pwn 0.5.613 → 0.5.617

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.613
+  version: 0.5.617
 platform: ruby
 authors:
 - 0day Inc.
@@ -141,14 +141,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.14
+        version: 4.0.15
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 4.0.14
+        version: 4.0.15
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -351,14 +351,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
 - !ruby/object:Gem::Dependency
   name: gruff
   requirement: !ruby/object:Gem::Requirement
@@ -519,42 +519,42 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.9.0
+        version: 2.9.1
 - !ruby/object:Gem::Dependency
   name: mcp
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.23.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.23.0
 - !ruby/object:Gem::Dependency
   name: meshtastic
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.165
+        version: 0.0.167
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.0.165
+        version: 0.0.167
 - !ruby/object:Gem::Dependency
   name: metasm
   requirement: !ruby/object:Gem::Requirement
@@ -673,14 +673,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.19.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.19.3
+        version: 1.19.4
 - !ruby/object:Gem::Dependency
   name: nokogiri-diff
   requirement: !ruby/object:Gem::Requirement
@@ -925,14 +925,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4
+        version: 7.0.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.0.4
+        version: 7.0.5
 - !ruby/object:Gem::Dependency
   name: rqrcode
   requirement: !ruby/object:Gem::Requirement
@@ -981,14 +981,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.88.0
+        version: 1.88.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.88.0
+        version: 1.88.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -1079,14 +1079,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.2
+        version: 2.17.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.17.2
+        version: 2.17.4
 - !ruby/object:Gem::Dependency
   name: selenium-devtools
   requirement: !ruby/object:Gem::Requirement
@@ -1121,14 +1121,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: 3.2.0
 - !ruby/object:Gem::Dependency
   name: socksify
   requirement: !ruby/object:Gem::Requirement
@@ -1453,18 +1453,70 @@ files:
 - bin/pwn_zaproxy_active_rest_api_scan
 - bin/pwn_zaproxy_active_scan
 - build_gem.sh
-- documentation/PWN.png
-- documentation/PWN_Contributors_and_Users.png
-- documentation/fax-spectrogram.png
-- documentation/fax-waveform.png
-- documentation/frozen_string_literal_files_changed_from_false_to_true.txt
-- documentation/lifecycle_authz_replay.example.yaml
-- documentation/pwn_android_war_dialer_session.png
-- documentation/pwn_install.png
-- documentation/pwn_wallpaper.jpg
-- documentation/ringing-spectrogram.png
-- documentation/ringing-waveform.png
-- documentation/vulnerability_report_template.md
+- documentation/AI-Integration.md
+- documentation/BurpSuite.md
+- documentation/Contributing.md
+- documentation/Diagrams.md
+- documentation/Drivers.md
