pwn 0.5.613 → 0.5.615

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (87) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +10 -10
  3. data/README.md +110 -24
  4. data/documentation/AI-Integration.md +36 -0
  5. data/documentation/BurpSuite.md +26 -0
  6. data/documentation/Contributing.md +31 -0
  7. data/documentation/Diagrams.md +57 -0
  8. data/documentation/Drivers.md +25 -0
  9. data/documentation/General-PWN-Usage.md +40 -0
  10. data/documentation/Home.md +51 -0
  11. data/documentation/How-PWN-Works.md +60 -0
  12. data/documentation/Installation.md +50 -0
  13. data/documentation/NmapIt.md +18 -0
  14. data/documentation/Plugins.md +59 -0
  15. data/documentation/Reporting.md +28 -0
  16. data/documentation/SAST.md +32 -0
  17. data/documentation/Skills-Memory-Learning.md +44 -0
  18. data/documentation/Transparent-Browser.md +32 -0
  19. data/documentation/Troubleshooting.md +38 -0
  20. data/documentation/What-is-PWN.md +34 -0
  21. data/documentation/Why-PWN.md +18 -0
  22. data/documentation/diagrams/ai-integration-tool-calling.svg +134 -0
  23. data/documentation/diagrams/burp-vs-zap-preference.svg +84 -0
  24. data/documentation/diagrams/code-scanning-sast.svg +112 -0
  25. data/documentation/diagrams/dot/ai-integration-tool-calling.dot +23 -0
  26. data/documentation/diagrams/dot/burp-vs-zap-preference.dot +15 -0
  27. data/documentation/diagrams/dot/code-scanning-sast.dot +21 -0
  28. data/documentation/diagrams/dot/driver-framework.dot +17 -0
  29. data/documentation/diagrams/dot/fuzzing-workflow.dot +27 -0
  30. data/documentation/diagrams/dot/history-to-drivers.dot +20 -0
  31. data/documentation/diagrams/dot/memory-skills-detailed.dot +28 -0
  32. data/documentation/diagrams/dot/network-infra-testing.dot +22 -0
  33. data/documentation/diagrams/dot/overall-pwn-architecture.dot +49 -0
  34. data/documentation/diagrams/dot/penetration-testing-workflow.dot +29 -0
  35. data/documentation/diagrams/dot/plugin-ecosystem.dot +31 -0
  36. data/documentation/diagrams/dot/pwn-ai-feedback-learning-loop.dot +57 -0
  37. data/documentation/diagrams/dot/pwn-repl-prototyping.dot +37 -0
  38. data/documentation/diagrams/dot/reporting-pipeline.dot +17 -0
  39. data/documentation/diagrams/dot/reverse-engineering-flow.dot +21 -0
  40. data/documentation/diagrams/dot/sessions-cron-automation.dot +17 -0
  41. data/documentation/diagrams/dot/web-application-testing.dot +27 -0
  42. data/documentation/diagrams/dot/zero-day-research-flow.dot +27 -0
  43. data/documentation/diagrams/driver-framework.svg +90 -0
  44. data/documentation/diagrams/fuzzing-workflow.svg +147 -0
  45. data/documentation/diagrams/history-to-drivers.svg +117 -0
  46. data/documentation/diagrams/memory-skills-detailed.svg +154 -0
  47. data/documentation/diagrams/network-infra-testing.svg +121 -0
  48. data/documentation/diagrams/overall-pwn-architecture.svg +234 -0
  49. data/documentation/diagrams/penetration-testing-workflow.svg +148 -0
  50. data/documentation/diagrams/plugin-ecosystem.svg +172 -0
  51. data/documentation/diagrams/pwn-ai-feedback-learning-loop.svg +234 -0
  52. data/documentation/diagrams/pwn-repl-prototyping.svg +179 -0
  53. data/documentation/diagrams/reporting-pipeline.svg +91 -0
  54. data/documentation/diagrams/reverse-engineering-flow.svg +114 -0
  55. data/documentation/diagrams/sessions-cron-automation.svg +92 -0
  56. data/documentation/diagrams/web-application-testing.svg +137 -0
  57. data/documentation/diagrams/zero-day-research-flow.svg +149 -0
  58. data/documentation/pwn-REPL.md +33 -0
  59. data/documentation/pwn-ai-Agent.md +43 -0
  60. data/lib/pwn/ai/agent/learning.rb +377 -0
  61. data/lib/pwn/ai/agent/loop.rb +18 -3
  62. data/lib/pwn/ai/agent/metrics.rb +155 -0
  63. data/lib/pwn/ai/agent/prompt_builder.rb +23 -3
  64. data/lib/pwn/ai/agent/tools/learning.rb +113 -0
  65. data/lib/pwn/ai/agent/tools/skills.rb +94 -8
  66. data/lib/pwn/ai/agent.rb +2 -0
  67. data/lib/pwn/ai/grok.rb +249 -106
  68. data/lib/pwn/config.rb +86 -13
  69. data/lib/pwn/plugins/monkey_patch.rb +2 -2
  70. data/lib/pwn/plugins/repl.rb +68 -3
  71. data/lib/pwn/version.rb +1 -1
  72. data/spec/lib/pwn/ai/agent/learning_spec.rb +68 -0
  73. data/spec/lib/pwn/ai/agent/metrics_spec.rb +27 -0
  74. data/spec/lib/pwn/ai/agent/tools/learning_spec.rb +30 -0
  75. metadata +84 -34
  76. data/documentation/PWN.png +0 -0
  77. data/documentation/PWN_Contributors_and_Users.png +0 -0
  78. data/documentation/fax-spectrogram.png +0 -0
  79. data/documentation/fax-waveform.png +0 -0
  80. data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt +0 -54
  81. data/documentation/lifecycle_authz_replay.example.yaml +0 -27
  82. data/documentation/pwn_android_war_dialer_session.png +0 -0
  83. data/documentation/pwn_install.png +0 -0
  84. data/documentation/pwn_wallpaper.jpg +0 -0
  85. data/documentation/ringing-spectrogram.png +0 -0
  86. data/documentation/ringing-waveform.png +0 -0
  87. data/documentation/vulnerability_report_template.md +0 -37
data/documentation/diagrams/reporting-pipeline.svg ADDED
@@ -0,0 +1,91 @@
1
+ <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
+ <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
3
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
4
+ <!-- Generated by graphviz version 14.1.2 (0)
5
+ -->
6
+ <!-- Title: PWN Reporting Pipeline Pages: 1 -->
7
+ <svg width="445pt" height="181pt"
8
+ viewBox="0.00 0.00 445.00 181.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
9
+ <g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 176.82)">
10
+ <title>PWN Reporting Pipeline</title>
11
+ <polygon fill="white" stroke="none" points="-4,4 -4,-176.82 440.97,-176.82 440.97,4 -4,4"/>
12
+ <!-- Findings -->
13
+ <g id="node1" class="node">
14
+ <title>Findings</title>
15
+ <path fill="none" stroke="black" d="M66.25,-111.66C66.25,-111.66 12,-111.66 12,-111.66 6,-111.66 0,-105.66 0,-99.66 0,-99.66 0,-73.66 0,-73.66 0,-67.66 6,-61.66 12,-61.66 12,-61.66 66.25,-61.66 66.25,-61.66 72.25,-61.66 78.25,-67.66 78.25,-73.66 78.25,-73.66 78.25,-99.66 78.25,-99.66 78.25,-105.66 72.25,-111.66 66.25,-111.66"/>
16
+ <text xml:space="preserve" text-anchor="middle" x="39.12" y="-99.11" font-family="Arial" font-size="9.00">Raw Findings</text>
17
+ <text xml:space="preserve" text-anchor="middle" x="39.12" y="-88.61" font-family="Arial" font-size="9.00">(Scan results,</text>
