pwn 0.5.708 → 0.5.709

data/etc/default_skills/pwn/plugins/nuclei/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: pwn-plugins-nuclei
+description: Drive PWN::Plugins::Nuclei from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Nuclei
+  source: pwn/plugins/nuclei.rb
+---
+
+# PWN::Plugins::Nuclei
+
+nuclei wrapper: template/severity, JSONL findings.
+
+## When to use
+
+Call `PWN::Plugins::Nuclei` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/nuclei.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Nuclei.help
+PWN::Plugins::Nuclei.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `scan`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/nuclei.rb`
+
+## Verification
+
+`PWN::Plugins::Nuclei.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/process_tube/SKILL.md

@@ -0,0 +1,52 @@
+---
+name: pwn-plugins-processtube
+description: Drive PWN::Plugins::ProcessTube from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::ProcessTube
+  source: pwn/plugins/process_tube.rb
+---
+
+# PWN::Plugins::ProcessTube
+
+PTY.spawn tube: sendline/recvuntil/recvline, persisted across pwn_eval.
+
+## When to use
+
+Call `PWN::Plugins::ProcessTube` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/process_tube.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::ProcessTube.help
+PWN::Plugins::ProcessTube.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `spawn`
+- `write_line`
+- `recvuntil`
+- `recvline`
+- `close`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/process_tube.rb`
+
+## Verification
+
+`PWN::Plugins::ProcessTube.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/radare2/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: pwn-plugins-radare2
+description: Drive PWN::Plugins::Radare2 from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Radare2
+  source: pwn/plugins/radare2.rb
+---
+
+# PWN::Plugins::Radare2
+
+Persistent r2pipe-style session: open/cmd/cmdj/close plus helpers.
+
+## When to use
+
+Call `PWN::Plugins::Radare2` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/radare2.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Radare2.help
+PWN::Plugins::Radare2.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `open`
+- `cmd`
+- `cmdj`
+- `close`
+- `functions`
+- `xrefs_to`
+- `disasm`
+- `strings`
+- `imports`
+- `sections`
+- `binary_info`
+- `decompile`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/radare2.rb`
+
+## Verification
+
+`PWN::Plugins::Radare2.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/recon/SKILL.md

@@ -0,0 +1,55 @@
+---
+name: pwn-plugins-recon
+description: Drive PWN::Plugins::Recon from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Recon
+  source: pwn/plugins/recon.rb
+---
+
+# PWN::Plugins::Recon
+
+subfinder/httpx/masscan wrappers + cert-transparency (crt.sh, certspotter).
+
+## When to use
+
+Call `PWN::Plugins::Recon` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/recon.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Recon.help
+PWN::Plugins::Recon.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `subdomains`
+- `httpx`
+- `masscan`
+- `crt_sh`
+- `authors`
+- `help`
+
+## References
+
+- `references/urls.md` — URLs from source
+
+## Source
+
+`pwn/plugins/recon.rb`
+
+## Verification
+
+`PWN::Plugins::Recon.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/recon/references/urls.md

@@ -0,0 +1,5 @@
+# PWN::Plugins::Recon source links
+
+- https://api.certspotter.com/v1/issuances?domain=#{URI.encode_www_form_component(domain
+- https://crt.sh/?q=#{URI.encode_www_form_component(domain
+- https://crt.sh/?q=#{URI.encode_www_form_component(

data/etc/default_skills/pwn/plugins/sqlmap/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: pwn-plugins-sqlmap
+description: Drive PWN::Plugins::Sqlmap from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Sqlmap
+  source: pwn/plugins/sqlmap.rb
+---
+
+# PWN::Plugins::Sqlmap
+
+sqlmap wrapper to pair with SAST SQL detection.
+
+## When to use
+
+Call `PWN::Plugins::Sqlmap` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/sqlmap.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Sqlmap.help
+PWN::Plugins::Sqlmap.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `run`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/sqlmap.rb`
+
+## Verification
+
+`PWN::Plugins::Sqlmap.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/transparent_browser/SKILL.md

@@ -58,10 +58,6 @@ PWN::Plugins::TransparentBrowser.open(opts)
 - `authors`
 - `help`
 
-## References
-
-- `references/urls.md` — URLs from source
-
 ## Source
 
 `pwn/plugins/transparent_browser.rb`

data/etc/default_skills/pwn/plugins/volatility/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: pwn-plugins-volatility
+description: Drive PWN::Plugins::Volatility from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Volatility
+  source: pwn/plugins/volatility.rb
+---
+
+# PWN::Plugins::Volatility
+
+volatility3 wrapper.
+
+## When to use
+
+Call `PWN::Plugins::Volatility` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/volatility.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Volatility.help
+PWN::Plugins::Volatility.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `run`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/volatility.rb`
+
+## Verification
+
+`PWN::Plugins::Volatility.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/lib/pwn/ai/agent/assembly.rb

