pwn 0.5.613 → 0.5.615

data/lib/pwn/plugins/repl.rb

@@ -28,7 +28,7 @@ module PWN
         #
         # For tmux + terminator (or similar):
         #   In ~/.tmux.conf (then `tmux kill-server` + new session):
-        #     set -g extended-keys on
+        #     set -s extended-keys on
         #     set -g xterm-keys on
         #   Use TERM=xterm-256color (or equivalent that supports the CSI) in your terminal profile.
         #
@@ -77,6 +77,7 @@ module PWN
         def initialize(pry_instance)
           @line_buffer = ''
           pry_instance.config.pwn_ai_original_input = Pry.input
+          ensure_tmux_extended_keys
           install_shift_enter_bindings
         end
 
@@ -91,6 +92,70 @@ module PWN
           Reline.send(:core).config
         end
 
+        # tmux gates modifyOtherKeys / kitty-keyboard requests behind its
+        # `extended-keys` *server* option. When `off` (the shipped default
+        # on many distros / older ~/.tmux.conf), tmux silently drops the
+        # ENABLE_EXTENDED_KEYS CSI we emit in #readline and forwards plain
+        # 0x0D for BOTH Enter and Shift+Enter — SHIFT_ENTER_SEQS can then
+        # never match and Shift+Enter "still just submits".
+        #
+        # Detect tmux via $TMUX, read the current server option, and flip it
+        # to `on` (NOT `always`) so tmux honours the per-read enable/disable
+        # we send around Reline.readmultiline. `on` is scoped: tmux only
+        # encodes extended keys while the inner app is requesting them, so
+        # this does not affect other panes or the main pwn REPL.
+        #
+        # Verified on tmux 3.6b: `extended-keys on` + `\e[>4;1m` → S-Enter is
+        # delivered as `\e[27;2;13~` (matches SHIFT_ENTER_SEQS[1]).
+        def ensure_tmux_extended_keys
+          return if self.class.instance_variable_get(:@tmux_extkeys_checked)
+
+          self.class.instance_variable_set(:@tmux_extkeys_checked, true)
+          return if ENV['TMUX'].to_s.empty?
+
+          # (1) Inner side: tmux → app. `extended-keys on` makes tmux honour the
+          #     ENABLE_EXTENDED_KEYS request we emit in #readline and re-encode
+          #     S-Enter to the pane as CSI 27;2;13~ / CSI 13;2u.
+          cur = `tmux show -sv extended-keys 2>/dev/null`.to_s.strip
+          unless %w[on always].include?(cur)
+            if system('tmux', 'set', '-s', 'extended-keys', 'on', out: File::NULL, err: File::NULL)
+              warn '[pwn] tmux `extended-keys` was off; auto-enabled (server scope) so SHIFT+ENTER is distinguishable from ENTER.'
+              warn '[pwn] Persist it: add `set -s extended-keys on` to ~/.tmux.conf'
+            else
+              warn '[pwn] tmux `extended-keys` is off and could not be enabled; SHIFT+ENTER will behave like ENTER.'
+              warn '[pwn] Fix: run `tmux set -s extended-keys on` (and add `set -s extended-keys on` to ~/.tmux.conf).'
+            end
+          end
+
+          # (2) Outer side: terminal → tmux. tmux only ASKS the outer terminal
+          #     to encode S-Enter distinctly (sends `\e[>4;2m` at attach) if the