18
+ <text xml:space="preserve" text-anchor="middle" x="39.12" y="-78.11" font-family="Arial" font-size="9.00">agent outputs,</text>
19
+ <text xml:space="preserve" text-anchor="middle" x="39.12" y="-67.61" font-family="Arial" font-size="9.00">exploits, SAST)</text>
20
+ </g>
21
+ <!-- Reports -->
22
+ <g id="node2" class="node">
23
+ <title>Reports</title>
24
+ <ellipse fill="none" stroke="black" cx="158.24" cy="-86.66" rx="42.99" ry="18"/>
25
+ <text xml:space="preserve" text-anchor="middle" x="158.24" y="-83.36" font-family="Arial" font-size="9.00">PWN::Reports</text>
26
+ </g>
27
+ <!-- Findings&#45;&gt;Reports -->
28
+ <g id="edge1" class="edge">
29
+ <title>Findings&#45;&gt;Reports</title>
30
+ <path fill="none" stroke="black" d="M78.47,-86.66C86.45,-86.66 95,-86.66 103.42,-86.66"/>
31
+ <polygon fill="black" stroke="black" points="103.24,-90.16 113.24,-86.66 103.24,-83.16 103.24,-90.16"/>
32
+ </g>
33
+ <!-- Templates -->
34
+ <g id="node3" class="node">
35
+ <title>Templates</title>
36
+ <path fill="none" stroke="black" d="M436.97,-167.88C436.97,-170.6 415.74,-172.82 389.6,-172.82 363.45,-172.82 342.22,-170.6 342.22,-167.88 342.22,-167.88 342.22,-123.44 342.22,-123.44 342.22,-120.72 363.45,-118.5 389.6,-118.5 415.74,-118.5 436.97,-120.72 436.97,-123.44 436.97,-123.44 436.97,-167.88 436.97,-167.88"/>
37
+ <path fill="none" stroke="black" d="M436.97,-167.88C436.97,-165.15 415.74,-162.94 389.6,-162.94 363.45,-162.94 342.22,-165.15 342.22,-167.88"/>
38
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-152.86" font-family="Arial" font-size="9.00">Templates</text>
39
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-142.36" font-family="Arial" font-size="9.00">(Markdown, PDF,</text>
40
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-131.86" font-family="Arial" font-size="9.00">JSON, CSV, HTML)</text>
41
+ </g>
42
+ <!-- Reports&#45;&gt;Templates -->
43
+ <g id="edge2" class="edge">
44
+ <title>Reports&#45;&gt;Templates</title>
45
+ <path fill="none" stroke="black" d="M200.45,-90.45C206.73,-92.19 213.13,-94.01 219.22,-95.66 256.34,-105.72 298.37,-115.9 331.27,-124.7"/>
46
+ <polygon fill="black" stroke="black" points="330.03,-127.99 340.59,-127.23 331.86,-121.23 330.03,-127.99"/>
47
+ </g>
48
+ <!-- Outputs -->
49
+ <g id="node4" class="node">
50
+ <title>Outputs</title>
51
+ <path fill="none" stroke="black" d="M424.97,-100.41C424.97,-100.41 354.22,-100.41 354.22,-100.41 348.22,-100.41 342.22,-94.41 342.22,-88.41 342.22,-88.41 342.22,-72.91 342.22,-72.91 342.22,-66.91 348.22,-60.91 354.22,-60.91 354.22,-60.91 424.97,-60.91 424.97,-60.91 430.97,-60.91 436.97,-66.91 436.97,-72.91 436.97,-72.91 436.97,-88.41 436.97,-88.41 436.97,-94.41 430.97,-100.41 424.97,-100.41"/>
52
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-87.86" font-family="Arial" font-size="9.00">Generated Reports</text>
53
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-77.36" font-family="Arial" font-size="9.00">(DefectDojo import,</text>
54
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-66.86" font-family="Arial" font-size="9.00">Jira tickets, PDFs)</text>
55
+ </g>
56
+ <!-- Reports&#45;&gt;Outputs -->
57
+ <g id="edge4" class="edge">
58
+ <title>Reports&#45;&gt;Outputs</title>
59
+ <path fill="none" stroke="black" d="M201.57,-85.55C237.74,-84.61 290.13,-83.24 330.27,-82.19"/>
60
+ <polygon fill="black" stroke="black" points="330.35,-85.69 340.26,-81.92 330.17,-78.69 330.35,-85.69"/>
61
+ <text xml:space="preserve" text-anchor="middle" x="271.72" y="-88.25" font-family="Times,serif" font-size="14.00">generate</text>
62
+ </g>
63
+ <!-- Memory -->
64
+ <g id="node5" class="node">
65
+ <title>Memory</title>
66
+ <path fill="none" stroke="black" d="M426.85,-33.39C426.85,-35.19 410.15,-36.66 389.6,-36.66 369.04,-36.66 352.35,-35.19 352.35,-33.39 352.35,-33.39 352.35,-3.93 352.35,-3.93 352.35,-2.13 369.04,-0.66 389.6,-0.66 410.15,-0.66 426.85,-2.13 426.85,-3.93 426.85,-3.93 426.85,-33.39 426.85,-33.39"/>
67
+ <path fill="none" stroke="black" d="M426.85,-33.39C426.85,-31.58 410.15,-30.11 389.6,-30.11 369.04,-30.11 352.35,-31.58 352.35,-33.39"/>
68
+ <text xml:space="preserve" text-anchor="middle" x="389.6" y="-15.36" font-family="Arial" font-size="9.00">PWN::Memory</text>
69
+ </g>
70
+ <!-- Reports&#45;&gt;Memory -->
71
+ <g id="edge5" class="edge">
72
+ <title>Reports&#45;&gt;Memory</title>
73
+ <path fill="none" stroke="black" d="M188.84,-73.64C198.43,-69.67 209.18,-65.48 219.22,-62.16 259.75,-48.75 306.85,-36.95 341.08,-29.03"/>
74
+ <polygon fill="black" stroke="black" points="341.72,-32.48 350.69,-26.84 340.16,-25.65 341.72,-32.48"/>
75
+ <text xml:space="preserve" text-anchor="middle" x="271.72" y="-65.36" font-family="Times,serif" font-size="14.00">store summary</text>
76
+ </g>
77
+ <!-- Templates&#45;&gt;Reports -->
78
+ <g id="edge3" class="edge">
79
+ <title>Templates&#45;&gt;Reports</title>
80
+ <path fill="none" stroke="black" d="M342.05,-142.59C307.93,-136.2 260.54,-124.85 219.22,-113.66 210.68,-111.35 201.51,-108.69 192.98,-105.84"/>
81
+ <polygon fill="black" stroke="black" points="194.24,-102.58 183.65,-102.52 191.9,-109.18 194.24,-102.58"/>
82
+ </g>
83
+ <!-- Memory&#45;&gt;Reports -->
84
+ <g id="edge6" class="edge">
85
+ <title>Memory&#45;&gt;Reports</title>
86
+ <path fill="none" stroke="black" d="M351.94,-8.17C316.24,-0.04 261.35,6.83 219.22,-13.16 199.26,-22.64 183.74,-42.36 173.5,-59"/>
87
+ <polygon fill="black" stroke="black" points="170.54,-57.12 168.57,-67.53 176.6,-60.62 170.54,-57.12"/>
88
+ <text xml:space="preserve" text-anchor="middle" x="271.72" y="-16.36" font-family="Times,serif" font-size="14.00">enrich with context</text>
89
+ </g>
90
+ </g>
91
+ </svg>
data/documentation/diagrams/reverse-engineering-flow.svg ADDED
@@ -0,0 +1,114 @@
1
+ <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
+ <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
3
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
4
+ <!-- Generated by graphviz version 14.1.2 (0)
5
+ -->
6
+ <!-- Title: PWN Reverse Engineering Flow Pages: 1 -->
7
+ <svg width="242pt" height="523pt"
8
+ viewBox="0.00 0.00 242.00 523.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
9
+ <g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 518.86)">
10
+ <title>PWN Reverse Engineering Flow</title>
11
+ <polygon fill="white" stroke="none" points="-4,4 -4,-518.86 237.96,-518.86 237.96,4 -4,4"/>