+- documentation/General-PWN-Usage.md
+- documentation/Home.md
+- documentation/How-PWN-Works.md
+- documentation/Installation.md
+- documentation/NmapIt.md
+- documentation/Plugins.md
+- documentation/Reporting.md
+- documentation/SAST.md
+- documentation/Skills-Memory-Learning.md
+- documentation/Transparent-Browser.md
+- documentation/Troubleshooting.md
+- documentation/What-is-PWN.md
+- documentation/Why-PWN.md
+- documentation/diagrams/ai-integration-tool-calling.svg
+- documentation/diagrams/build.sh
+- documentation/diagrams/burp-vs-zap-preference.svg
+- documentation/diagrams/code-scanning-sast.svg
+- documentation/diagrams/dot/_THEME.md
+- documentation/diagrams/dot/agent-tool-registry.dot
+- documentation/diagrams/dot/ai-integration-tool-calling.dot
+- documentation/diagrams/dot/aws-cloud-security.dot
+- documentation/diagrams/dot/burp-vs-zap-preference.dot
+- documentation/diagrams/dot/code-scanning-sast.dot
+- documentation/diagrams/dot/cron-scheduling.dot
+- documentation/diagrams/dot/driver-framework.dot
+- documentation/diagrams/dot/extrospection-world-awareness.dot
+- documentation/diagrams/dot/fuzzing-workflow.dot
+- documentation/diagrams/dot/history-to-drivers.dot
+- documentation/diagrams/dot/memory-skills-detailed.dot
+- documentation/diagrams/dot/network-infra-testing.dot
+- documentation/diagrams/dot/overall-pwn-architecture.dot
+- documentation/diagrams/dot/penetration-testing-workflow.dot
+- documentation/diagrams/dot/plugin-ecosystem.dot
+- documentation/diagrams/dot/pwn-ai-feedback-learning-loop.dot
+- documentation/diagrams/dot/pwn-repl-prototyping.dot
+- documentation/diagrams/dot/reporting-pipeline.dot
+- documentation/diagrams/dot/reverse-engineering-flow.dot
+- documentation/diagrams/dot/sdr-radio-flow.dot
+- documentation/diagrams/dot/sessions-cron-automation.dot
+- documentation/diagrams/dot/swarm-multi-agent.dot
+- documentation/diagrams/dot/web-application-testing.dot
+- documentation/diagrams/dot/zero-day-research-flow.dot
+- documentation/diagrams/driver-framework.svg
+- documentation/diagrams/fuzzing-workflow.svg
+- documentation/diagrams/history-to-drivers.svg
+- documentation/diagrams/memory-skills-detailed.svg
+- documentation/diagrams/network-infra-testing.svg
+- documentation/diagrams/overall-pwn-architecture.svg
+- documentation/diagrams/penetration-testing-workflow.svg
+- documentation/diagrams/plugin-ecosystem.svg
+- documentation/diagrams/pwn-ai-feedback-learning-loop.svg
+- documentation/diagrams/pwn-repl-prototyping.svg
+- documentation/diagrams/reporting-pipeline.svg
+- documentation/diagrams/reverse-engineering-flow.svg
+- documentation/diagrams/sessions-cron-automation.svg
+- documentation/diagrams/web-application-testing.svg
+- documentation/diagrams/zero-day-research-flow.svg
+- documentation/pwn-REPL.md
+- documentation/pwn-ai-Agent.md
 - etc/systemd/msfrpcd.service
 - etc/systemd/openvas.service
 - etc/userland/aws/apache2/jenkins_443.conf
@@ -1779,23 +1831,33 @@ files:
 - lib/pwn/ai/agent/btc.rb
 - lib/pwn/ai/agent/burp_suite.rb
 - lib/pwn/ai/agent/dispatch.rb
+- lib/pwn/ai/agent/extrospection.rb
 - lib/pwn/ai/agent/gqrx.rb
