pwn 0.5.695 → 0.5.697

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (69) hide show
  1. checksums.yaml +4 -4
  2. data/documentation/Session-Workflow.md +2 -1
  3. data/etc/default_skills/pwn/ai/agent/loop/SKILL.md +1 -1
  4. data/etc/default_skills/pwn/ai/agent/tool_guard/SKILL.md +5 -0
  5. data/etc/default_skills/pwn/ai/red_team/SKILL.md +1 -1
  6. data/etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/SKILL.md +53 -0
  7. data/etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/references/security.md +3 -0
  8. data/etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/references/urls.md +6 -0
  9. data/etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/SKILL.md +53 -0
  10. data/etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/references/security.md +3 -0
  11. data/etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/references/urls.md +6 -0
  12. data/etc/default_skills/pwn/ai/red_team/hidden_context_exposure/SKILL.md +53 -0
  13. data/etc/default_skills/pwn/ai/red_team/hidden_context_exposure/references/security.md +3 -0
  14. data/etc/default_skills/pwn/ai/red_team/hidden_context_exposure/references/urls.md +6 -0
  15. data/etc/default_skills/pwn/ai/red_team/memory_poisoning/SKILL.md +53 -0
  16. data/etc/default_skills/pwn/ai/red_team/memory_poisoning/references/security.md +3 -0
  17. data/etc/default_skills/pwn/ai/red_team/memory_poisoning/references/urls.md +6 -0
  18. data/etc/default_skills/pwn/ai/red_team/multimodal_injection/SKILL.md +53 -0
  19. data/etc/default_skills/pwn/ai/red_team/multimodal_injection/references/security.md +3 -0
  20. data/etc/default_skills/pwn/ai/red_team/multimodal_injection/references/urls.md +6 -0
  21. data/etc/default_skills/pwn/ai/red_team/rag_poisoning/SKILL.md +53 -0
  22. data/etc/default_skills/pwn/ai/red_team/rag_poisoning/references/security.md +3 -0
  23. data/etc/default_skills/pwn/ai/red_team/rag_poisoning/references/urls.md +6 -0
  24. data/etc/default_skills/pwn/ai/red_team/supply_chain/SKILL.md +53 -0
  25. data/etc/default_skills/pwn/ai/red_team/supply_chain/references/security.md +3 -0
  26. data/etc/default_skills/pwn/ai/red_team/supply_chain/references/urls.md +6 -0
  27. data/etc/default_skills/pwn/ai/red_team/unbounded_consumption/SKILL.md +53 -0
  28. data/etc/default_skills/pwn/ai/red_team/unbounded_consumption/references/security.md +3 -0
  29. data/etc/default_skills/pwn/ai/red_team/unbounded_consumption/references/urls.md +6 -0
  30. data/etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/SKILL.md +53 -0
  31. data/etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/references/security.md +3 -0
  32. data/etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/references/urls.md +6 -0
  33. data/etc/default_skills/pwn/plugins/repl/SKILL.md +7 -0
  34. data/lib/pwn/ai/agent/loop.rb +66 -8
  35. data/lib/pwn/ai/agent/prompt_builder.rb +9 -5
  36. data/lib/pwn/ai/agent/tool_guard.rb +129 -33
  37. data/lib/pwn/ai/agent/tools/ruby_eval.rb +9 -11
  38. data/lib/pwn/ai/agent/tools/shell.rb +6 -3
  39. data/lib/pwn/ai/red_team/agent_protocol_abuse.rb +91 -0
  40. data/lib/pwn/ai/red_team/data_and_model_poisoning.rb +91 -0