+          #     client tty has the `extkeys` feature. That comes from the
+          #     `terminal-features` server option matched against the client's
+          #     $TERM at attach time. No match ⇒ outer emulator keeps sending
+          #     0x0D for BOTH Enter and Shift+Enter ⇒ tmux can't disambiguate ⇒
+          #     step (1) is moot. Add it for common outer TERMs (and tmux* to
+          #     cover `alias tmux='TERM=tmux-256color tmux'` and nested tmux).
+          tf = `tmux show -sv terminal-features 2>/dev/null`.to_s
+          unless tf.include?('extkeys')
+            %w[xterm* tmux* screen*].each do |pat|
+              system('tmux', 'set', '-as', 'terminal-features', "#{pat}:extkeys", out: File::NULL, err: File::NULL)
+            end
+            warn '[pwn] Added `extkeys` to tmux terminal-features (xterm*/tmux*/screen*) so tmux requests extended keys from the OUTER terminal.'
+            warn "[pwn] Persist it: add `set -as terminal-features 'xterm*:extkeys'` (and tmux*/screen*) to ~/.tmux.conf"
+          end
+
+          # (3) terminal-features is evaluated at CLIENT ATTACH time. If the
+          #     current client attached before `extkeys` was present, tmux never
+          #     sent the enable CSI to the outer terminal. Detect and warn.
+          feats = `tmux display -p '\#{client_termfeatures}' 2>/dev/null`.to_s
+          return if feats.include?('extkeys')
+
+          warn '[pwn] This tmux client attached before `extkeys` was configured; the outer terminal is still sending plain 0x0D for SHIFT+ENTER.'
+          warn '[pwn] Fix: detach (prefix + d) and reattach (`tmux attach -t <session>`) so tmux re-negotiates extended keys with the terminal.'
+        rescue StandardError => e
+          warn "[pwn] ensure_tmux_extended_keys: #{e.class}: #{e.message}"
+        end
+
         # Register SHIFT+ENTER → :key_newline on Reline's default keymaps.
         #
         # IMPORTANT: do NOT use add_oneshot_key_binding for this. Reline's
@@ -296,9 +361,9 @@ module PWN
             puts "    'Use NmapIt to port scan target.com then use TransparentBrowser to spider and SAST::TestCaseEngine to analyze code if cloned. Generate report with PWN::Reports.'"
             puts "    'Execute CLI nmap -sV target.com and summarize findings using PWN modules.'"
             puts "[*] Skills loaded from #{skills_path} (#{skills_count} available) + memory/sessions/cron to expand autonomous capabilities."
-            puts "[*] Type 'toggle-pwn-ai' or normal pwn commands to exit agent mode."
+            puts "[*] Type 'back' to exit pwn-ai mode."
             puts '[*] MULTILINE in pwn-ai: Use ONLY SHIFT+ENTER for newlines (plain ENTER submits to AI).'
-            puts "[*] tmux + terminator users: Ensure ~/.tmux.conf has 'set -g extended-keys on' and 'set -g xterm-keys on', then restart tmux. Use TERM=xterm-256color."
+            puts "[*] tmux + terminator users: Ensure ~/.tmux.conf has 'set -s extended-keys on' and 'set -g xterm-keys on', then restart tmux. Use TERM=xterm-256color."
           end
         end
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.613'
+  VERSION = '0.5.615'
 end

