pwn 0.5.63 → 0.5.64

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0fc6d58c74aac204b6229e60d2f99f7921ed433e3555153f8847567d73f3c01
-  data.tar.gz: 02d72e88c53863d7dc49b50d4c29814aaca74a132ed3e5c7252c7684694214a3
+  metadata.gz: c42962690f6fcba146756b708712680aa0f82bdcc83085bdb28f004206e069c0
+  data.tar.gz: 524d051208dde3344f8878474b36b5418ccbe300547f846398cab16236344c35
 SHA512:
-  metadata.gz: ed13a5207890b9b882480ce2c59f37ae5ca2d13d4f0fd7ebfc2e0bed826b2038cd8779f6995df9900c8730448fc8541b5ae979432a74d568bfcf663a99ef39a8
-  data.tar.gz: 324e69a0d7bad8d43656dc6f593917af2322b9cd863be08ad861a65b22e27757a19f259399579d9e3c3645516f47e73bec959fd6886893bb7f65c67044d95820
+  metadata.gz: ead15133e412b3bad3871b31fb7fe6db531f9cdb729f83ea46b51d8f5f4311a6394097e6b27352abc1d8755338cb8f78e0abf84aa94ef258973dbc89db355421
+  data.tar.gz: 903fbff707e0166a55169ab78d955e42ae0582b48a507893b91ba0ad530bf840e180fc2ac9d06de9cc8f7c2de7f9fdd5d9638735caf3041107875c9602be32b2

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.63]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.63]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.63]:001 >>> PWN.help
+pwn[v0.5.64]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn

@@ -1,6 +1,7 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
+require 'base64'
 require 'optparse'
 require 'pwn'
 require 'pry'
@@ -13,12 +14,31 @@ OptionParser.new do |options|
     #{$PROGRAM_NAME} [opts]
   "
 
-  options.on('-cPATH', '--yaml-config=PATH', '<Optional - OpenAI YAML File>') do |p|
+  options.on('-cPATH', '--yaml-config=PATH', '<Optional - PWN YAML File>') do |p|
     opts[:yaml_config_path] = p
   end
+
+  options.on('-dPATH', '--decryptor=PATH', '<Optional - File Containing Decryption Key && IV>') do |d|
+    opts[:decryption_file] = d
+  end
+
+  options.on('-kKEY', '--decryption-key=KEY', '<Optional - Decryption Key>') do |k|
+    opts[:key] = k
+  end
+
+  options.on('-iIV', '--decryption-iv=PATH', '<Optional - Decryption IV>') do |i|
+    opts[:iv] = i
+  end
 end.parse!
 
 begin
+  def yaml_config_encrypted?(opts = {})
+    config = opts[:config]
+
+    config_contents = File.read(config)
+    config_contents.is_a?(String) && Base64.strict_encode64(Base64.decode64(config_contents)) == config_contents
+  end
+
   def cleanup_pids(opts = {})
     pids_arr = opts[:pids_arr]
 
@@ -288,7 +308,27 @@ begin
   Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
     if opts[:yaml_config_path] && File.exist?(opts[:yaml_config_path])
       yaml_config_path = opts[:yaml_config_path]
-      yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
+      is_encrypted = yaml_config_encrypted?(config: yaml_config_path)
+
+      if is_encrypted
+        # TODO: Implement "something you know, something you have, && something you are?"
+        decryption_file = opts[:decryption_file] ||= "#{ENV.fetch('HOME')}/pwn.decryptor.yaml"
+        raise "ERROR: Decryption file not found at #{decryption_file}" unless File.exist?(decryption_file)
+
+        yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true)
+        key = opts[:key] ||= yaml_decryptor[:key]
+        iv = opts[:iv] ||= yaml_decryptor[:iv]
+
+        encrypted_config_dump = PWN::Plugins::Vault.dump(
+          file: yaml_config_path,
+          key: key,
+          iv: iv
+        )
+        yaml_config = YAML.load(encrypted_config_dump, symbolize_names: true)
+      else
+        yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
+      end
+
       pi.config.pwn_ai_key = yaml_config[:ai_key]
       Pry.config.pwn_ai_key = pi.config.pwn_ai_key
     end

data/etc/pwn.decryptor.yaml.EXAMPLE

@@ -0,0 +1,2 @@
+key: 'KEY PROVIDED WHEN USING PWN::Plugins::Vault.create(file: "pwn.yaml") TO ENCRYPT pwn.yaml'
+iv: 'KEY PROVIDED WHEN USING PWN::Plugins::Vault.create(file: "pwn.yaml") TO ENCRYPT pwn.yaml'