  41. data/lib/pwn/ai/red_team/hidden_context_exposure.rb +91 -0
  42. data/lib/pwn/ai/red_team/memory_poisoning.rb +91 -0
  43. data/lib/pwn/ai/red_team/multimodal_injection.rb +91 -0
  44. data/lib/pwn/ai/red_team/rag_poisoning.rb +91 -0
  45. data/lib/pwn/ai/red_team/supply_chain.rb +91 -0
  46. data/lib/pwn/ai/red_team/unbounded_consumption.rb +91 -0
  47. data/lib/pwn/ai/red_team/vector_and_embedding_weaknesses.rb +91 -0
  48. data/lib/pwn/ai/red_team.rb +15 -4
  49. data/lib/pwn/plugins/nmap_it.rb +47 -4
  50. data/lib/pwn/plugins/repl.rb +183 -1
  51. data/lib/pwn/version.rb +1 -1
  52. data/spec/lib/pwn/ai/agent/loop_spec.rb +23 -3
  53. data/spec/lib/pwn/ai/agent/prompt_builder_spec.rb +1 -0
  54. data/spec/lib/pwn/ai/agent/tool_guard_spec.rb +80 -19
  55. data/spec/lib/pwn/ai/agent/tools/ruby_eval_spec.rb +2 -2
  56. data/spec/lib/pwn/ai/agent/tools/shell_spec.rb +3 -3
  57. data/spec/lib/pwn/ai/red_team/agent_protocol_abuse_spec.rb +40 -0
  58. data/spec/lib/pwn/ai/red_team/data_and_model_poisoning_spec.rb +40 -0
  59. data/spec/lib/pwn/ai/red_team/hidden_context_exposure_spec.rb +40 -0
  60. data/spec/lib/pwn/ai/red_team/memory_poisoning_spec.rb +40 -0
  61. data/spec/lib/pwn/ai/red_team/multimodal_injection_spec.rb +40 -0
  62. data/spec/lib/pwn/ai/red_team/rag_poisoning_spec.rb +40 -0
  63. data/spec/lib/pwn/ai/red_team/supply_chain_spec.rb +40 -0
  64. data/spec/lib/pwn/ai/red_team/unbounded_consumption_spec.rb +40 -0
  65. data/spec/lib/pwn/ai/red_team/vector_and_embedding_weaknesses_spec.rb +40 -0
  66. data/spec/lib/pwn/plugins/nmap_it_spec.rb +7 -0
  67. data/spec/lib/pwn/plugins/repl_spec.rb +37 -1
  68. data/third_party/pwn_rdoc.jsonl +61 -1
  69. metadata +46 -1
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pwn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.695
4
+ version: 0.5.697
5
5
  platform: ruby
6
6
  authors:
7
7
  - 0day Inc.
@@ -4968,15 +4968,30 @@ files:
4968
4968
  - etc/default_skills/pwn/ai/open_ai/references/urls.md
4969
4969
  - etc/default_skills/pwn/ai/open_web_ui/SKILL.md
4970
4970
  - etc/default_skills/pwn/ai/red_team/SKILL.md
4971
+ - etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/SKILL.md
4972
+ - etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/references/security.md
4973
+ - etc/default_skills/pwn/ai/red_team/agent_protocol_abuse/references/urls.md
4974
+ - etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/SKILL.md
4975
+ - etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/references/security.md
4976
+ - etc/default_skills/pwn/ai/red_team/data_and_model_poisoning/references/urls.md
4971
4977
  - etc/default_skills/pwn/ai/red_team/excessive_agency/SKILL.md
4972
4978
  - etc/default_skills/pwn/ai/red_team/excessive_agency/references/security.md
4973
4979
  - etc/default_skills/pwn/ai/red_team/excessive_agency/references/urls.md
4980
+ - etc/default_skills/pwn/ai/red_team/hidden_context_exposure/SKILL.md
4981
+ - etc/default_skills/pwn/ai/red_team/hidden_context_exposure/references/security.md
4982
+ - etc/default_skills/pwn/ai/red_team/hidden_context_exposure/references/urls.md
4974
4983