data/spec/lib/pwn/ai/agent/learning_spec.rb

@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require 'tmpdir'
+
+describe PWN::AI::Agent::Learning do
+  it 'should display information for authors' do
+    authors_response = PWN::AI::Agent::Learning
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::AI::Agent::Learning
+    expect(help_response).to respond_to :help
+  end
+
+  it 'notes outcomes, surfaces context, and consolidates memory' do
+    tmp = Dir.mktmpdir
+    stub_const('PWN::AI::Agent::Learning::LEARNING_FILE', File.join(tmp, 'learning.jsonl'))
+    stub_const('PWN::Memory::MEMORY_FILE', File.join(tmp, 'memory.json'))
+
+    PWN::AI::Agent::Learning.reset
+    e = PWN::AI::Agent::Learning.note_outcome(task: 'nmap sweep', success: true, details: '3 hosts up', tags: %w[recon])
+    expect(e[:success]).to be true
+
+    rows = PWN::AI::Agent::Learning.outcomes(limit: 10)
+    expect(rows.first[:task]).to eq 'nmap sweep'
+
+    ctx = PWN::AI::Agent::Learning.to_context
+    expect(ctx).to include('nmap sweep')
+
+    stats = PWN::AI::Agent::Learning.stats
+    expect(stats[:total_outcomes]).to be >= 1
+
+    # duplicate lesson in memory then consolidate
+    PWN::Memory.remember(key: :dup_a, value: 'same lesson', category: :lesson)
+    PWN::Memory.remember(key: :dup_b, value: 'same lesson', category: :lesson)
+    res = PWN::AI::Agent::Learning.consolidate(max_entries: 100)
+    expect(res[:removed]).to be >= 1
+  end
+
+  it 'reflects on a session using the heuristic extractor' do
+    tmp = Dir.mktmpdir
+    stub_const('PWN::AI::Agent::Learning::LEARNING_FILE', File.join(tmp, 'learning.jsonl'))
+    stub_const('PWN::Memory::MEMORY_FILE', File.join(tmp, 'memory.json'))
+    stub_const('PWN::Sessions::SESSIONS_DIR', File.join(tmp, 'sessions'))
+
+    s = PWN::Sessions.create(title: 'learning spec')
+    PWN::Sessions.append(session_id: s[:id], role: 'user', content: 'scan target')
+    PWN::Sessions.append(session_id: s[:id], role: 'tool', content: 'shell → {"success":false,"error":"timeout after 120s"}')
+    PWN::Sessions.append(session_id: s[:id], role: 'assistant', content: 'Retry with -T2')
+
+    report = PWN::AI::Agent::Learning.reflect(session_id: s[:id])
+    expect(report[:count]).to be >= 1
+    expect(PWN::Memory.recall(query: 'failure').keys).not_to be_empty
+  end
+
+  it 'distills a skill from an explicit body' do
+    tmp = Dir.mktmpdir
+    stub_const('PWN::AI::Agent::Learning::LEARNING_FILE', File.join(tmp, 'learning.jsonl'))
+    stub_const('PWN::Memory::MEMORY_FILE', File.join(tmp, 'memory.json'))
+    allow(PWN::AI::Agent::Learning).to receive(:skills_dir).and_return(File.join(tmp, 'skills'))
+
+    out = PWN::AI::Agent::Learning.distill_skill(name: 'spec_skill', content: "# Spec Skill\nDo the thing.")
+    expect(out[:saved]).to be true
+    expect(File.exist?(out[:path])).to be true
+  end
+end