 - lib/pwn/ai/agent/hacker_one.rb
+- lib/pwn/ai/agent/introspection.rb
+- lib/pwn/ai/agent/learning.rb
 - lib/pwn/ai/agent/loop.rb
+- lib/pwn/ai/agent/metrics.rb
 - lib/pwn/ai/agent/prompt_builder.rb
 - lib/pwn/ai/agent/registry.rb
 - lib/pwn/ai/agent/result.rb
 - lib/pwn/ai/agent/sast.rb
+- lib/pwn/ai/agent/swarm.rb
+- lib/pwn/ai/agent/tools/cron.rb
+- lib/pwn/ai/agent/tools/extrospection.rb
+- lib/pwn/ai/agent/tools/learning.rb
 - lib/pwn/ai/agent/tools/memory.rb
+- lib/pwn/ai/agent/tools/metrics.rb
 - lib/pwn/ai/agent/tools/ruby_eval.rb
+- lib/pwn/ai/agent/tools/sessions.rb
 - lib/pwn/ai/agent/tools/shell.rb
 - lib/pwn/ai/agent/tools/skills.rb
+- lib/pwn/ai/agent/tools/swarm.rb
 - lib/pwn/ai/agent/transparent_browser.rb
 - lib/pwn/ai/agent/vuln_gen.rb
 - lib/pwn/ai/anthropic.rb
 - lib/pwn/ai/gemini.rb
 - lib/pwn/ai/grok.rb
-- lib/pwn/ai/introspection.rb
 - lib/pwn/ai/ollama.rb
 - lib/pwn/ai/open_ai.rb
 - lib/pwn/aws.rb
@@ -2041,6 +2103,7 @@ files:
 - lib/pwn/sast/window_location_hash.rb
 - lib/pwn/sdr.rb
 - lib/pwn/sdr/decoder.rb
+- lib/pwn/sdr/decoder/base.rb
 - lib/pwn/sdr/decoder/flex.rb
 - lib/pwn/sdr/decoder/gsm.rb
 - lib/pwn/sdr/decoder/pocsag.rb
@@ -2164,24 +2227,34 @@ files:
 - spec/lib/pwn/ai/agent/btc_spec.rb
 - spec/lib/pwn/ai/agent/burp_suite_spec.rb
 - spec/lib/pwn/ai/agent/dispatch_spec.rb
+- spec/lib/pwn/ai/agent/extrospection_spec.rb
 - spec/lib/pwn/ai/agent/gqrx_spec.rb
 - spec/lib/pwn/ai/agent/hacker_one_spec.rb
+- spec/lib/pwn/ai/agent/introspection_spec.rb
+- spec/lib/pwn/ai/agent/learning_spec.rb
 - spec/lib/pwn/ai/agent/loop_spec.rb
+- spec/lib/pwn/ai/agent/metrics_spec.rb
 - spec/lib/pwn/ai/agent/prompt_builder_spec.rb
 - spec/lib/pwn/ai/agent/registry_spec.rb
 - spec/lib/pwn/ai/agent/result_spec.rb
 - spec/lib/pwn/ai/agent/sast_spec.rb
+- spec/lib/pwn/ai/agent/swarm_spec.rb
+- spec/lib/pwn/ai/agent/tools/cron_spec.rb
+- spec/lib/pwn/ai/agent/tools/extrospection_spec.rb
+- spec/lib/pwn/ai/agent/tools/learning_spec.rb
 - spec/lib/pwn/ai/agent/tools/memory_spec.rb
+- spec/lib/pwn/ai/agent/tools/metrics_spec.rb
 - spec/lib/pwn/ai/agent/tools/ruby_eval_spec.rb
+- spec/lib/pwn/ai/agent/tools/sessions_spec.rb
 - spec/lib/pwn/ai/agent/tools/shell_spec.rb
 - spec/lib/pwn/ai/agent/tools/skills_spec.rb
+- spec/lib/pwn/ai/agent/tools/swarm_spec.rb
 - spec/lib/pwn/ai/agent/transparent_browser_spec.rb
 - spec/lib/pwn/ai/agent/vuln_gen_spec.rb
 - spec/lib/pwn/ai/agent_spec.rb
 - spec/lib/pwn/ai/anthropic_spec.rb
 - spec/lib/pwn/ai/gemini_spec.rb
 - spec/lib/pwn/ai/grok_spec.rb
-- spec/lib/pwn/ai/introspection_spec.rb
 - spec/lib/pwn/ai/ollama_spec.rb
 - spec/lib/pwn/ai/open_ai_spec.rb
 - spec/lib/pwn/ai_spec.rb
@@ -2426,6 +2499,7 @@ files:
 - spec/lib/pwn/sast/version_spec.rb
 - spec/lib/pwn/sast/window_location_hash_spec.rb
 - spec/lib/pwn/sast_spec.rb
+- spec/lib/pwn/sdr/decoder/base_spec.rb
 - spec/lib/pwn/sdr/decoder/flex_spec.rb
 - spec/lib/pwn/sdr/decoder/gsm_spec.rb
 - spec/lib/pwn/sdr/decoder/pocsag_spec.rb
@@ -2519,7 +2593,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.14
+rubygems_version: 4.0.15
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond
 test_files: []