12
+ <!-- Binary -->
13
+ <g id="node1" class="node">
14
+ <title>Binary</title>
15
+ <path fill="none" stroke="black" d="M166.34,-514.86C166.34,-514.86 103.09,-514.86 103.09,-514.86 97.09,-514.86 91.09,-508.86 91.09,-502.86 91.09,-502.86 91.09,-487.36 91.09,-487.36 91.09,-481.36 97.09,-475.36 103.09,-475.36 103.09,-475.36 166.34,-475.36 166.34,-475.36 172.34,-475.36 178.34,-481.36 178.34,-487.36 178.34,-487.36 178.34,-502.86 178.34,-502.86 178.34,-508.86 172.34,-514.86 166.34,-514.86"/>
16
+ <text xml:space="preserve" text-anchor="middle" x="134.71" y="-502.31" font-family="Arial" font-size="9.00">Binary / Firmware</text>
17
+ <text xml:space="preserve" text-anchor="middle" x="134.71" y="-491.81" font-family="Arial" font-size="9.00">(ELF, PE, APK,</text>
18
+ <text xml:space="preserve" text-anchor="middle" x="134.71" y="-481.31" font-family="Arial" font-size="9.00">Serial devices)</text>
19
+ </g>
20
+ <!-- RE -->
21
+ <g id="node2" class="node">
22
+ <title>RE</title>
23
+ <path fill="none" stroke="black" d="M136.59,-438.36C136.59,-438.36 44.84,-438.36 44.84,-438.36 38.84,-438.36 32.84,-432.36 32.84,-426.36 32.84,-426.36 32.84,-400.36 32.84,-400.36 32.84,-394.36 38.84,-388.36 44.84,-388.36 44.84,-388.36 136.59,-388.36 136.59,-388.36 142.59,-388.36 148.59,-394.36 148.59,-400.36 148.59,-400.36 148.59,-426.36 148.59,-426.36 148.59,-432.36 142.59,-438.36 136.59,-438.36"/>
24
+ <text xml:space="preserve" text-anchor="middle" x="90.71" y="-425.81" font-family="Arial" font-size="9.00">RE Tools</text>
25
+ <text xml:space="preserve" text-anchor="middle" x="90.71" y="-415.31" font-family="Arial" font-size="9.00">(XXD, Assembly,</text>
26
+ <text xml:space="preserve" text-anchor="middle" x="90.71" y="-404.81" font-family="Arial" font-size="9.00">Strings, objdump,</text>
27
+ <text xml:space="preserve" text-anchor="middle" x="90.71" y="-394.31" font-family="Arial" font-size="9.00">Radare/Ghidra via shell)</text>
28
+ </g>
29
+ <!-- Binary&#45;&gt;RE -->
30
+ <g id="edge1" class="edge">
31
+ <title>Binary&#45;&gt;RE</title>
32
+ <path fill="none" stroke="black" d="M124.28,-475.21C119.89,-467.25 114.63,-457.72 109.6,-448.6"/>
33
+ <polygon fill="black" stroke="black" points="112.69,-446.96 104.8,-439.9 106.57,-450.34 112.69,-446.96"/>
34
+ </g>
35
+ <!-- PWNRE -->
36
+ <g id="node3" class="node">
37
+ <title>PWNRE</title>
38
+ <path fill="none" stroke="black" d="M112.84,-351.36C112.84,-351.36 52.59,-351.36 52.59,-351.36 46.59,-351.36 40.59,-345.36 40.59,-339.36 40.59,-339.36 40.59,-323.86 40.59,-323.86 40.59,-317.86 46.59,-311.86 52.59,-311.86 52.59,-311.86 112.84,-311.86 112.84,-311.86 118.84,-311.86 124.84,-317.86 124.84,-323.86 124.84,-323.86 124.84,-339.36 124.84,-339.36 124.84,-345.36 118.84,-351.36 112.84,-351.36"/>
39
+ <text xml:space="preserve" text-anchor="middle" x="82.71" y="-338.81" font-family="Arial" font-size="9.00">PWN::Plugins::</text>
40
+ <text xml:space="preserve" text-anchor="middle" x="82.71" y="-328.31" font-family="Arial" font-size="9.00">Assembly, XXD,</text>
41
+ <text xml:space="preserve" text-anchor="middle" x="82.71" y="-317.81" font-family="Arial" font-size="9.00">Serial, BusPirate</text>
42
+ </g>
43
+ <!-- RE&#45;&gt;PWNRE -->
44
+ <g id="edge2" class="edge">
45
+ <title>RE&#45;&gt;PWNRE</title>
46
+ <path fill="none" stroke="black" d="M88.27,-388C87.48,-380.18 86.6,-371.42 85.78,-363.22"/>
47
+ <polygon fill="black" stroke="black" points="89.26,-362.87 84.78,-353.27 82.3,-363.57 89.26,-362.87"/>
48
+ </g>
49
+ <!-- Analysis -->
50
+ <g id="node4" class="node">
51
+ <title>Analysis</title>
52
+ <ellipse fill="none" stroke="black" cx="70.71" cy="-246.93" rx="70.71" ry="27.93"/>
53
+ <text xml:space="preserve" text-anchor="middle" x="70.71" y="-254.13" font-family="Arial" font-size="9.00">Analysis</text>
54
+ <text xml:space="preserve" text-anchor="middle" x="70.71" y="-243.63" font-family="Arial" font-size="9.00">(Deobfuscate, patch,</text>
55
+ <text xml:space="preserve" text-anchor="middle" x="70.71" y="-233.13" font-family="Arial" font-size="9.00">identify vulns)</text>
56
+ </g>
57
+ <!-- PWNRE&#45;&gt;Analysis -->
58
+ <g id="edge3" class="edge">
59
+ <title>PWNRE&#45;&gt;Analysis</title>
60
+ <path fill="none" stroke="black" d="M79.93,-311.43C78.84,-303.94 77.55,-295.06 76.29,-286.36"/>
61
+ <polygon fill="black" stroke="black" points="79.78,-286.04 74.88,-276.64 72.85,-287.04 79.78,-286.04"/>
62
+ </g>
63
+ <!-- FuzzRE -->
64
+ <g id="node5" class="node">
65
+ <title>FuzzRE</title>
66
+ <path fill="none" stroke="black" d="M83.96,-182C83.96,-182 21.46,-182 21.46,-182 15.46,-182 9.46,-176 9.46,-170 9.46,-170 9.46,-158 9.46,-158 9.46,-152 15.46,-146 21.46,-146 21.46,-146 83.96,-146 83.96,-146 89.96,-146 95.96,-152 95.96,-158 95.96,-158 95.96,-170 95.96,-170 95.96,-176 89.96,-182 83.96,-182"/>
67
+ <text xml:space="preserve" text-anchor="middle" x="52.71" y="-160.7" font-family="Arial" font-size="9.00">Targeted Fuzzing</text>
68
+ </g>
69
+ <!-- Analysis&#45;&gt;FuzzRE -->
70
+ <g id="edge4" class="edge">
71
+ <title>Analysis&#45;&gt;FuzzRE</title>
72
+ <path fill="none" stroke="black" d="M64.72,-218.98C62.88,-210.73 60.86,-201.63 59,-193.3"/>
73
+ <polygon fill="black" stroke="black" points="62.45,-192.66 56.86,-183.66 55.62,-194.18 62.45,-192.66"/>
74
+ </g>
75
+ <!-- ExploitRE -->
76
+ <g id="node6" class="node">
77
+ <title>ExploitRE</title>
78
+ <path fill="none" stroke="black" d="M137.21,-109C137.21,-109 76.21,-109 76.21,-109 70.21,-109 64.21,-103 64.21,-97 64.21,-97 64.21,-85 64.21,-85 64.21,-79 70.21,-73 76.21,-73 76.21,-73 137.21,-73 137.21,-73 143.21,-73 149.21,-79 149.21,-85 149.21,-85 149.21,-97 149.21,-97 149.21,-103 143.21,-109 137.21,-109"/>
79
+ <text xml:space="preserve" text-anchor="middle" x="106.71" y="-92.95" font-family="Arial" font-size="9.00">Craft Exploit</text>
80
+ <text xml:space="preserve" text-anchor="middle" x="106.71" y="-82.45" font-family="Arial" font-size="9.00">(ROP, shellcode)</text>
81
+ </g>
82
+ <!-- Analysis&#45;&gt;ExploitRE -->
83
+ <g id="edge5" class="edge">
84
+ <title>Analysis&#45;&gt;ExploitRE</title>
85
+ <path fill="none" stroke="black" d="M88.4,-219.4C94.81,-208.32 101.31,-195.01 104.71,-182 109.94,-161.97 110.3,-138.58 109.42,-120.66"/>
86
+ <polygon fill="black" stroke="black" points="112.92,-120.5 108.76,-110.75 105.93,-120.96 112.92,-120.5"/>
87
+ </g>
88