data/spec/lib/pwn/ai/agent/metrics_spec.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe PWN::AI::Agent::Metrics do
+  it 'should display information for authors' do
+    authors_response = PWN::AI::Agent::Metrics
+    expect(authors_response).to respond_to :authors
+  end
+
+  it 'should display information for existing help method' do
+    help_response = PWN::AI::Agent::Metrics
+    expect(help_response).to respond_to :help
+  end
+
+  it 'records tool telemetry and summarises effectiveness' do
+    stub_const('PWN::AI::Agent::Metrics::METRICS_FILE', File.join(Dir.mktmpdir, 'metrics.json'))
+    PWN::AI::Agent::Metrics.reset
+    PWN::AI::Agent::Metrics.record(name: 'shell', success: true,  duration: 0.10)
+    PWN::AI::Agent::Metrics.record(name: 'shell', success: false, duration: 0.20, error: 'boom')
+    rows = PWN::AI::Agent::Metrics.summary
+    row  = rows.find { |r| r[:name] == 'shell' }
+    expect(row[:calls]).to eq 2
+    expect(row[:success_rate]).to eq 0.5
+    expect(PWN::AI::Agent::Metrics.to_context).to include('shell')
+  end
+end

data/spec/lib/pwn/ai/agent/tools/learning_spec.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe 'PWN::AI::Agent::Tools learning' do
+  it 'registers the learning_note_outcome tool' do
+    PWN::AI::Agent::Registry.discover(force: true)
+    expect(PWN::AI::Agent::Registry.lookup(name: 'learning_note_outcome')).not_to be_nil
+  end
+
+  it 'registers the learning_reflect tool' do
+    PWN::AI::Agent::Registry.discover(force: true)
+    expect(PWN::AI::Agent::Registry.lookup(name: 'learning_reflect')).not_to be_nil
+  end
+
+  it 'registers the learning_distill_skill tool' do
+    PWN::AI::Agent::Registry.discover(force: true)
+    expect(PWN::AI::Agent::Registry.lookup(name: 'learning_distill_skill')).not_to be_nil
+  end
+
+  it 'registers the learning_stats tool' do
+    PWN::AI::Agent::Registry.discover(force: true)
+    expect(PWN::AI::Agent::Registry.lookup(name: 'learning_stats')).not_to be_nil
+  end
+
+  it 'exposes the learning toolset in the registry' do
+    PWN::AI::Agent::Registry.discover(force: true)
+    expect(PWN::AI::Agent::Registry.toolsets).to include('learning')
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.613
+  version: 0.5.615
 platform: ruby
 authors:
 - 0day Inc.
@@ -141,14 +141,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.14
+        version: 4.0.15
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.14
+        version: 4.0.15
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -351,14 +351,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
 - !ruby/object:Gem::Dependency
   name: gruff
   requirement: !ruby/object:Gem::Requirement
@@ -519,42 +519,42 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
 - !ruby/object:Gem::Dependency
   name: mcp
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.23.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.23.0
 - !ruby/object:Gem::Dependency
   name: meshtastic
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.165
+        version: 0.0.167
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.165
+        version: 0.0.167
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -673,14 +673,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.19.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.19.4
 - !ruby/object:Gem::Dependency
   name: nokogiri-diff
   requirement: !ruby/object:Gem::Requirement
@@ -925,14 +925,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4
+        version: 7.0.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4
+        version: 7.0.5
 - !ruby/object:Gem::Dependency
   name: rqrcode
   requirement: !ruby/object:Gem::Requirement
@@ -981,14 +981,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.88.0
+        version: 1.88.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.88.0
+        version: 1.88.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1079,14 +1079,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.2
+        version: 2.17.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.2
+        version: 2.17.4
 - !ruby/object:Gem::Dependency
   name: selenium-devtools
   requirement: !ruby/object:Gem::Requirement
@@ -1121,14 +1121,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.2.0
 - !ruby/object:Gem::Dependency
   name: socksify
   requirement: !ruby/object:Gem::Requirement
@@ -1453,18 +1453,62 @@ files:
 - bin/pwn_zaproxy_active_rest_api_scan
 - bin/pwn_zaproxy_active_scan
 - build_gem.sh
-- documentation/PWN.png