@@ -56,15 +56,18 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
-            ai_analysis = PWN::AI::Agent::Assembly.analyze(
+            # Run analyze and return its result
+            #{self}.analyze(
               request: 'required - the assembly opcodes or instructions to be analyzed',
               type: 'required - :opcodes_to_asm|:asm_to_opcodes - specify the type of analysis to perform',
               arch: 'required - name of arch returned from `PWN::Plugins::Assembly.list_supported_archs` (e.g., :i386|:i686|:x86|:x64|:arm|:arm64, etc.)',
               endian: 'required - the endianness of the assembly code (e.g., :little|:big)'
             )
 
+            # Print the AUTHOR(S) string for this module.
             #{self}.authors
           "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/btc.rb

@@ -37,12 +37,15 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
-            ai_analysis = PWN::AI::Agent::BTC.analyze(
+            # Run analyze and return its result
+            #{self}.analyze(
               request: 'required - latest block information retrieved from a bitcoin node via `PWN::Blockchain::BTC.get_latest_block`'
             )
 
+            # Print the AUTHOR(S) string for this module.
             #{self}.authors
           "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/burp_suite.rb

@@ -71,12 +71,15 @@ module PWN
 
         public_class_method def self.help
           puts "USAGE:
-            ai_analysis = PWN::AI::Agent::BurpSuite.analyze(
-              request: 'required HTTP request/response pair or WebSocket message as a string'
+            # Run analyze and return its result
+            #{self}.analyze(
+              request: 'required - required HTTP request/response pair or WebSocket message as a string'
             )
 
+            # Print the AUTHOR(S) string for this module.
             #{self}.authors
           "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/curriculum.rb

@@ -1634,36 +1634,95 @@ module PWN
         # Display Usage for this Module
 
         public_class_method def self.help
-          puts <<~USAGE
-            USAGE:
-              # Tier 4 — self-play
-              PWN::AI::Agent::Curriculum.practice(limit: 3)                     # S1 + P14 trajectory DPO pairs + P17 budget-first
-              PWN::AI::Agent::Curriculum.offline_judge(since_hours: 24)         # P3 offline ORM/PRM fill
-              PWN::AI::Agent::Curriculum.preference_balance                     # P5 W1 diversity report
-              PWN::AI::Agent::Curriculum.counterfactual(request:, name:, args:, error:, hint:)  # S2 A/B → DPO pair
-              PWN::AI::Agent::Curriculum.critic(request:, final:)               # S3 tool-armed constitutional critic
-              PWN::AI::Agent::Curriculum.red_team_plan(request:, plan:)         # S4 telemetry-grounded plan review
-              PWN::AI::Agent::Curriculum.hindsight(request:, final:, session_id:) # C3 HER soft-relabel
-
-              # Tier 5 — close the weight loop
-              PWN::AI::Agent::Curriculum.train_and_gate(dry_run: true)          # W2 export-ready; P11 gate v2 promote only with trainer+dry_run:false
-              PWN::AI::Agent::Curriculum.calibrate(predicted: 0.8, actual: 1.0) # W3 Brier → Metrics[:calibration]
-
-              Cron self-improvement (seeded by PWN::Cron.install_defaults):
-                curriculum_practice_nightly  0 3 * * *   Curriculum.practice(limit: 3)
-                curriculum_offline_judge     30 3 * * *  Curriculum.offline_judge(since_hours: 24, limit: 40)
-                curriculum_train_weekly      0 4 * * 0   Curriculum.train_and_gate(dry_run: true)
-                learning_consolidate_nightly 0 5 * * *   Learning.consolidate
-
-              Config (PWN::Env[:ai][:agent]) — nil = auto (ON for remote engines, OFF for ollama):
-                :critic         - Boolean/nil, run S3 before every note_outcome
-                :red_team_plan  - Boolean/nil, run S4 after every plan_first
-                :counterfactual - Boolean/nil, run S2 on REPEAT_THRESHOLD
-                :hindsight      - Boolean, HER soft-relabel failures (default true)
-                :reward_llm     - Boolean/nil, force ORM/PRM LLM teacher (nil=on for remote)
-
-              #{self}.authors
-          USAGE
+          puts "USAGE:
+            # Run practice and return its result
+            #{self}.practice(
+              limit: 'optional - limit value consumed by #practice',
+              prompts_per: 'optional - prompts per value consumed by #practice',
+              dry_run: 'optional - dry run value consumed by #practice'
+            )
+
+            # Priority-fix 3 — Offline ORM/PRM pass over recent sessions so
+            #{self}.offline_judge(
+              local: 'optional - failure_only introspect does not starve the reward corpus.',
+              since_hours: 'optional - lookback window (default 24)',
+              limit: 'optional - max sessions to score (default 40)',
+              prm: 'optional - also run Process Reward Model (default true)',
+              commit: 'optional - write scores into learning/sentinel (default true)'
+            )
+
+            # P5 — W1 diversity report so monoculture is visible before DPO export
+            #{self}.preference_balance(
+              limit: 'optional - limit value consumed by #preference_balance (defaults to 10_000)',
+              scrub: 'optional - scrub value consumed by #preference_balance'
+            )
+
+            # Run counterfactual and return its result
+            #{self}.counterfactual(
+              force: 'optional - force value consumed by #counterfactual',
+              request: 'optional - request value consumed by #counterfactual',
+              hint: 'optional - hint value consumed by #counterfactual',
+              name: 'required - binary or identifier name',
+              args: 'required - args value consumed by #counterfactual',
+              error: 'optional - error value consumed by #counterfactual'
+            )
+
+            # S3 — Constitutional critic (with tool access)
+            #{self}.critic(
+              request: 'required - user request',
+              final: 'required - candidate final answer',
+              session_id: 'optional - for evidence lookup',
+              text_only: 'optional - text only value consumed by #critic',
+              force: 'optional - force value consumed by #critic'
+            )
+
+            # S4 — Adversarial plan review (grounded in telemetry)
+            #{self}.red_team_plan(
+              request: 'required - user goal',
+              plan: 'required - numbered plan text from plan_first'
+            )
+
+            # C3 — Hindsight Experience Replay
+            #{self}.hindsight(
+              request: 'required - the FAILED goal',
+              final: 'required - the final produced anyway',
+              session_id: 'required - trajectory to relabel'
+            )
+
+            # W2 — Online LoRA A/B with regression gate
+            #{self}.train_and_gate(
+              base_model: 'optional - ollama base tag (default PWN::Env[:ai][:ollama][:model])',
+              trainer: 'optional - :unsloth | :axolotl | :auto (default :auto)',
+              dry_run: 'optional - export + build eval set but do not train (default true)'
+            )
+
+            # Run reclassify backlog and return its result
+            #{self}.reclassify_backlog(
+              limit: 'optional - limit value consumed by #reclassify_backlog'
+            )
+
+            # Run practice kpi and return its result
+            #{self}.practice_kpi(
+              results: 'optional - Array results value consumed by #practice_kpi',
+              reclassified_n: 'optional - reclassified n value consumed by #practice_kpi'
+            )
+
+            # Week-over-week (or last-N snapshots) delta on repeating_n
+            #{self}.repeating_trend(
+              limit: 'optional - limit value consumed by #repeating_trend'
+            )
+
+            # Run calibrate and return its result
+            #{self}.calibrate(
+              predicted: 'optional - predicted value consumed by #calibrate',
+              actual: 'optional - actual value consumed by #calibrate',
+              engine: 'optional - engine value consumed by #calibrate'
+            )
+
+            # Print the AUTHOR(S) string for this module.
+            #{self}.authors
+          "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/dispatch.rb