+ <!-- FuzzRE&#45;&gt;ExploitRE -->
89
+ <g id="edge6" class="edge">
90
+ <title>FuzzRE&#45;&gt;ExploitRE</title>
91
+ <path fill="none" stroke="black" d="M65.78,-145.81C72.15,-137.44 79.94,-127.2 87.01,-117.9"/>
92
+ <polygon fill="black" stroke="black" points="89.58,-120.31 92.84,-110.23 84,-116.07 89.58,-120.31"/>
93
+ </g>
94
+ <!-- Test -->
95
+ <g id="node7" class="node">
96
+ <title>Test</title>
97
+ <path fill="none" stroke="black" d="M172.21,-36C172.21,-36 111.21,-36 111.21,-36 105.21,-36 99.21,-30 99.21,-24 99.21,-24 99.21,-12 99.21,-12 99.21,-6 105.21,0 111.21,0 111.21,0 172.21,0 172.21,0 178.21,0 184.21,-6 184.21,-12 184.21,-12 184.21,-24 184.21,-24 184.21,-30 178.21,-36 172.21,-36"/>
98
+ <text xml:space="preserve" text-anchor="middle" x="141.71" y="-14.7" font-family="Arial" font-size="9.00">Validate in REPL</text>
99
+ </g>
100
+ <!-- ExploitRE&#45;&gt;Test -->
101
+ <g id="edge7" class="edge">
102
+ <title>ExploitRE&#45;&gt;Test</title>
103
+ <path fill="none" stroke="black" d="M115.18,-72.81C119.14,-64.79 123.94,-55.05 128.37,-46.07"/>
104
+ <polygon fill="black" stroke="black" points="131.36,-47.9 132.65,-37.39 125.09,-44.81 131.36,-47.9"/>
105
+ </g>
106
+ <!-- Test&#45;&gt;Binary -->
107
+ <g id="edge8" class="edge">
108
+ <title>Test&#45;&gt;Binary</title>
109
+ <path fill="none" stroke="black" d="M156.35,-36.45C166.32,-50.12 177.71,-70.1 177.71,-90 177.71,-414.36 177.71,-414.36 177.71,-414.36 177.71,-433.07 168.43,-451.61 158.49,-466.1"/>
110
+ <polygon fill="black" stroke="black" points="155.95,-463.65 152.85,-473.78 161.59,-467.79 155.95,-463.65"/>
111
+ <text xml:space="preserve" text-anchor="middle" x="205.84" y="-241.88" font-family="Times,serif" font-size="14.00">re&#45;analyze</text>
112
+ </g>
113
+ </g>
114
+ </svg>
data/documentation/diagrams/sessions-cron-automation.svg ADDED
@@ -0,0 +1,92 @@
1
+ <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
+ <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
3
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
4
+ <!-- Generated by graphviz version 14.1.2 (0)
5
+ -->
6
+ <!-- Title: PWN Sessions, Cron &amp; Scheduled Automation Pages: 1 -->
7
+ <svg width="396pt" height="438pt"
8
+ viewBox="0.00 0.00 396.00 438.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
9
+ <g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 433.82)">
10
+ <title>PWN Sessions, Cron &amp; Scheduled Automation</title>
11
+ <polygon fill="white" stroke="none" points="-4,4 -4,-433.82 391.5,-433.82 391.5,4 -4,4"/>
12
+ <!-- Agent -->
13
+ <g id="node1" class="node">
14
+ <title>Agent</title>
15
+ <path fill="none" stroke="black" d="M195.62,-429.82C195.62,-429.82 118.88,-429.82 118.88,-429.82 112.88,-429.82 106.88,-423.82 106.88,-417.82 106.88,-417.82 106.88,-405.82 106.88,-405.82 106.88,-399.82 112.88,-393.82 118.88,-393.82 118.88,-393.82 195.62,-393.82 195.62,-393.82 201.62,-393.82 207.62,-399.82 207.62,-405.82 207.62,-405.82 207.62,-417.82 207.62,-417.82 207.62,-423.82 201.62,-429.82 195.62,-429.82"/>
16
+ <text xml:space="preserve" text-anchor="middle" x="157.25" y="-408.52" font-family="Arial" font-size="9.00">pwn&#45;ai Agent / REPL</text>
17
+ </g>
18
+ <!-- Sessions -->
19
+ <g id="node2" class="node">
20
+ <title>Sessions</title>
21
+ <path fill="none" stroke="black" d="M95.75,-336.39C95.75,-339.11 78.05,-341.32 56.25,-341.32 34.45,-341.32 16.75,-339.11 16.75,-336.39 16.75,-336.39 16.75,-291.95 16.75,-291.95 16.75,-289.23 34.45,-287.01 56.25,-287.01 78.05,-287.01 95.75,-289.23 95.75,-291.95 95.75,-291.95 95.75,-336.39 95.75,-336.39"/>
22
+ <path fill="none" stroke="black" d="M95.75,-336.39C95.75,-333.66 78.05,-331.45 56.25,-331.45 34.45,-331.45 16.75,-333.66 16.75,-336.39"/>
23
+ <text xml:space="preserve" text-anchor="middle" x="56.25" y="-321.37" font-family="Arial" font-size="9.00">PWN::Sessions</text>
24
+ <text xml:space="preserve" text-anchor="middle" x="56.25" y="-310.87" font-family="Arial" font-size="9.00">(record/replay,</text>
25
+ <text xml:space="preserve" text-anchor="middle" x="56.25" y="-300.37" font-family="Arial" font-size="9.00">transcripts)</text>
26
+ </g>
27
+ <!-- Agent&#45;&gt;Sessions -->
28
+ <g id="edge1" class="edge">
29
+ <title>Agent&#45;&gt;Sessions</title>
30
+ <path fill="none" stroke="black" d="M109.32,-393.46C100.41,-388.71 91.73,-382.88 84.75,-375.82 78.12,-369.12 72.83,-360.58 68.7,-352.04"/>
31
+ <polygon fill="black" stroke="black" points="72.02,-350.91 64.82,-343.14 65.6,-353.7 72.02,-350.91"/>
32
+ <text xml:space="preserve" text-anchor="middle" x="114" y="-362.52" font-family="Times,serif" font-size="14.00">save / load</text>
33
+ </g>
34
+ <!-- Memory -->
35
+ <g id="node5" class="node">
36
+ <title>Memory</title>
37
+ <path fill="none" stroke="black" d="M74.5,-231.24C74.5,-233.05 57.8,-234.51 37.25,-234.51 16.7,-234.51 0,-233.05 0,-231.24 0,-231.24 0,-201.78 0,-201.78 0,-199.98 16.7,-198.51 37.25,-198.51 57.8,-198.51 74.5,-199.98 74.5,-201.78 74.5,-201.78 74.5,-231.24 74.5,-231.24"/>
38
+ <path fill="none" stroke="black" d="M74.5,-231.24C74.5,-229.43 57.8,-227.97 37.25,-227.97 16.7,-227.97 0,-229.43 0,-231.24"/>
39
+ <text xml:space="preserve" text-anchor="middle" x="37.25" y="-213.21" font-family="Arial" font-size="9.00">PWN::Memory</text>
40
+ </g>
41
+ <!-- Sessions&#45;&gt;Memory -->
42
+ <g id="edge5" class="edge">
43
+ <title>Sessions&#45;&gt;Memory</title>
44
+ <path fill="none" stroke="black" d="M50.96,-286.52C48.45,-273.91 45.46,-258.83 42.91,-246"/>
45
+ <polygon fill="black" stroke="black" points="46.39,-245.58 41.01,-236.45 39.53,-246.94 46.39,-245.58"/>
46
+ <text xml:space="preserve" text-anchor="middle" x="91.19" y="-255.71" font-family="Times,serif" font-size="14.00">persist key facts</text>
47
+ </g>
48
+ <!-- Cron -->
49
+ <g id="node3" class="node">
50
+ <title>Cron</title>
51
+ <ellipse fill="none" stroke="black" cx="157.25" cy="-109.01" rx="62.23" ry="20.51"/>
52
+ <text xml:space="preserve" text-anchor="middle" x="157.25" y="-110.96" font-family="Arial" font-size="9.00">PWN::Cron</text>
53
+ <text xml:space="preserve" text-anchor="middle" x="157.25" y="-100.46" font-family="Arial" font-size="9.00">(scheduled tasks)</text>
54
+ </g>
55
+ <!-- Cron&#45;&gt;Agent -->
56
+ <g id="edge3" class="edge">
57
+ <title>Cron&#45;&gt;Agent</title>
58
+ <path fill="none" stroke="black" d="M157.25,-129.85C157.25,-181.68 157.25,-321.28 157.25,-381.98"/>
59
