pwn 0.5.65 → 0.5.67

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 19fba8018db8e90a1c82fda10a5c0af6c560e367ae45a105c0daa495df25647b
-  data.tar.gz: 6c6fb1cc72ccb0438a655151925fb45ad5c9978fbe21607b26bc0c21cddf5575
+  metadata.gz: 8fd794ce6149bca1bcacf6eb83e4116d26dddad3f7007829cec0ff4520eb9f59
+  data.tar.gz: 056c7e6727ec6afb5ec98563b912ab65fdca366067296f0aa12501d5d7ae63d1
 SHA512:
-  metadata.gz: 765212cd579f768bea360c0d0e39ba71b16997e19124915ed1941915c26bec2e10253141d4e70f2cd5741aa7599f3169a5343f6351a50194dc7dd03cdd70065f
-  data.tar.gz: 5d76ffbbebd93ec75e2d16bf798c809b2f2be1a039fb459f917683ba2b960cb487da9ea8c750720fa8ca8a885e586b326f07e7f85fb340762919ad3ab4730e2f
+  metadata.gz: 0764f4c9956e10475675ed33769d07b94ba19090c2db59937ff45ed1f110dad1860a6c02b8eaca71d7e5269dacb4c460472777dfb3285d2ec963c4a0c59975e2
+  data.tar.gz: 651a021f5476d9e6735c08f126411c23c6cfba3b0d9455ad1561b0fa9a46793f1c1b4bf6025a49f1d0c50f557ed9e150cd339aefed44003298a5f3100fa85e94

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.65]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.65]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.65]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn

@@ -1,7 +1,6 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
-require 'base64'
 require 'optparse'
 require 'pwn'
 require 'pry'
@@ -32,24 +31,6 @@ OptionParser.new do |options|
 end.parse!
 
 begin
-  def yaml_config_encrypted?(opts = {})
-    config = opts[:config]
-
-    config_contents = File.read(config)
-    config_contents.is_a?(String) && Base64.strict_encode64(Base64.decode64(config_contents)) == config_contents
-  end
-
-  def cleanup_pids(opts = {})
-    pids_arr = opts[:pids_arr]
-
-    pids_arr.each do |pid_line|
-      pid = pid_line[2].to_i
-      Process.kill('TERM', pid)
-    rescue Errno::ESRCH
-      next
-    end
-  end
-
   def refresh_ps1_proc(opts = {})
     mode = opts[:mode]
 
@@ -90,7 +71,7 @@ begin
     end
   end
 
-  # Pry Monkey Patches \_(oo)_/
+  # Pry Monkey Patches \_(--)_/
   class Pry
     # Overwrite Pry::History.push method in History class to get duplicate history entries
     # in order to properly replay automation in this prototyping driver
@@ -308,21 +289,25 @@ begin
   Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
     if opts[:yaml_config_path] && File.exist?(opts[:yaml_config_path])
       yaml_config_path = opts[:yaml_config_path]
-      is_encrypted = yaml_config_encrypted?(config: yaml_config_path)
+      is_encrypted = PWN::Plugins::Vault.file_encrypted?(file: yaml_config_path)
 
       if is_encrypted
         # TODO: Implement "something you know, something you have, && something you are?"
         decryption_file = opts[:decryption_file] ||= "#{Dir.home}/pwn.decryptor.yaml"
         yaml_decryptor = YAML.load_file(decryption_file, symbolize_names: true) if File.exist?(decryption_file)
+
         key = opts[:key] ||= yaml_decryptor[:key] ||= ENV.fetch('PWN_DECRYPTOR_KEY')
+        key = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption Key') if key.nil?
+
         iv = opts[:iv] ||= yaml_decryptor[:iv] ||= ENV.fetch('PWN_DECRYPTOR_IV')
+        iv = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption IV') if iv.nil?
 
-        encrypted_config_dump = PWN::Plugins::Vault.dump(
+        decrypted_yaml_config = PWN::Plugins::Vault.dump(
           file: yaml_config_path,
           key: key,
           iv: iv
         )
-        yaml_config = YAML.load(encrypted_config_dump, symbolize_names: true)
+        yaml_config = YAML.load(decrypted_yaml_config, symbolize_names: true)
       else
         yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
       end
@@ -435,6 +420,6 @@ ensure
   end
   # pp grandkid_pids_arr
 
-  cleanup_pids(pids_arr: grandkid_pids_arr)
-  cleanup_pids(pids_arr: kid_pids_arr)
+  PWN::Plugins::PS.cleanup_pids(pids_arr: grandkid_pids_arr)
+  PWN::Plugins::PS.cleanup_pids(pids_arr: kid_pids_arr)
 end

data/lib/pwn/plugins/ps.rb

@@ -47,6 +47,23 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::PS.cleanup_pids(
+      #   pids_arr: 'required - array of pids to kill'
+      # )
+      public_class_method def self.cleanup_pids(opts = {})
+        pids_arr = opts[:pids_arr]
+
+        pids_arr.each do |pid_line|
+          pid = pid_line[2].to_i
+          Process.kill('TERM', pid)
+        rescue Errno::ESRCH
+          next
+        end
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
 
       public_class_method def self.authors
@@ -61,6 +78,10 @@ module PWN
         puts "USAGE:
           proc_list_arr = #{self}.list
 
+          #{self}.cleanup_pids(
+            pids_arr: 'required - array of pids to kill'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/plugins/vault.rb

@@ -184,6 +184,21 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::Vault.file_encrypted?(
+      #   file: 'required - file to check if encrypted'
+      # )
+      public_class_method def self.file_encrypted?(opts = {})
+        file = opts[:file].to_s.scrub if File.exist?(opts[:file].to_s.scrub)
+
+        raise 'ERROR: File does not exist.' unless File.exist?(file)
+
+        file_contents = File.read(file)
+        file_contents.is_a?(String) && Base64.strict_encode64(Base64.strict_decode64(file_contents)) == file_contents
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
 
       public_class_method def self.authors
@@ -231,6 +246,10 @@ module PWN
             iv: 'required - iv to decrypt'
           )
 
+          #{self}.file_encrypted?(
+            file: 'required - file to check if encrypted'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.65'
+  VERSION = '0.5.67'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.65
+  version: 0.5.67
 platform: ruby
 authors:
 - 0day Inc.