data/etc/pwn.yaml.EXAMPLE

@@ -1,3 +1,4 @@
+# Use PWN::Plugins::Vault.create(file: 'pwn.yaml') to encrypt this file
 # ai_engine: 'openai' || 'ollama'
 ai_engine: 'openai'
 ai_key: 'OPEN AI OR OLLAMA API KEY'

data/lib/pwn/plugins/vault.rb

@@ -8,6 +8,31 @@ module PWN
   module Plugins
     # Used to encrypt/decrypt configuration files leveraging AES256
     module Vault
+      # Supported Method Parameters::
+      # PWN::Plugins::Vault.change_encryption_secrets(
+      #   file: 'required - file to encrypt with new key and iv',
+      #   key: 'required - key to decrypt',
+      #   iv: 'required - iv to decrypt'
+      # )
+
+      def self.change_encryption_secrets(opts = {})
+        file = opts[:file].to_s.scrub if File.exist?(opts[:file].to_s.scrub)
+        key = opts[:key]
+        iv = opts[:iv]
+
+        decrypt(
+          file: file,
+          key: key,
+          iv: iv
+        )
+
+        create(
+          file: file
+        )
+      rescue StandardError => e
+        raise e
+      end
+
       # Supported Method Parameters::
       # PWN::Plugins::Vault.create(
       #   file: 'required - encrypted file to create'
@@ -35,7 +60,7 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::Vault.decrypt(
-      #   file: 'required - file to encrypt',
+      #   file: 'required - file to decrypt',
       #   key: 'required - key to decrypt',
       #   iv: 'required - iv to decrypt'
       # )
@@ -62,15 +87,17 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::Vault.dump(
-      #   file: 'required - file to encrypt',
+      #   file: 'required - file to dump',
       #   key: 'required - key to decrypt',
-      #   iv: 'required - iv to decrypt'
+      #   iv: 'required - iv to decrypt',
+      #   search: 'optional - search for a specific string'
       # )
 
       def self.dump(opts = {})
         file = opts[:file].to_s.scrub if File.exist?(opts[:file].to_s.scrub)
         key = opts[:key]
         iv = opts[:iv]
+        search = opts[:search]
 
         decrypt(
           file: file,
@@ -78,20 +105,26 @@ module PWN
           iv: iv
         )
 
-        puts File.read(file)
+        if search
+          file_dump =  File.readlines(file).grep(/#{search}/)
+        else
+          file_dump =  File.read(file)
+        end
 
         encrypt(
           file: file,
           key: key,
           iv: iv
         )
+
+        file_dump
       rescue StandardError => e
         raise e
       end
 
       # Supported Method Parameters::
       # PWN::Plugins::Vault.edit(
-      #   file: 'required - file to encrypt',
+      #   file: 'required - file to edit',
       #   key: 'required - key to decrypt',
       #   iv: 'required - iv to decrypt'
       # )
@@ -163,24 +196,31 @@ module PWN
 
       public_class_method def self.help
         puts "USAGE:
+          #{self}.change_encryption_secrets(
+            file: 'required - file to encrypt with new key and iv',
+            key: 'required - key to decrypt',
+            iv: 'required - iv to decrypt'
+          )
+
           #{self}.create(
             file: 'required - file to encrypt'
           )
 
           #{self}.decrypt(
-            file: 'required - file to encrypt',
+            file: 'required - file to decrypt',
             key: 'required - key to decrypt',
             iv: 'required - iv to decrypt'
           )
 
           #{self}.dump(
-            file: 'required - file to encrypt',
+            file: 'required - file to dump',
             key: 'required - key to decrypt',
-            iv: 'required - iv to decrypt'
+            iv: 'required - iv to decrypt',
+        #   search: 'optional - search for a specific string'
           )
 
           #{self}.edit(
-            file: 'required - file to encrypt',
+            file: 'required - file to edit',
             key: 'required - key to decrypt',
             iv: 'required - iv to decrypt'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.63'
+  VERSION = '0.5.64'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.63
+  version: 0.5.64
 platform: ruby
 authors:
 - 0day Inc.
@@ -1317,6 +1317,7 @@ files:
 - documentation/pwn_wallpaper.jpg
 - documentation/ringing-spectrogram.png
 - documentation/ringing-waveform.png
+- etc/pwn.decryptor.yaml.EXAMPLE
 - etc/pwn.yaml.EXAMPLE
 - etc/systemd/msfrpcd.service
 - etc/systemd/openvas.service