+ <polygon fill="black" stroke="black" points="153.75,-381.84 157.25,-391.84 160.75,-381.84 153.75,-381.84"/>
60
+ <text xml:space="preserve" text-anchor="middle" x="235.25" y="-255.71" font-family="Times,serif" font-size="14.00">run autonomous pwn&#45;ai jobs</text>
61
+ </g>
62
+ <!-- Drivers -->
63
+ <g id="node4" class="node">
64
+ <title>Drivers</title>
65
+ <path fill="none" stroke="black" d="M261,-36C261,-36 225.5,-36 225.5,-36 219.5,-36 213.5,-30 213.5,-24 213.5,-24 213.5,-12 213.5,-12 213.5,-6 219.5,0 225.5,0 225.5,0 261,0 261,0 267,0 273,-6 273,-12 273,-12 273,-24 273,-24 273,-30 267,-36 261,-36"/>
66
+ <text xml:space="preserve" text-anchor="middle" x="243.25" y="-19.95" font-family="Arial" font-size="9.00">Drivers &amp;</text>
67
+ <text xml:space="preserve" text-anchor="middle" x="243.25" y="-9.45" font-family="Arial" font-size="9.00">Bin Scripts</text>
68
+ </g>
69
+ <!-- Cron&#45;&gt;Drivers -->
70
+ <g id="edge2" class="edge">
71
+ <title>Cron&#45;&gt;Drivers</title>
72
+ <path fill="none" stroke="black" d="M175.52,-88.99C185.48,-78.63 198.03,-65.6 209.25,-54 212.19,-50.96 215.28,-47.77 218.34,-44.61"/>
73
+ <polygon fill="black" stroke="black" points="220.78,-47.13 225.23,-37.52 215.76,-42.25 220.78,-47.13"/>
74
+ <text xml:space="preserve" text-anchor="middle" x="261.75" y="-57.2" font-family="Times,serif" font-size="14.00">invoke on schedule</text>
75
+ </g>
76
+ <!-- Drivers&#45;&gt;Agent -->
77
+ <g id="edge4" class="edge">
78
+ <title>Drivers&#45;&gt;Agent</title>
79
+ <path fill="none" stroke="black" d="M273.26,-27.31C287.59,-32.72 303.84,-41.21 314.25,-54 329.9,-73.23 328.25,-83.21 328.25,-108.01 328.25,-315.17 328.25,-315.17 328.25,-315.17 328.25,-366.77 268.22,-390.8 219.29,-401.82"/>
80
+ <polygon fill="black" stroke="black" points="218.64,-398.38 209.57,-403.86 220.08,-405.23 218.64,-398.38"/>
81
+ <text xml:space="preserve" text-anchor="middle" x="357.88" y="-211.46" font-family="Times,serif" font-size="14.00">orchestrate</text>
82
+ </g>
83
+ <!-- Memory&#45;&gt;Cron -->
84
+ <g id="edge6" class="edge">
85
+ <title>Memory&#45;&gt;Cron</title>
86
+ <path fill="none" stroke="black" d="M31.25,-198.11C27.29,-183.22 24.58,-161.95 35.25,-147.51 47.19,-131.35 65.99,-121.93 85.28,-116.5"/>
87
+ <polygon fill="black" stroke="black" points="85.97,-119.94 94.86,-114.18 84.31,-113.14 85.97,-119.94"/>
88
+ <text xml:space="preserve" text-anchor="middle" x="89.25" y="-167.21" font-family="Times,serif" font-size="14.00">use recalled context</text>
89
+ <text xml:space="preserve" text-anchor="middle" x="89.25" y="-150.71" font-family="Times,serif" font-size="14.00">for jobs</text>
90
+ </g>
91
+ </g>
92
+ </svg>
data/documentation/diagrams/web-application-testing.svg ADDED
@@ -0,0 +1,137 @@
1
+ <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
+ <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
3
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
4
+ <!-- Generated by graphviz version 14.1.2 (0)
5
+ -->
6
+ <!-- Title: Web Application Testing with PWN Pages: 1 -->
7
+ <svg width="239pt" height="669pt"
8
+ viewBox="0.00 0.00 239.00 669.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
9
+ <g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 664.86)">
10
+ <title>Web Application Testing with PWN</title>
11
+ <polygon fill="white" stroke="none" points="-4,4 -4,-664.86 235.38,-664.86 235.38,4 -4,4"/>
12
+ <!-- App -->
13
+ <g id="node1" class="node">
14
+ <title>App</title>
15
+ <path fill="none" stroke="black" d="M158.88,-660.86C158.88,-660.86 100.88,-660.86 100.88,-660.86 94.88,-660.86 88.88,-654.86 88.88,-648.86 88.88,-648.86 88.88,-636.86 88.88,-636.86 88.88,-630.86 94.88,-624.86 100.88,-624.86 100.88,-624.86 158.88,-624.86 158.88,-624.86 164.88,-624.86 170.88,-630.86 170.88,-636.86 170.88,-636.86 170.88,-648.86 170.88,-648.86 170.88,-654.86 164.88,-660.86 158.88,-660.86"/>
16
+ <text xml:space="preserve" text-anchor="middle" x="129.88" y="-644.81" font-family="Arial" font-size="9.00">Web App</text>
17
+ <text xml:space="preserve" text-anchor="middle" x="129.88" y="-634.31" font-family="Arial" font-size="9.00">(URL, API, SPA)</text>
18
+ </g>
19
+ <!-- Proxy -->
20
+ <g id="node2" class="node">
21
+ <title>Proxy</title>
22
+ <ellipse fill="none" stroke="black" cx="129.88" cy="-559.93" rx="76.01" ry="27.93"/>
23
+ <text xml:space="preserve" text-anchor="middle" x="129.88" y="-567.13" font-family="Arial" font-size="9.00">Proxy Interception</text>
24
+ <text xml:space="preserve" text-anchor="middle" x="129.88" y="-556.63" font-family="Arial" font-size="9.00">(BurpSuite (preferred),</text>
25
+ <text xml:space="preserve" text-anchor="middle" x="129.88" y="-546.13" font-family="Arial" font-size="9.00">Zaproxy)</text>
26
+ </g>
27
+ <!-- App&#45;&gt;Proxy -->
28
+ <g id="edge1" class="edge">
29
+ <title>App&#45;&gt;Proxy</title>
30
+ <path fill="none" stroke="black" d="M129.88,-624.7C129.88,-617.34 129.88,-608.43 129.88,-599.63"/>
31
+ <polygon fill="black" stroke="black" points="133.38,-599.77 129.88,-589.77 126.38,-599.77 133.38,-599.77"/>
32
+ </g>
33
+ <!-- Spider -->
34
+ <g id="node3" class="node">
35
+ <title>Spider</title>
36
+ <path fill="none" stroke="black" d="M129.12,-495C129.12,-495 48.62,-495 48.62,-495 42.62,-495 36.62,-489 36.62,-483 36.62,-483 36.62,-467.5 36.62,-467.5 36.62,-461.5 42.62,-455.5 48.62,-455.5 48.62,-455.5 129.12,-455.5 129.12,-455.5 135.12,-455.5 141.12,-461.5 141.12,-467.5 141.12,-467.5 141.12,-483 141.12,-483 141.12,-489 135.12,-495 129.12,-495"/>
37
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-482.45" font-family="Arial" font-size="9.00">Spider / Crawl</text>
38
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-471.95" font-family="Arial" font-size="9.00">(TransparentBrowser,</text>
39
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-461.45" font-family="Arial" font-size="9.00">Spider plugin)</text>
40
+ </g>
41
+ <!-- Proxy&#45;&gt;Spider -->
42
+ <g id="edge2" class="edge">
43
+ <title>Proxy&#45;&gt;Spider</title>
44
+ <path fill="none" stroke="black" d="M116.68,-532.31C112.45,-523.79 107.75,-514.3 103.43,-505.6"/>
45
+ <polygon fill="black" stroke="black" points="106.66,-504.24 99.08,-496.83 100.39,-507.35 106.66,-504.24"/>
46
+ </g>
47
+ <!-- Findings -->
48
+ <g id="node8" class="node">
49
+ <title>Findings</title>
50