data/documentation/frozen_string_literal_files_changed_from_false_to_true.txt

@@ -1,54 +0,0 @@
-bin/pwn_shodan_search:# frozen_string_literal: false
-bin/pwn_sast:# frozen_string_literal: false
-bin/pwn_www_uri_buster:# frozen_string_literal: false
-bin/pwn_bdba_scan:# frozen_string_literal: false
-bin/pwn_serial_msr206:# frozen_string_literal: false
-bin/pwn_bdba_groups:# frozen_string_literal: false
-bin/pwn_serial_son_micro_sm132_rfid:# frozen_string_literal: false
-bin/pwn_gqrx_scanner:# frozen_string_literal: false
-bin/pwn_nmap_discover_tcp_udp:# frozen_string_literal: false
-lib/pwn/sast/beef_hook.rb:# frozen_string_literal: false
-lib/pwn/sast/local_storage.rb:# frozen_string_literal: false
-lib/pwn/sast/post_message.rb:# frozen_string_literal: false
-lib/pwn/sast/factory.rb:# frozen_string_literal: false
-lib/pwn/sast/base64.rb:# frozen_string_literal: false
-lib/pwn/sast/shell.rb:# frozen_string_literal: false
-lib/pwn/sast/aws.rb:# frozen_string_literal: false
-lib/pwn/sast/token.rb:# frozen_string_literal: false
-lib/pwn/sast/port.rb:# frozen_string_literal: false
-lib/pwn/sast/throw_errors.rb:# frozen_string_literal: false
-lib/pwn/sast/pom_version.rb:# frozen_string_literal: false
-lib/pwn/sast/outer_html.rb:# frozen_string_literal: false
-lib/pwn/sast/window_location_hash.rb:# frozen_string_literal: false
-lib/pwn/sast/deserial_java.rb:# frozen_string_literal: false
-lib/pwn/sast/php_input_mechanisms.rb:# frozen_string_literal: false
-lib/pwn/sast/redos.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_python.rb:# frozen_string_literal: false
-lib/pwn/sast/type_script_type_juggling.rb:# frozen_string_literal: false
-lib/pwn/sast/version.rb:# frozen_string_literal: false
-lib/pwn/sast/sql.rb:# frozen_string_literal: false
-lib/pwn/sast/emoticon.rb:# frozen_string_literal: false
-lib/pwn/sast/redirect.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_ruby.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_java.rb:# frozen_string_literal: false
-lib/pwn/sast/private_key.rb:# frozen_string_literal: false
-lib/pwn/sast/location_hash.rb:# frozen_string_literal: false
-lib/pwn/sast/password.rb:# frozen_string_literal: false
-lib/pwn/sast/php_type_juggling.rb:# frozen_string_literal: false
-lib/pwn/sast/padding_oracle.rb:# frozen_string_literal: false
-lib/pwn/sast/md5.rb:# frozen_string_literal: false
-lib/pwn/sast/http_authorization_header.rb:# frozen_string_literal: false
-lib/pwn/sast/amqp_connect_as_guest.rb:# frozen_string_literal: false
-lib/pwn/sast/signature.rb:# frozen_string_literal: false
-lib/pwn/sast/apache_file_system_util_api.rb:# frozen_string_literal: false
-lib/pwn/sast/keystore.rb:# frozen_string_literal: false
-lib/pwn/sast/log4j.rb:# frozen_string_literal: false
-lib/pwn/sast/inner_html.rb:# frozen_string_literal: false
-lib/pwn/sast/task_tag.rb:# frozen_string_literal: false
-lib/pwn/sast/csrf.rb:# frozen_string_literal: false
-lib/pwn/sast/eval.rb:# frozen_string_literal: false
-lib/pwn/sast/logger.rb:# frozen_string_literal: false
-lib/pwn/sast/sudo.rb:# frozen_string_literal: false
-lib/pwn/sast/ssl.rb:# frozen_string_literal: false
-lib/pwn/sast/cmd_execution_scala.rb:# frozen_string_literal: false
-lib/pwn/sast/banned_function_calls_c.rb:# frozen_string_literal: false

data/documentation/lifecycle_authz_replay.example.yaml

@@ -1,27 +0,0 @@
-campaign:
-  id: github-collaborator-revoke
-  label: GitHub collaborator removal replay
-  target: https://github.com/acme/private-repo
-  change_event: remove_collaborator
-  notes: Capture access before and after collaborator removal.
-
-actors:
-  - id: owner
-    label: Repository owner account
-  - id: revoked_user
-    label: User removed from repository
-
-surfaces:
-  - id: repo_settings_page
-    label: Repository settings HTML page
-  - id: repo_metadata_api
-    label: Repository metadata API endpoint
-
-checkpoints:
-  - pre_change
-  - post_change_t0
-  - post_change_tn
-
-expected_denied_after:
-  - post_change_t0
-  - post_change_tn

