pwn 0.5.62 → 0.5.64

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5b78feca18f7b658c6a1ef4cb65e2f40cab41101e4d31926caac9cdb293b8157
-  data.tar.gz: c3f3333e64e599efccac10eff086b724603afd3a7f966898bb380bbfc6ec4ff0
+  metadata.gz: c42962690f6fcba146756b708712680aa0f82bdcc83085bdb28f004206e069c0
+  data.tar.gz: 524d051208dde3344f8878474b36b5418ccbe300547f846398cab16236344c35
 SHA512:
-  metadata.gz: b24ff13b6f0e0437376208e912fe9fd3e2ef967add67f63d437396cb4c705e90f8620259b49d6bbf4af4b2c4b9c0595ff28faf22fac17bc441548bd26f58f32c
-  data.tar.gz: 71bd7188ce6a6390b64b0238f9723f050500c990690e55d60b1fd8e421a8ab0e43d0ef5787dd42f875476a6836961de9d06c80498ced7ef7842bdcfc955524e5
+  metadata.gz: ead15133e412b3bad3871b31fb7fe6db531f9cdb729f83ea46b51d8f5f4311a6394097e6b27352abc1d8755338cb8f78e0abf84aa94ef258973dbc89db355421
+  data.tar.gz: 903fbff707e0166a55169ab78d955e42ae0582b48a507893b91ba0ad530bf840e180fc2ac9d06de9cc8f7c2de7f9fdd5d9638735caf3041107875c9602be32b2

data/.rubocop_todo.yml

@@ -1,18 +1,11 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2024-03-04 01:40:30 UTC using RuboCop version 1.61.0.
+# on 2024-03-25 22:25:57 UTC using RuboCop version 1.62.1.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
 # versions of RuboCop, may require this file to be generated again.
 
-# Offense count: 1
-# Configuration parameters: Severity, Include.
-# Include: **/*.gemspec
-Gemspec/RequiredRubyVersion:
-  Exclude:
-    - 'pwn.gemspec'
-
 # Offense count: 5
 # This cop supports safe autocorrection (--autocorrect).
 # Configuration parameters: EnforcedStyle.
@@ -24,7 +17,7 @@ Layout/LineContinuationSpacing:
     - 'packer/provisioners/wpscan.rb'
     - 'vagrant/provisioners/beef.rb'
 
-# Offense count: 18
+# Offense count: 24
 # This cop supports safe autocorrection (--autocorrect).
 # Configuration parameters: Max, AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, AllowedPatterns.
 # URISchemes: http, https
@@ -34,6 +27,7 @@ Layout/LineLength:
     - 'bin/pwn_diff_csv_files_w_column_exclude'
     - 'lib/pwn/banner/jmp_esp.rb'
     - 'lib/pwn/plugins/mail_agent.rb'
+    - 'lib/pwn/plugins/ollama.rb'
     - 'lib/pwn/plugins/open_ai.rb'
     - 'lib/pwn/reports/fuzz.rb'
     - 'lib/pwn/reports/phone.rb'
@@ -41,7 +35,7 @@ Layout/LineLength:
     - 'lib/pwn/reports/uri_buster.rb'
     - 'lib/pwn/sast/banned_function_calls_c.rb'
 
-# Offense count: 294
+# Offense count: 311
 # This cop supports unsafe autocorrection (--autocorrect-all).
 # Configuration parameters: AutoCorrect.
 Lint/UselessAssignment:
@@ -80,7 +74,7 @@ Metrics/MethodLength:
   Exclude:
     - 'lib/pwn/banner/code_cave.rb'
 
-# Offense count: 8
+# Offense count: 9
 # Configuration parameters: CountComments, Max, CountAsOne.
 Metrics/ModuleLength:
   Exclude:
@@ -90,6 +84,7 @@ Metrics/ModuleLength:
     - 'lib/pwn/plugins/ibm_appscan.rb'
     - 'lib/pwn/plugins/msr206.rb'
     - 'lib/pwn/plugins/nessus_cloud.rb'
+    - 'lib/pwn/plugins/ollama.rb'
     - 'lib/pwn/plugins/open_ai.rb'
     - 'lib/pwn/plugins/packet.rb'
 
@@ -97,7 +92,7 @@ Metrics/ModuleLength:
 Style/ClassVars:
   Enabled: false
 
-# Offense count: 280
+# Offense count: 278
 # This cop supports safe autocorrection (--autocorrect).
 # Configuration parameters: EnforcedStyle, SingleLineConditionsOnly, IncludeTernaryExpressions.
 # SupportedStyles: assign_to_condition, assign_inside_condition
@@ -134,7 +129,7 @@ Style/RedundantStringEscape:
     - 'lib/pwn/sast/redos.rb'
     - 'vagrant/provisioners/kali_customize.rb'
 