+ <path fill="none" stroke="black" d="M170.62,-112.5C170.62,-112.5 87.12,-112.5 87.12,-112.5 81.12,-112.5 75.12,-106.5 75.12,-100.5 75.12,-100.5 75.12,-85 75.12,-85 75.12,-79 81.12,-73 87.12,-73 87.12,-73 170.62,-73 170.62,-73 176.62,-73 182.62,-79 182.62,-85 182.62,-85 182.62,-100.5 182.62,-100.5 182.62,-106.5 176.62,-112.5 170.62,-112.5"/>
51
+ <text xml:space="preserve" text-anchor="middle" x="128.88" y="-99.95" font-family="Arial" font-size="9.00">Web Vulns</text>
52
+ <text xml:space="preserve" text-anchor="middle" x="128.88" y="-89.45" font-family="Arial" font-size="9.00">(XSS, SQLi, IDOR,</text>
53
+ <text xml:space="preserve" text-anchor="middle" x="128.88" y="-78.95" font-family="Arial" font-size="9.00">Cache deception, etc.)</text>
54
+ </g>
55
+ <!-- Proxy&#45;&gt;Findings -->
56
+ <g id="edge9" class="edge">
57
+ <title>Proxy&#45;&gt;Findings</title>
58
+ <path fill="none" stroke="black" d="M150.11,-532.53C160.03,-517.01 169.88,-496.5 169.88,-476.25 169.88,-476.25 169.88,-476.25 169.88,-168.25 169.88,-151.5 161.82,-134.96 152.85,-121.74"/>
59
+ <polygon fill="black" stroke="black" points="155.89,-119.96 147.16,-113.96 150.24,-124.1 155.89,-119.96"/>
60
+ <text xml:space="preserve" text-anchor="middle" x="200.62" y="-319.52" font-family="Times,serif" font-size="8.00">intercept &amp; modify</text>
61
+ </g>
62
+ <!-- ActiveScan -->
63
+ <g id="node4" class="node">
64
+ <title>ActiveScan</title>
65
+ <path fill="none" stroke="black" d="M125.38,-418.5C125.38,-418.5 34.38,-418.5 34.38,-418.5 28.38,-418.5 22.38,-412.5 22.38,-406.5 22.38,-406.5 22.38,-391 22.38,-391 22.38,-385 28.38,-379 34.38,-379 34.38,-379 125.38,-379 125.38,-379 131.38,-379 137.38,-385 137.38,-391 137.38,-391 137.38,-406.5 137.38,-406.5 137.38,-412.5 131.38,-418.5 125.38,-418.5"/>
66
+ <text xml:space="preserve" text-anchor="middle" x="79.88" y="-405.95" font-family="Arial" font-size="9.00">Active Scans</text>
67
+ <text xml:space="preserve" text-anchor="middle" x="79.88" y="-395.45" font-family="Arial" font-size="9.00">(Burp active, ZAP active,</text>
68
+ <text xml:space="preserve" text-anchor="middle" x="79.88" y="-384.95" font-family="Arial" font-size="9.00">pwn_*_active_scan)</text>
69
+ </g>
70
+ <!-- Spider&#45;&gt;ActiveScan -->
71
+ <g id="edge3" class="edge">
72
+ <title>Spider&#45;&gt;ActiveScan</title>
73
+ <path fill="none" stroke="black" d="M86.56,-455.06C85.64,-447.5 84.57,-438.63 83.56,-430.24"/>
74
+ <polygon fill="black" stroke="black" points="87.04,-429.88 82.37,-420.37 80.09,-430.72 87.04,-429.88"/>
75
+ </g>
76
+ <!-- Manual -->
77
+ <g id="node5" class="node">
78
+ <title>Manual</title>
79
+ <path fill="none" stroke="black" d="M121.75,-342C121.75,-342 12,-342 12,-342 6,-342 0,-336 0,-330 0,-330 0,-314.5 0,-314.5 0,-308.5 6,-302.5 12,-302.5 12,-302.5 121.75,-302.5 121.75,-302.5 127.75,-302.5 133.75,-308.5 133.75,-314.5 133.75,-314.5 133.75,-330 133.75,-330 133.75,-336 127.75,-342 121.75,-342"/>
80
+ <text xml:space="preserve" text-anchor="middle" x="66.88" y="-329.45" font-family="Arial" font-size="9.00">Manual + Assisted</text>
81
+ <text xml:space="preserve" text-anchor="middle" x="66.88" y="-318.95" font-family="Arial" font-size="9.00">(URI Buster, XSS vectors,</text>
82
+ <text xml:space="preserve" text-anchor="middle" x="66.88" y="-308.45" font-family="Arial" font-size="9.00">char encodings, web_cache)</text>
83
+ </g>
84
+ <!-- ActiveScan&#45;&gt;Manual -->
85
+ <g id="edge4" class="edge">
86
+ <title>ActiveScan&#45;&gt;Manual</title>
87
+ <path fill="none" stroke="black" d="M76.53,-378.56C75.19,-370.92 73.62,-361.93 72.14,-353.45"/>
88
+ <polygon fill="black" stroke="black" points="75.64,-353.11 70.47,-343.86 68.74,-354.31 75.64,-353.11"/>
89
+ </g>
90
+ <!-- API -->
91
+ <g id="node6" class="node">
92
+ <title>API</title>
93
+ <path fill="none" stroke="black" d="M126,-265.5C126,-265.5 35.75,-265.5 35.75,-265.5 29.75,-265.5 23.75,-259.5 23.75,-253.5 23.75,-253.5 23.75,-238 23.75,-238 23.75,-232 29.75,-226 35.75,-226 35.75,-226 126,-226 126,-226 132,-226 138,-232 138,-238 138,-238 138,-253.5 138,-253.5 138,-259.5 132,-265.5 126,-265.5"/>
94
+ <text xml:space="preserve" text-anchor="middle" x="80.88" y="-252.95" font-family="Arial" font-size="9.00">API Testing</text>
95
+ <text xml:space="preserve" text-anchor="middle" x="80.88" y="-242.45" font-family="Arial" font-size="9.00">(OpenAPI, JSONPathify,</text>
96
+ <text xml:space="preserve" text-anchor="middle" x="80.88" y="-231.95" font-family="Arial" font-size="9.00">GraphQL introspection)</text>
97
+ </g>
98
+ <!-- Manual&#45;&gt;API -->
99
+ <g id="edge5" class="edge">
100
+ <title>Manual&#45;&gt;API</title>
101
+ <path fill="none" stroke="black" d="M70.48,-302.06C71.92,-294.42 73.61,-285.43 75.2,-276.95"/>
102
+ <polygon fill="black" stroke="black" points="78.6,-277.83 77,-267.36 71.72,-276.54 78.6,-277.83"/>
103
+ </g>
104
+ <!-- AuthWeb -->
105
+ <g id="node7" class="node">
106
+ <title>AuthWeb</title>
107
+ <path fill="none" stroke="black" d="M125.75,-189C125.75,-189 52,-189 52,-189 46,-189 40,-183 40,-177 40,-177 40,-161.5 40,-161.5 40,-155.5 46,-149.5 52,-149.5 52,-149.5 125.75,-149.5 125.75,-149.5 131.75,-149.5 137.75,-155.5 137.75,-161.5 137.75,-161.5 137.75,-177 137.75,-177 137.75,-183 131.75,-189 125.75,-189"/>
108
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-176.45" font-family="Arial" font-size="9.00">Auth &amp; Session</text>
109
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-165.95" font-family="Arial" font-size="9.00">(OAuth2, BasicAuth,</text>
110
+ <text xml:space="preserve" text-anchor="middle" x="88.88" y="-155.45" font-family="Arial" font-size="9.00">JWT handling)</text>
111
+ </g>
112
+ <!-- API&#45;&gt;AuthWeb -->
113
+ <g id="edge6" class="edge">
114
+ <title>API&#45;&gt;AuthWeb</title>
115
+ <path fill="none" stroke="black" d="M82.94,-225.56C83.75,-218 84.7,-209.13 85.6,-200.74"/>
116
+ <polygon fill="black" stroke="black" points="89.07,-201.19 86.66,-190.88 82.11,-200.44 89.07,-201.19"/>
117
+ </g>
118
+ <!-- AuthWeb&#45;&gt;Findings -->
119
+ <g id="edge7" class="edge">
120
+ <title>AuthWeb&#45;&gt;Findings</title>
121
+ <path fill="none" stroke="black" d="M99.18,-149.06C103.47,-141.07 108.55,-131.61 113.28,-122.8"/>
122
+ <polygon fill="black" stroke="black" points="116.25,-124.67 117.89,-114.2 110.08,-121.36 116.25,-124.67"/>
123
+ </g>
124
+ <!-- ReportWeb -->
125
+ <g id="node9" class="node">
126
+ <title>ReportWeb</title>
127