data/documentation/vulnerability_report_template.md

@@ -1,37 +0,0 @@
-# Vulnerability Report Template
-
-**Program:** [HackerOne Program Name]
-**Report Date:** [YYYY-MM-DD]
-**Severity:** [Critical/High/Medium/Low]
-
-## 1. Detailed finding description with technical depth and PoC when possible
-
-[Insert deep technical analysis, affected endpoints, steps to reproduce, PoC code/requests here.]
-
-## 2. Business impact
-
-[Business/reputational/financial consequences.]
-
-## 3. Remediation recommendations, including compensating controls / stop gaps
-
-[Fix recommendations, WAF rules, logging, etc.]
-
-## 4. CVSS score, vector string, and first.org calculator URI
-
-**CVSS v3.1 Score:** X.X (High)
-**Vector:** AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
-**Calculator:** https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
-
-## 5. CWE category, brief description, and CWE URI
-
-**CWE-XXX:** [Name] - [Brief desc]
-https://cwe.mitre.org/data/definitions/XXX.html
-
-## 6. Relevant NIST 800-53 control
-
-**Control:** [e.g. SI-10, AC-6]
-[Description and how it maps.]
-
----
-
-*Generated with PWN::AI::Agent::VulnGen*

data/lib/pwn/ai/introspection.rb

@@ -1,76 +0,0 @@
-# frozen_string_literal: true
-
-require 'json'
-require 'rest-client'
-
-module PWN
-  module AI
-    # This plugin interacts with PWN::Env's `ai` data structure
-    # when `PWN::Env[:ai][:introspection]` is set to `true`.
-    module Introspection
-      # Supported Method Parameters::
-      # response = PWN::AI::Introspection.reflect_on(
-      #   request: 'required - String - What you want the AI to reflect on',
-      #   system_role_content: 'optional - context to set up the model behavior for reflection',
-      #   spinner: 'optional - Boolean - Display spinner during operation (default: false)',
-      #   suppress_pii_warning: 'optional - Boolean - Suppress PII Warnings (default: false)'
-      # )
-
-      public_class_method def self.reflect_on(opts = {})
-        request = opts[:request]
-        raise 'ERROR: request must be provided' if request.nil?
-
-        system_role_content = opts[:system_role_content]
-
-        spinner = opts[:spinner] || false
-
-        suppress_pii_warning = opts[:suppress_pii_warning] || false
-
-        response = nil
-
-        ai_introspection = PWN::Env[:ai][:introspection]
-
-        if ai_introspection && request.length.positive?
-          engine = PWN::Env[:ai][:active].to_s.downcase.to_sym
-          valid_ai_engines = PWN::AI.help.reject { |e| e.downcase == :introspection }.map(&:downcase)
-          raise "ERROR: Unsupported AI engine. Supported engines are: #{valid_ai_engines}" unless valid_ai_engines.include?(engine)
-
-          warn "AI Introspection is enabled.  Ensure #{engine} has been authorized for use and/or requests are sanitized properly." unless suppress_pii_warning
-          response = PWN::AI::Agent::Loop.run(
-            request: request.chomp,
-            system_role_content: system_role_content,
-            enabled_toolsets: [],
-            spinner: spinner
-          )
-        end
-
-        response
-      rescue StandardError => e
-        raise e
-      end
-
-      # Author(s):: 0day Inc. <support@0dayinc.com>
-
-      public_class_method def self.authors
-        "AUTHOR(S):
-          0day Inc. <support@0dayinc.com>
-        "
-      end
-
-      # Display Usage for this Module
-
-      public_class_method def self.help
-        puts "USAGE:
-          #{self}.reflect_on(
-            request: 'required - String - What you want the AI to reflect on',
-            system_role_content: 'optional - context to set up the model behavior for reflection',
-            spinner: 'optional - Boolean - Display spinner during operation (default: false)',
-            suppress_pii_warning: 'optional - Boolean - Suppress PII Warnings (default: false)'
-          )
-
-          #{self}.authors
-        "
-      end
-    end
-  end
-end