  - etc/default_skills/pwn/ai/red_team/insecure_output_handling/SKILL.md
4975
4984
  - etc/default_skills/pwn/ai/red_team/insecure_output_handling/references/security.md
4976
4985
  - etc/default_skills/pwn/ai/red_team/insecure_output_handling/references/urls.md
4977
4986
  - etc/default_skills/pwn/ai/red_team/jailbreak/SKILL.md
4978
4987
  - etc/default_skills/pwn/ai/red_team/jailbreak/references/security.md
4979
4988
  - etc/default_skills/pwn/ai/red_team/jailbreak/references/urls.md
4989
+ - etc/default_skills/pwn/ai/red_team/memory_poisoning/SKILL.md
4990
+ - etc/default_skills/pwn/ai/red_team/memory_poisoning/references/security.md
4991
+ - etc/default_skills/pwn/ai/red_team/memory_poisoning/references/urls.md
4992
+ - etc/default_skills/pwn/ai/red_team/multimodal_injection/SKILL.md
4993
+ - etc/default_skills/pwn/ai/red_team/multimodal_injection/references/security.md
4994
+ - etc/default_skills/pwn/ai/red_team/multimodal_injection/references/urls.md
4980
4995
  - etc/default_skills/pwn/ai/red_team/overreliance/SKILL.md
4981
4996
  - etc/default_skills/pwn/ai/red_team/overreliance/references/security.md
4982
4997
  - etc/default_skills/pwn/ai/red_team/overreliance/references/urls.md
@@ -4986,10 +5001,16 @@ files:
4986
5001
  - etc/default_skills/pwn/ai/red_team/prompt_injection/SKILL.md
4987
5002
  - etc/default_skills/pwn/ai/red_team/prompt_injection/references/security.md
4988
5003
  - etc/default_skills/pwn/ai/red_team/prompt_injection/references/urls.md
5004
+ - etc/default_skills/pwn/ai/red_team/rag_poisoning/SKILL.md
5005
+ - etc/default_skills/pwn/ai/red_team/rag_poisoning/references/security.md
5006
+ - etc/default_skills/pwn/ai/red_team/rag_poisoning/references/urls.md
4989
5007
  - etc/default_skills/pwn/ai/red_team/references/urls.md
4990
5008
  - etc/default_skills/pwn/ai/red_team/sensitive_information_disclosure/SKILL.md
4991
5009
  - etc/default_skills/pwn/ai/red_team/sensitive_information_disclosure/references/security.md
4992
5010
  - etc/default_skills/pwn/ai/red_team/sensitive_information_disclosure/references/urls.md
5011
+ - etc/default_skills/pwn/ai/red_team/supply_chain/SKILL.md
5012
+ - etc/default_skills/pwn/ai/red_team/supply_chain/references/security.md
5013
+ - etc/default_skills/pwn/ai/red_team/supply_chain/references/urls.md
4993
5014
  - etc/default_skills/pwn/ai/red_team/system_prompt_extraction/SKILL.md
4994
5015
  - etc/default_skills/pwn/ai/red_team/system_prompt_extraction/references/security.md
4995
5016
  - etc/default_skills/pwn/ai/red_team/system_prompt_extraction/references/urls.md
@@ -4998,6 +5019,12 @@ files:
4998
5019
  - etc/default_skills/pwn/ai/red_team/token_smuggling/SKILL.md
4999
5020
  - etc/default_skills/pwn/ai/red_team/token_smuggling/references/security.md
5000
5021
  - etc/default_skills/pwn/ai/red_team/token_smuggling/references/urls.md
5022
+ - etc/default_skills/pwn/ai/red_team/unbounded_consumption/SKILL.md
5023
+ - etc/default_skills/pwn/ai/red_team/unbounded_consumption/references/security.md
5024
+ - etc/default_skills/pwn/ai/red_team/unbounded_consumption/references/urls.md
5025
+ - etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/SKILL.md