+ <path fill="none" stroke="black" d="M152.62,-36C152.62,-36 105.12,-36 105.12,-36 99.12,-36 93.12,-30 93.12,-24 93.12,-24 93.12,-12 93.12,-12 93.12,-6 99.12,0 105.12,0 105.12,0 152.62,0 152.62,0 158.62,0 164.62,-6 164.62,-12 164.62,-12 164.62,-24 164.62,-24 164.62,-30 158.62,-36 152.62,-36"/>
128
+ <text xml:space="preserve" text-anchor="middle" x="128.88" y="-14.7" font-family="Arial" font-size="9.00">PWN Reports</text>
129
+ </g>
130
+ <!-- Findings&#45;&gt;ReportWeb -->
131
+ <g id="edge8" class="edge">
132
+ <title>Findings&#45;&gt;ReportWeb</title>
133
+ <path fill="none" stroke="black" d="M128.88,-72.64C128.88,-64.97 128.88,-55.97 128.88,-47.55"/>
134
+ <polygon fill="black" stroke="black" points="132.38,-47.76 128.88,-37.76 125.38,-47.76 132.38,-47.76"/>
135
+ </g>
136
+ </g>
137
+ </svg>
data/documentation/diagrams/zero-day-research-flow.svg ADDED
@@ -0,0 +1,149 @@
1
+ <?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
+ <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
3
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
4
+ <!-- Generated by graphviz version 14.1.2 (0)
5
+ -->
6
+ <!-- Title: PWN Zero&#45;Day Research Workflow Pages: 1 -->
7
+ <svg width="272pt" height="529pt"
8
+ viewBox="0.00 0.00 272.00 529.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
9
+ <g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 524.69)">
10
+ <title>PWN Zero&#45;Day Research Workflow</title>
11
+ <polygon fill="white" stroke="none" points="-4,4 -4,-524.69 267.62,-524.69 267.62,4 -4,4"/>
12
+ <!-- Target -->
13
+ <g id="node1" class="node">
14
+ <title>Target</title>
15
+ <path fill="none" stroke="black" d="M147.88,-520.69C147.88,-520.69 77.12,-520.69 77.12,-520.69 71.12,-520.69 65.12,-514.69 65.12,-508.69 65.12,-508.69 65.12,-493.19 65.12,-493.19 65.12,-487.19 71.12,-481.19 77.12,-481.19 77.12,-481.19 147.88,-481.19 147.88,-481.19 153.88,-481.19 159.88,-487.19 159.88,-493.19 159.88,-493.19 159.88,-508.69 159.88,-508.69 159.88,-514.69 153.88,-520.69 147.88,-520.69"/>
16
+ <text xml:space="preserve" text-anchor="middle" x="112.5" y="-508.14" font-family="Arial" font-size="9.00">Target Research</text>
17
+ <text xml:space="preserve" text-anchor="middle" x="112.5" y="-497.64" font-family="Arial" font-size="9.00">(Binary, Firmware,</text>
18
+ <text xml:space="preserve" text-anchor="middle" x="112.5" y="-487.14" font-family="Arial" font-size="9.00">Protocol, Web App)</text>
19
+ </g>
20
+ <!-- RE -->
21
+ <g id="node2" class="node">
22
+ <title>RE</title>
23
+ <path fill="none" stroke="black" d="M91,-444.19C91,-444.19 12,-444.19 12,-444.19 6,-444.19 0,-438.19 0,-432.19 0,-432.19 0,-420.19 0,-420.19 0,-414.19 6,-408.19 12,-408.19 12,-408.19 91,-408.19 91,-408.19 97,-408.19 103,-414.19 103,-420.19 103,-420.19 103,-432.19 103,-432.19 103,-438.19 97,-444.19 91,-444.19"/>
24
+ <text xml:space="preserve" text-anchor="middle" x="51.5" y="-428.14" font-family="Arial" font-size="9.00">Reverse Engineering</text>
25
+ <text xml:space="preserve" text-anchor="middle" x="51.5" y="-417.64" font-family="Arial" font-size="9.00">+ Static Analysis</text>
26
+ </g>
27
+ <!-- Target&#45;&gt;RE -->
28
+ <g id="edge1" class="edge">
29
+ <title>Target&#45;&gt;RE</title>
30
+ <path fill="none" stroke="black" d="M96.47,-480.82C89.38,-472.36 80.92,-462.28 73.27,-453.15"/>
31
+ <polygon fill="black" stroke="black" points="76.04,-451.01 66.93,-445.59 70.68,-455.51 76.04,-451.01"/>
32
+ </g>
33
+ <!-- SAST -->
34
+ <g id="node3" class="node">
35
+ <title>SAST</title>
36
+ <path fill="none" stroke="black" d="M215.5,-444.19C215.5,-444.19 133.5,-444.19 133.5,-444.19 127.5,-444.19 121.5,-438.19 121.5,-432.19 121.5,-432.19 121.5,-420.19 121.5,-420.19 121.5,-414.19 127.5,-408.19 133.5,-408.19 133.5,-408.19 215.5,-408.19 215.5,-408.19 221.5,-408.19 227.5,-414.19 227.5,-420.19 227.5,-420.19 227.5,-432.19 227.5,-432.19 227.5,-438.19 221.5,-444.19 215.5,-444.19"/>
37
+ <text xml:space="preserve" text-anchor="middle" x="174.5" y="-422.89" font-family="Arial" font-size="9.00">PWN::SAST + Custom</text>
38
+ </g>
39
+ <!-- Target&#45;&gt;SAST -->
40
+ <g id="edge2" class="edge">
41
+ <title>Target&#45;&gt;SAST</title>
42
+ <path fill="none" stroke="black" d="M128.79,-480.82C136,-472.36 144.6,-462.28 152.38,-453.15"/>
43
+ <polygon fill="black" stroke="black" points="155,-455.47 158.82,-445.59 149.67,-450.93 155,-455.47"/>
44
+ </g>
45
+ <!-- Fuzz -->
46
+ <g id="node4" class="node">
47
+ <title>Fuzz</title>
48
+ <path fill="none" stroke="black" d="M178.38,-371.19C178.38,-371.19 110.62,-371.19 110.62,-371.19 104.62,-371.19 98.62,-365.19 98.62,-359.19 98.62,-359.19 98.62,-347.19 98.62,-347.19 98.62,-341.19 104.62,-335.19 110.62,-335.19 110.62,-335.19 178.38,-335.19 178.38,-335.19 184.38,-335.19 190.38,-341.19 190.38,-347.19 190.38,-347.19 190.38,-359.19 190.38,-359.19 190.38,-365.19 184.38,-371.19 178.38,-371.19"/>
49
+ <text xml:space="preserve" text-anchor="middle" x="144.5" y="-355.14" font-family="Arial" font-size="9.00">Fuzzing + Protocol</text>
50
+ <text xml:space="preserve" text-anchor="middle" x="144.5" y="-344.64" font-family="Arial" font-size="9.00">Analysis</text>
51
+ </g>
52
+ <!-- RE&#45;&gt;Fuzz -->
53
+ <g id="edge3" class="edge">
54
+ <title>RE&#45;&gt;Fuzz</title>
55
+ <path fill="none" stroke="black" d="M74.01,-408C85.69,-399.08 100.15,-388.04 112.93,-378.29"/>
56
+ <polygon fill="black" stroke="black" points="114.84,-381.23 120.67,-372.38 110.6,-375.67 114.84,-381.23"/>
57
+ </g>
58
+ <!-- Dyn -->
59
+ <g id="node5" class="node">
60
+ <title>Dyn</title>
61
+ <path fill="none" stroke="black" d="M142.88,-296.25C142.88,-296.25 78.12,-296.25 78.12,-296.25 72.12,-296.25 66.12,-290.25 66.12,-284.25 66.12,-284.25 66.12,-272.25 66.12,-272.25 66.12,-266.25 72.12,-260.25 78.12,-260.25 78.12,-260.25 142.88,-260.25 142.88,-260.25 148.88,-260.25 154.88,-266.25 154.88,-272.25 154.88,-272.25 154.88,-284.25 154.88,-284.25 154.88,-290.25 148.88,-296.25 142.88,-296.25"/>
62
+ <text xml:space="preserve" text-anchor="middle" x="110.5" y="-280.2" font-family="Arial" font-size="9.00">Dynamic Analysis</text>
63
+ <text xml:space="preserve" text-anchor="middle" x="110.5" y="-269.7" font-family="Arial" font-size="9.00">(REPL + Debug)</text>
64
+ </g>
65
+ <!-- RE&#45;&gt;Dyn -->
66
+ <g id="edge6" class="edge">
67
+ <title>RE&#45;&gt;Dyn</title>
68
+ <path fill="none" stroke="black" d="M58.5,-407.87C68.57,-382.97 87.25,-336.77 99.26,-307.05"/>