-# Offense count: 48
+# Offense count: 51
 # This cop supports unsafe autocorrection (--autocorrect-all).
 Style/SlicingWithRange:
   Enabled: false

data/Gemfile

@@ -26,7 +26,7 @@ gem 'colorize', '1.1.0'
 gem 'credit_card_validations', '6.1.0'
 gem 'eventmachine', '1.2.7'
 gem 'executable-hooks', '1.7.1'
-gem 'faker', '3.2.3'
+gem 'faker', '3.3.0'
 gem 'faye-websocket', '0.11.3'
 gem 'ffi', '1.16.3'
 gem 'fftw3', '0.3'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.62]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.62]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.62]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn

@@ -1,6 +1,7 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
+require 'base64'
 require 'optparse'
 require 'pwn'
 require 'pry'
@@ -13,12 +14,31 @@ OptionParser.new do |options|
     #{$PROGRAM_NAME} [opts]
   "
 
-  options.on('-cPATH', '--yaml-config=PATH', '<Optional - OpenAI YAML File>') do |p|
+  options.on('-cPATH', '--yaml-config=PATH', '<Optional - PWN YAML File>') do |p|
     opts[:yaml_config_path] = p
   end
+
+  options.on('-dPATH', '--decryptor=PATH', '<Optional - File Containing Decryption Key && IV>') do |d|
+    opts[:decryption_file] = d
+  end
+
+  options.on('-kKEY', '--decryption-key=KEY', '<Optional - Decryption Key>') do |k|
+    opts[:key] = k
+  end
+
+  options.on('-iIV', '--decryption-iv=PATH', '<Optional - Decryption IV>') do |i|
+    opts[:iv] = i
+  end
 end.parse!
 
 begin
+  def yaml_config_encrypted?(opts = {})
+    config = opts[:config]
+
+    config_contents = File.read(config)
+    config_contents.is_a?(String) && Base64.strict_encode64(Base64.decode64(config_contents)) == config_contents
+  end
+
   def cleanup_pids(opts = {})
     pids_arr = opts[:pids_arr]
 
@@ -288,8 +308,28 @@ begin
   Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
     if opts[:yaml_config_path] && File.exist?(opts[:yaml_config_path])
       yaml_config_path = opts[:yaml_config_path]
-      yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
-      pi.config.pwn_ai_key = yaml_config[:open_ai_key]
+      is_encrypted = yaml_config_encrypted?(config: yaml_config_path)
+
+      if is_encrypted
+        # TODO: Implement "something you know, something you have, && something you are?"
+        decryption_file = opts[:decryption_file] ||= "#{ENV.fetch('HOME')}/pwn.decryptor.yaml"
+        raise "ERROR: Decryption file not found at #{decryption_file}" unless File.exist?(decryption_file)
+
+        yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+        key = opts[:key] ||= yaml_decryptor[:key]
+        iv = opts[:iv] ||= yaml_decryptor[:iv]
+
+        encrypted_config_dump = PWN::Plugins::Vault.dump(
+          file: yaml_config_path,
+          key: key,
+          iv: iv
+        )
+        yaml_config = YAML.load(encrypted_config_dump, symbolize_names: true)
+      else
+        yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
+      end
+
+      pi.config.pwn_ai_key = yaml_config[:ai_key]
       Pry.config.pwn_ai_key = pi.config.pwn_ai_key
     end
   end
@@ -326,19 +366,19 @@ begin
     if pi.config.pwn_ai && !request.chomp.empty?
       request = pi.input.line_buffer.to_s
       debug = pi.config.pwn_ai_debug
-      open_ai_key = pi.config.pwn_ai_key
-      open_ai_key ||= ''
-      if open_ai_key.empty?
-        open_ai_key = PWN::Plugins::AuthenticationHelper.mask_password(
+      ai_key = pi.config.pwn_ai_key
+      ai_key ||= ''
+      if ai_key.empty?
+        ai_key = PWN::Plugins::AuthenticationHelper.mask_password(
           prompt: 'OpenAI API Key'
         )
-        pi.config.pwn_ai_key = open_ai_key
+        pi.config.pwn_ai_key = ai_key
       end
 
       response_history = pi.config.pwn_ai_response_history
       speak_answer = pi.config.pwn_ai_speak
       response = PWN::Plugins::OpenAI.chat(
-        token: open_ai_key,
+        token: ai_key,
         request: request.chomp,
         temp: 1,
         response_history: response_history,

data/etc/pwn.decryptor.yaml.EXAMPLE

@@ -0,0 +1,2 @@
+key: 'KEY PROVIDED WHEN USING PWN::Plugins::Vault.create(file: "pwn.yaml") TO ENCRYPT pwn.yaml'
+iv: 'KEY PROVIDED WHEN USING PWN::Plugins::Vault.create(file: "pwn.yaml") TO ENCRYPT pwn.yaml'

data/etc/pwn.yaml.EXAMPLE

@@ -1,3 +1,4 @@
+# Use PWN::Plugins::Vault.create(file: 'pwn.yaml') to encrypt this file
 # ai_engine: 'openai' || 'ollama'
 ai_engine: 'openai'
-open_ai_key: 'OPEN_AI_API_KEY'
+ai_key: 'OPEN AI OR OLLAMA API KEY'