5026
+ - etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/references/security.md
5027
+ - etc/default_skills/pwn/ai/red_team/vector_and_embedding_weaknesses/references/urls.md
5001
5028
  - etc/default_skills/pwn/ai/references/urls.md
5002
5029
  - etc/default_skills/pwn/aws/SKILL.md
5003
5030
  - etc/default_skills/pwn/aws/acm/SKILL.md
@@ -5841,16 +5868,25 @@ files:
5841
5868
  - lib/pwn/ai/open_ai.rb
5842
5869
  - lib/pwn/ai/open_web_ui.rb
5843
5870
  - lib/pwn/ai/red_team.rb
5871
+ - lib/pwn/ai/red_team/agent_protocol_abuse.rb
5872
+ - lib/pwn/ai/red_team/data_and_model_poisoning.rb
5844
5873
  - lib/pwn/ai/red_team/excessive_agency.rb
5874
+ - lib/pwn/ai/red_team/hidden_context_exposure.rb
5845
5875
  - lib/pwn/ai/red_team/insecure_output_handling.rb
5846
5876
  - lib/pwn/ai/red_team/jailbreak.rb
5877
+ - lib/pwn/ai/red_team/memory_poisoning.rb
5878
+ - lib/pwn/ai/red_team/multimodal_injection.rb
5847
5879
  - lib/pwn/ai/red_team/overreliance.rb
5848
5880
  - lib/pwn/ai/red_team/payload_splitting.rb
5849
5881
  - lib/pwn/ai/red_team/prompt_injection.rb
5882
+ - lib/pwn/ai/red_team/rag_poisoning.rb
5850
5883
  - lib/pwn/ai/red_team/sensitive_information_disclosure.rb
5884
+ - lib/pwn/ai/red_team/supply_chain.rb
5851
5885
  - lib/pwn/ai/red_team/system_prompt_extraction.rb
5852
5886
  - lib/pwn/ai/red_team/test_case_engine.rb
5853
5887
  - lib/pwn/ai/red_team/token_smuggling.rb
5888
+ - lib/pwn/ai/red_team/unbounded_consumption.rb
5889
+ - lib/pwn/ai/red_team/vector_and_embedding_weaknesses.rb
5854
5890
  - lib/pwn/aws.rb
5855
5891
  - lib/pwn/aws/acm.rb
5856
5892
  - lib/pwn/aws/api_gateway.rb
@@ -6316,16 +6352,25 @@ files:
6316
6352
  - spec/lib/pwn/ai/ollama_spec.rb
6317
6353
  - spec/lib/pwn/ai/open_ai_spec.rb
6318
6354
  - spec/lib/pwn/ai/open_web_ui_spec.rb
6355
+ - spec/lib/pwn/ai/red_team/agent_protocol_abuse_spec.rb
6356
+ - spec/lib/pwn/ai/red_team/data_and_model_poisoning_spec.rb
6319
6357
  - spec/lib/pwn/ai/red_team/excessive_agency_spec.rb
6358
+ - spec/lib/pwn/ai/red_team/hidden_context_exposure_spec.rb
6320
6359
  - spec/lib/pwn/ai/red_team/insecure_output_handling_spec.rb
6321
6360
  - spec/lib/pwn/ai/red_team/jailbreak_spec.rb
6361
+ - spec/lib/pwn/ai/red_team/memory_poisoning_spec.rb
6362
+ - spec/lib/pwn/ai/red_team/multimodal_injection_spec.rb
6322
6363
  - spec/lib/pwn/ai/red_team/overreliance_spec.rb
6323
6364
  - spec/lib/pwn/ai/red_team/payload_splitting_spec.rb
6324
6365
  - spec/lib/pwn/ai/red_team/prompt_injection_spec.rb
6366
+ - spec/lib/pwn/ai/red_team/rag_poisoning_spec.rb
6325
6367
  - spec/lib/pwn/ai/red_team/sensitive_information_disclosure_spec.rb
6368
+ - spec/lib/pwn/ai/red_team/supply_chain_spec.rb
6326
6369
  - spec/lib/pwn/ai/red_team/system_prompt_extraction_spec.rb
6327
6370
  - spec/lib/pwn/ai/red_team/test_case_engine_spec.rb
6328
6371
  - spec/lib/pwn/ai/red_team/token_smuggling_spec.rb
6372
+ - spec/lib/pwn/ai/red_team/unbounded_consumption_spec.rb
6373
+ - spec/lib/pwn/ai/red_team/vector_and_embedding_weaknesses_spec.rb
6329
6374
  - spec/lib/pwn/ai/red_team_spec.rb
6330
6375
  - spec/lib/pwn/ai_spec.rb
6331
6376
  - spec/lib/pwn/aws/acm_spec.rb