69
+ <polygon fill="black" stroke="black" points="102.44,-308.53 102.94,-297.94 95.95,-305.9 102.44,-308.53"/>
70
+ </g>
71
+ <!-- SAST&#45;&gt;Fuzz -->
72
+ <g id="edge4" class="edge">
73
+ <title>SAST&#45;&gt;Fuzz</title>
74
+ <path fill="none" stroke="black" d="M167.24,-408C163.88,-400.06 159.82,-390.45 156.06,-381.55"/>
75
+ <polygon fill="black" stroke="black" points="159.4,-380.46 152.28,-372.61 152.95,-383.18 159.4,-380.46"/>
76
+ </g>
77
+ <!-- Fuzz&#45;&gt;Dyn -->
78
+ <g id="edge5" class="edge">
79
+ <title>Fuzz&#45;&gt;Dyn</title>
80
+ <path fill="none" stroke="black" d="M136.44,-334.9C132.53,-326.52 127.74,-316.24 123.35,-306.81"/>
81
+ <polygon fill="black" stroke="black" points="126.65,-305.62 119.26,-298.04 120.31,-308.58 126.65,-305.62"/>
82
+ </g>
83
+ <!-- Exploit -->
84
+ <g id="node8" class="node">
85
+ <title>Exploit</title>
86
+ <path fill="none" stroke="black" d="M137.88,-212.56C137.88,-212.56 97.12,-212.56 97.12,-212.56 91.12,-212.56 85.12,-206.56 85.12,-200.56 85.12,-200.56 85.12,-188.56 85.12,-188.56 85.12,-182.56 91.12,-176.56 97.12,-176.56 97.12,-176.56 137.88,-176.56 137.88,-176.56 143.88,-176.56 149.88,-182.56 149.88,-188.56 149.88,-188.56 149.88,-200.56 149.88,-200.56 149.88,-206.56 143.88,-212.56 137.88,-212.56"/>
87
+ <text xml:space="preserve" text-anchor="middle" x="117.5" y="-196.51" font-family="Arial" font-size="9.00">Exploit Dev</text>
88
+ <text xml:space="preserve" text-anchor="middle" x="117.5" y="-186.01" font-family="Arial" font-size="9.00">&amp; Validation</text>
89
+ </g>
90
+ <!-- Dyn&#45;&gt;Exploit -->
91
+ <g id="edge9" class="edge">
92
+ <title>Dyn&#45;&gt;Exploit</title>
93
+ <path fill="none" stroke="black" d="M111.98,-259.93C112.88,-249.53 114.03,-236.05 115.05,-224.11"/>
94
+ <polygon fill="black" stroke="black" points="118.52,-224.63 115.89,-214.37 111.55,-224.03 118.52,-224.63"/>
95
+ </g>
96
+ <!-- Memory -->
97
+ <g id="node6" class="node">
98
+ <title>Memory</title>
99
+ <path fill="none" stroke="black" d="M89.5,-49.38C89.5,-52.1 71.12,-54.31 48.5,-54.31 25.88,-54.31 7.5,-52.1 7.5,-49.38 7.5,-49.38 7.5,-4.94 7.5,-4.94 7.5,-2.21 25.88,0 48.5,0 71.12,0 89.5,-2.21 89.5,-4.94 89.5,-4.94 89.5,-49.38 89.5,-49.38"/>
100
+ <path fill="none" stroke="black" d="M89.5,-49.38C89.5,-46.65 71.12,-44.44 48.5,-44.44 25.88,-44.44 7.5,-46.65 7.5,-49.38"/>
101
+ <text xml:space="preserve" text-anchor="middle" x="48.5" y="-34.36" font-family="Arial" font-size="9.00">PWN Memory</text>
102
+ <text xml:space="preserve" text-anchor="middle" x="48.5" y="-23.86" font-family="Arial" font-size="9.00">(historical vulns,</text>
103
+ <text xml:space="preserve" text-anchor="middle" x="48.5" y="-13.36" font-family="Arial" font-size="9.00">references)</text>
104
+ </g>
105
+ <!-- Memory&#45;&gt;RE -->
106
+ <g id="edge7" class="edge">
107
+ <title>Memory&#45;&gt;RE</title>
108
+ <path fill="none" stroke="black" d="M41.34,-54.52C37.08,-72.49 32.5,-96.92 32.5,-118.81 32.5,-354.19 32.5,-354.19 32.5,-354.19 32.5,-368.7 36.25,-384.32 40.41,-397.21"/>
109
+ <polygon fill="black" stroke="black" points="36.99,-398.03 43.6,-406.31 43.6,-395.71 36.99,-398.03"/>
110
+ <text xml:space="preserve" text-anchor="middle" x="63.25" y="-232.71" font-family="Times,serif" font-size="8.00">recall past findings</text>
111
+ </g>
112
+ <!-- Skill -->
113
+ <g id="node7" class="node">
114
+ <title>Skill</title>
115
+ <path fill="none" stroke="black" d="M263.62,-294.56C263.62,-296.56 243.4,-298.19 218.5,-298.19 193.6,-298.19 173.38,-296.56 173.38,-294.56 173.38,-294.56 173.38,-261.94 173.38,-261.94 173.38,-259.94 193.6,-258.31 218.5,-258.31 243.4,-258.31 263.62,-259.94 263.62,-261.94 263.62,-261.94 263.62,-294.56 263.62,-294.56"/>
116
+ <path fill="none" stroke="black" d="M263.62,-294.56C263.62,-292.56 243.4,-290.94 218.5,-290.94 193.6,-290.94 173.38,-292.56 173.38,-294.56"/>
117
+ <text xml:space="preserve" text-anchor="middle" x="218.5" y="-280.2" font-family="Arial" font-size="9.00">Skills (prior</text>
118
+ <text xml:space="preserve" text-anchor="middle" x="218.5" y="-269.7" font-family="Arial" font-size="9.00">zero&#45;day patterns)</text>
119
+ </g>
120
+ <!-- Skill&#45;&gt;Exploit -->
121
+ <g id="edge8" class="edge">
122
+ <title>Skill&#45;&gt;Exploit</title>
123
+ <path fill="none" stroke="black" d="M194.56,-257.89C180.56,-246.56 162.73,-232.15 147.76,-220.03"/>
124
+ <polygon fill="black" stroke="black" points="150.01,-217.36 140.04,-213.79 145.61,-222.8 150.01,-217.36"/>
125
+ <text xml:space="preserve" text-anchor="middle" x="193.53" y="-232.71" font-family="Times,serif" font-size="8.00">apply patterns</text>
126
+ </g>
127
+ <!-- Disclose -->
128
+ <g id="node9" class="node">
129
+ <title>Disclose</title>
130
+ <path fill="none" stroke="black" d="M162.25,-139.56C162.25,-139.56 72.75,-139.56 72.75,-139.56 66.75,-139.56 60.75,-133.56 60.75,-127.56 60.75,-127.56 60.75,-112.06 60.75,-112.06 60.75,-106.06 66.75,-100.06 72.75,-100.06 72.75,-100.06 162.25,-100.06 162.25,-100.06 168.25,-100.06 174.25,-106.06 174.25,-112.06 174.25,-112.06 174.25,-127.56 174.25,-127.56 174.25,-133.56 168.25,-139.56 162.25,-139.56"/>
131
+ <text xml:space="preserve" text-anchor="middle" x="117.5" y="-127.01" font-family="Arial" font-size="9.00">Responsible Disclosure</text>
132
+ <text xml:space="preserve" text-anchor="middle" x="117.5" y="-116.51" font-family="Arial" font-size="9.00">&amp; Fix (Reports,</text>
133
+ <text xml:space="preserve" text-anchor="middle" x="117.5" y="-106.01" font-family="Arial" font-size="9.00">HackerOne, etc.)</text>
134
+ </g>
135
+ <!-- Exploit&#45;&gt;Disclose -->
136
+ <g id="edge10" class="edge">
137
+ <title>Exploit&#45;&gt;Disclose</title>
138
+ <path fill="none" stroke="black" d="M117.5,-176.32C117.5,-168.81 117.5,-159.78 117.5,-151.2"/>
139
+ <polygon fill="black" stroke="black" points="121,-151.49 117.5,-141.49 114,-151.49 121,-151.49"/>
140
+ </g>
141
+ <!-- Disclose&#45;&gt;Memory -->
142
+ <g id="edge11" class="edge">
143
+ <title>Disclose&#45;&gt;Memory</title>
144
+ <path fill="none" stroke="black" d="M102.87,-99.59C94.92,-89.15 84.85,-75.91 75.53,-63.67"/>
145
+ <polygon fill="black" stroke="black" points="78.37,-61.62 69.53,-55.78 72.8,-65.86 78.37,-61.62"/>
146
+ <text xml:space="preserve" text-anchor="middle" x="122.93" y="-74.46" font-family="Times,serif" font-size="8.00">remember disclosure</text>
147
+ </g>
148
+ </g>
149
+ </svg>