-- documentation/PWN_Contributors_and_Users.png
-- documentation/fax-spectrogram.png
-- documentation/fax-waveform.png
-- documentation/frozen_string_literal_files_changed_from_false_to_true.txt
-- documentation/lifecycle_authz_replay.example.yaml
-- documentation/pwn_android_war_dialer_session.png
-- documentation/pwn_install.png
-- documentation/pwn_wallpaper.jpg
-- documentation/ringing-spectrogram.png
-- documentation/ringing-waveform.png
-- documentation/vulnerability_report_template.md
+- documentation/AI-Integration.md
+- documentation/BurpSuite.md
+- documentation/Contributing.md
+- documentation/Diagrams.md
+- documentation/Drivers.md
+- documentation/General-PWN-Usage.md
+- documentation/Home.md
+- documentation/How-PWN-Works.md
+- documentation/Installation.md
+- documentation/NmapIt.md
+- documentation/Plugins.md
+- documentation/Reporting.md
+- documentation/SAST.md
+- documentation/Skills-Memory-Learning.md
+- documentation/Transparent-Browser.md
+- documentation/Troubleshooting.md
+- documentation/What-is-PWN.md
+- documentation/Why-PWN.md
+- documentation/diagrams/ai-integration-tool-calling.svg
+- documentation/diagrams/burp-vs-zap-preference.svg
+- documentation/diagrams/code-scanning-sast.svg
+- documentation/diagrams/dot/ai-integration-tool-calling.dot
+- documentation/diagrams/dot/burp-vs-zap-preference.dot
+- documentation/diagrams/dot/code-scanning-sast.dot
+- documentation/diagrams/dot/driver-framework.dot
+- documentation/diagrams/dot/fuzzing-workflow.dot
+- documentation/diagrams/dot/history-to-drivers.dot
+- documentation/diagrams/dot/memory-skills-detailed.dot
+- documentation/diagrams/dot/network-infra-testing.dot
+- documentation/diagrams/dot/overall-pwn-architecture.dot
+- documentation/diagrams/dot/penetration-testing-workflow.dot
+- documentation/diagrams/dot/plugin-ecosystem.dot
+- documentation/diagrams/dot/pwn-ai-feedback-learning-loop.dot
+- documentation/diagrams/dot/pwn-repl-prototyping.dot
+- documentation/diagrams/dot/reporting-pipeline.dot
+- documentation/diagrams/dot/reverse-engineering-flow.dot
+- documentation/diagrams/dot/sessions-cron-automation.dot
+- documentation/diagrams/dot/web-application-testing.dot
+- documentation/diagrams/dot/zero-day-research-flow.dot
+- documentation/diagrams/driver-framework.svg
+- documentation/diagrams/fuzzing-workflow.svg
+- documentation/diagrams/history-to-drivers.svg
+- documentation/diagrams/memory-skills-detailed.svg
+- documentation/diagrams/network-infra-testing.svg
+- documentation/diagrams/overall-pwn-architecture.svg
+- documentation/diagrams/penetration-testing-workflow.svg
+- documentation/diagrams/plugin-ecosystem.svg
+- documentation/diagrams/pwn-ai-feedback-learning-loop.svg
+- documentation/diagrams/pwn-repl-prototyping.svg
+- documentation/diagrams/reporting-pipeline.svg
+- documentation/diagrams/reverse-engineering-flow.svg
+- documentation/diagrams/sessions-cron-automation.svg
+- documentation/diagrams/web-application-testing.svg
+- documentation/diagrams/zero-day-research-flow.svg
+- documentation/pwn-REPL.md
+- documentation/pwn-ai-Agent.md
 - etc/systemd/msfrpcd.service
 - etc/systemd/openvas.service
 - etc/userland/aws/apache2/jenkins_443.conf
@@ -1781,11 +1825,14 @@ files:
 - lib/pwn/ai/agent/dispatch.rb
 - lib/pwn/ai/agent/gqrx.rb
 - lib/pwn/ai/agent/hacker_one.rb
+- lib/pwn/ai/agent/learning.rb
 - lib/pwn/ai/agent/loop.rb
+- lib/pwn/ai/agent/metrics.rb
 - lib/pwn/ai/agent/prompt_builder.rb
 - lib/pwn/ai/agent/registry.rb
 - lib/pwn/ai/agent/result.rb
 - lib/pwn/ai/agent/sast.rb
+- lib/pwn/ai/agent/tools/learning.rb
 - lib/pwn/ai/agent/tools/memory.rb
 - lib/pwn/ai/agent/tools/ruby_eval.rb
 - lib/pwn/ai/agent/tools/shell.rb
@@ -2166,11 +2213,14 @@ files:
 - spec/lib/pwn/ai/agent/dispatch_spec.rb
 - spec/lib/pwn/ai/agent/gqrx_spec.rb
 - spec/lib/pwn/ai/agent/hacker_one_spec.rb
+- spec/lib/pwn/ai/agent/learning_spec.rb
 - spec/lib/pwn/ai/agent/loop_spec.rb
+- spec/lib/pwn/ai/agent/metrics_spec.rb
 - spec/lib/pwn/ai/agent/prompt_builder_spec.rb
 - spec/lib/pwn/ai/agent/registry_spec.rb
 - spec/lib/pwn/ai/agent/result_spec.rb
 - spec/lib/pwn/ai/agent/sast_spec.rb
+- spec/lib/pwn/ai/agent/tools/learning_spec.rb
 - spec/lib/pwn/ai/agent/tools/memory_spec.rb
 - spec/lib/pwn/ai/agent/tools/ruby_eval_spec.rb
 - spec/lib/pwn/ai/agent/tools/shell_spec.rb
@@ -2519,7 +2569,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.14
+rubygems_version: 4.0.15
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond
 test_files: []

