pwn 0.5.552 → 0.5.554

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0eb71ac056fca69e9b903f0cfca9c905f1acafa556aad10dfb3da0cd64675b0d
-  data.tar.gz: 4416c11597a1ba0ee7c84267be3f47cdf67bb236f2ab89f766155a86b72eaaea
+  metadata.gz: 49eb5496957e5c639b18bbbee93a0e8f51516b5c0a8f001b32c7de7ca5e1211b
+  data.tar.gz: 872444c1e4c9fb5fb80280d2dd7dc9437a3bfe473711964127a7b519c13b10fc
 SHA512:
-  metadata.gz: a8815c6bb53071f7a6094ced8da45d537b0bf6a454b404325cbb30e446034827fd1fcac537cc90f3dd0213da498793fd46b1d762b593d0b2040d80da09658eb8
-  data.tar.gz: efc39f2cf19f17aedf98b7fb7a8784865821e387df44382390b5488e2ae1df1da4fb0b582f86cf3c6914f42b217b0c6f4700c7d092c1c445ba16b491eb452e14
+  metadata.gz: 512dbde8dbbdac206c76606f3a0d9900903ed027bbefe8231d26a9c33cac3817bf63a610dfc7196ac7d7ed18e21b168d63f4e64493adda91f4076a356208c39b
+  data.tar.gz: 0a135f251ad1076a446d221e10532d97c0a2d43e4c77da18752bd89763a907f03f6717b37ccce982338bf534b6c4c13a39a02227f16e8cc716111ba3e716ddce

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.552]:001 >>> PWN.help
+pwn[v0.5.554]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-4.0.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.552]:001 >>> PWN.help
+pwn[v0.5.554]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-4.0.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.552]:001 >>> PWN.help
+pwn[v0.5.554]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/ai/agent/burp_suite.rb

@@ -47,7 +47,7 @@ module PWN
             4. Risk Score:
               For each analysis generate a risk score between 0% - 100% based on exploitability and impact.  This should be reflected as { "risk_score": "nnn%" } in the final output JSON.
 
-            Analyze provided HTTP request/response pairs methodically: Start with a high-level overview, then dive into specifics, flag potential issues with evidence from the traffic, and end with PoC if applicable. Be verbose in reasoning but concise in output. Prioritize high-severity findings. If data is incomplete, request clarifications.
+            Analyze provided HTTP request/response pairs methodically: Start with a high-level overview, then dive into specifics, flag potential issues with evidence from the traffic, and end with PoC if applicable. Be verbose in reasoning but concise in output. Prioritize high-severity findings. If data is incomplete, request clarifications.  If analyzing a JavaScript source map file (i.e. .js.map), focus on deobfuscating and identifying any potentially vulnerable code patterns, especially those that could lead to client-side vulnerabilities like DOM XSS, prototype pollution, or insecure deserialization. Look for patterns such as eval, document.write, innerHTML assignments, and event handlers that could be influenced by user input. Provide detailed analysis and PoCs if vulnerabilities are identified.
           '
 
           PWN::AI::Introspection.reflect_on(

data/lib/pwn/plugins/burp_suite.rb

@@ -90,10 +90,11 @@ module PWN
             end
 
             default_http_ports = [80, 443]
+            limit = 10
             offset = 0
-            limit = 200
 
             loop do
+              keep_offset = false
               # TODO: Implement repeater into the loop?  This reduces load to LLM but is slooow.
               # Repeater should analyze the reqesut/response pair and suggest
               # modifications to the request to further probe for vulnerabilities _quickly_.
@@ -121,6 +122,8 @@ module PWN
 
                   next unless entry.key?(:comment) && entry[:comment].to_s.strip.empty?
 
+                  keep_offset = true
+
                   # If sitemap comment and highlight color exists, use that instead of re-analyzing
                   sitemap_entry = nil
                   sitemap = get_sitemap(burp_obj: burp_obj, uri: uri)
@@ -182,6 +185,8 @@ module PWN
 
                   next unless entry.key?(:comment) && entry[:comment].to_s.strip.empty?
 
+                  keep_offset = true
+
                   proxy_history_entry = nil
                   proxy_history = get_proxy_history(burp_obj: burp_obj, uri: uri)
                   if proxy_history.any?
@@ -232,6 +237,8 @@ module PWN
 
                   next unless entry.key?(:comment) && entry[:comment].to_s.strip.empty?
 
+                  keep_offset = true
+
                   web_socket_id = entry[:web_socket_id]
                   direction = entry[:direction]
                   payload = entry[:payload]
@@ -255,7 +262,7 @@ module PWN
                 end
                 sleep Random.rand(3..10)
               end
-              offset += limit
+              offset += limit unless keep_offset
             end
           rescue Errno::ECONNREFUSED
             puts "BurpSuite:#{type} AI Introspection Thread >>> Terminating API Calls..."

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.552'
+  VERSION = '0.5.554'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.552
+  version: 0.5.554
 platform: ruby
 authors:
 - 0day Inc.