
   requirement: !ruby/object:Gem::Requirement
@@ -2483,7 +2483,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.7
+rubygems_version: 4.0.9
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond
 test_files: []