data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt

@@ -1,54 +0,0 @@
-bin/pwn_shodan_search:# frozen_string_literal: false
-bin/pwn_sast:# frozen_string_literal: false
-bin/pwn_www_uri_buster:# frozen_string_literal: false
-bin/pwn_bdba_scan:# frozen_string_literal: false
-bin/pwn_serial_msr206:# frozen_string_literal: false
-bin/pwn_bdba_groups:# frozen_string_literal: false
-bin/pwn_serial_son_micro_sm132_rfid:# frozen_string_literal: false
-bin/pwn_gqrx_scanner:# frozen_string_literal: false
-bin/pwn_nmap_discover_tcp_udp:# frozen_string_literal: false
-lib/pwn/sast/beef_hook.rb:# frozen_string_literal: false
-lib/pwn/sast/local_storage.rb:# frozen_string_literal: false
-lib/pwn/sast/post_message.rb:# frozen_string_literal: false
-lib/pwn/sast/factory.rb:# frozen_string_literal: false
-lib/pwn/sast/base64.rb:# frozen_string_literal: false
-lib/pwn/sast/shell.rb:# frozen_string_literal: false
-lib/pwn/sast/aws.rb:# frozen_string_literal: false
-lib/pwn/sast/token.rb:# frozen_string_literal: false
-lib/pwn/sast/port.rb:# frozen_string_literal: false
-lib/pwn/sast/throw_errors.rb:# frozen_string_literal: false
-lib/pwn/sast/pom_version.rb:# frozen_string_literal: false
-lib/pwn/sast/outer_html.rb:# frozen_string_literal: false
-lib/pwn/sast/window_location_hash.rb:# frozen_string_literal: false
-lib/pwn/sast/deserial_java.rb:# frozen_string_literal: false
-lib/pwn/sast/php_input_mechanisms.rb:# frozen_string_literal: false
-lib/pwn/sast/redos.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_python.rb:# frozen_string_literal: false
-lib/pwn/sast/type_script_type_juggling.rb:# frozen_string_literal: false
-lib/pwn/sast/version.rb:# frozen_string_literal: false
-lib/pwn/sast/sql.rb:# frozen_string_literal: false
-lib/pwn/sast/emoticon.rb:# frozen_string_literal: false
-lib/pwn/sast/redirect.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_ruby.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_java.rb:# frozen_string_literal: false
-lib/pwn/sast/private_key.rb:# frozen_string_literal: false
-lib/pwn/sast/location_hash.rb:# frozen_string_literal: false
-lib/pwn/sast/password.rb:# frozen_string_literal: false
-lib/pwn/sast/php_type_juggling.rb:# frozen_string_literal: false
-lib/pwn/sast/padding_oracle.rb:# frozen_string_literal: false
-lib/pwn/sast/md5.rb:# frozen_string_literal: false
-lib/pwn/sast/http_authorization_header.rb:# frozen_string_literal: false
-lib/pwn/sast/amqp_connect_as_guest.rb:# frozen_string_literal: false
-lib/pwn/sast/signature.rb:# frozen_string_literal: false
-lib/pwn/sast/apache_file_system_util_api.rb:# frozen_string_literal: false
-lib/pwn/sast/keystore.rb:# frozen_string_literal: false
-lib/pwn/sast/log4j.rb:# frozen_string_literal: false
-lib/pwn/sast/inner_html.rb:# frozen_string_literal: false
-lib/pwn/sast/task_tag.rb:# frozen_string_literal: false
-lib/pwn/sast/csrf.rb:# frozen_string_literal: false
-lib/pwn/sast/eval.rb:# frozen_string_literal: false
-lib/pwn/sast/logger.rb:# frozen_string_literal: false
-lib/pwn/sast/sudo.rb:# frozen_string_literal: false
-lib/pwn/sast/ssl.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_scala.rb:# frozen_string_literal: false
-lib/pwn/sast/banned_function_calls_c.rb:# frozen_string_literal: false

data/documentation/lifecycle_authz_replay.example.yaml

@@ -1,27 +0,0 @@
-campaign:
-  id: github-collaborator-revoke
-  label: GitHub collaborator removal replay
-  target: https://github.com/acme/private-repo
-  change_event: remove_collaborator
-  notes: Capture access before and after collaborator removal.
-
-actors:
-  - id: owner
-    label: Repository owner account
-  - id: revoked_user
-    label: User removed from repository
-
-surfaces:
-  - id: repo_settings_page
-    label: Repository settings HTML page
-  - id: repo_metadata_api
-    label: Repository metadata API endpoint
-
-checkpoints:
-  - pre_change
-  - post_change_t0
-  - post_change_tn
-
-expected_denied_after:
-  - post_change_t0
-  - post_change_tn

data/documentation/vulnerability_report_template.md

@@ -1,37 +0,0 @@
-# Vulnerability Report Template
-
-**Program:** [HackerOne Program Name]
-**Report Date:** [YYYY-MM-DD]
-**Severity:** [Critical/High/Medium/Low]
-
-## 1. Detailed finding description with technical depth and PoC when possible
-
-[Insert deep technical analysis, affected endpoints, steps to reproduce, PoC code/requests here.]
-
-## 2. Business impact
-
-[Business/reputational/financial consequences.]
-
-## 3. Remediation recommendations, including compensating controls / stop gaps
-
-[Fix recommendations, WAF rules, logging, etc.]
-
-## 4. CVSS score, vector string, and first.org calculator URI
-
-**CVSS v3.1 Score:** X.X (High)
-**Vector:** AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
-**Calculator:** https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
-
-## 5. CWE category, brief description, and CWE URI
-
-**CWE-XXX:** [Name] - [Brief desc]
-https://cwe.mitre.org/data/definitions/XXX.html
-
-## 6. Relevant NIST 800-53 control
-
-**Control:** [e.g. SI-10, AC-6]
-[Description and how it maps.]
-
----
-
-*Generated with PWN::AI::Agent::VulnGen*