@@ -352,22 +352,33 @@ module PWN
         # Display Usage for this Module
 
         public_class_method def self.help
-          puts <<~USAGE
-            USAGE:
-              json_str = PWN::AI::Agent::Dispatch.call(
-                tool_call: {
-                  id: 'call_1',
-                  type: 'function',
-                  function: { name: 'shell', arguments: '{"command":"id"}' }
-                }
-              )
-
-              PWN::AI::Agent::Dispatch.repair_name(name: 'run_shell')  # => 'shell'
-              PWN::AI::Agent::Dispatch.effect(name: 'shell', args: { command: 'ls' })
-              PWN::AI::Agent::Dispatch.tool_calls_from_text(text: 'shell(command="id")')
-
-              #{self}.authors
-          USAGE
+          puts "USAGE:
+            # Run call and return its result
+            #{self}.call(
+              tool_call: 'required - Hash { id:, type:, function: { name:, arguments: } }'
+            )
+
+            # Run repair name and return its result
+            #{self}.repair_name(
+              name: 'required - possibly-wrong tool name emitted by the model'
+            )
+
+            # Run tool calls from text and return its result
+            #{self}.tool_calls_from_text(
+              text: 'required - assistant plain-text that may embed shell(...) / JSON tool forms',
+              call: 'optional - shell{command: uname -s} / tool:shell{command:id}'
+            )
+
+            # Run effect and return its result
+            #{self}.effect(
+              name: 'required - binary or identifier name',
+              args: 'optional - args value consumed by #effect'
+            )
+
+            # Print the AUTHOR(S) string for this module.
+            #{self}.authors
+          "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/extrospection/osint/bridges.rb

@@ -214,25 +214,16 @@ module PWN
           { source: 'recon-ng', error: "#{e.class}: #{e.message.to_s[0, 160]}" }
         end
         # Marker submodule so this file satisfies PWN module conventions
-        # (def self.help / def self.authors per-file) WITHOUT clobbering
-        # PWN::AI::Agent::Extrospection.help defined in the parent file.
-        module OSINTBridges
-          # Author(s):: 0day Inc. <support@0dayinc.com>
-
-          public_class_method def self.authors
-            "AUTHOR(S):\n0day Inc. <support@0dayinc.com>\n"
-          end
-
-          # Display Usage for this Module
+        public_class_method def self.authors
+          "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
+        end
 
-          public_class_method def self.help
-            <<~USAGE
-              Local-tool OSINT bridge feeds for PWN::AI::Agent::Extrospection.osint.
-              Feeds: #{BRIDGE_FEEDS.join(', ')}
-              Bins probed: theHarvester, spiderfoot, amass, recon-ng (skips cleanly when absent).
-              See PWN::AI::Agent::Extrospection.help / documentation/Extrospection.md.
-            USAGE
-          end
+        public_class_method def self.help
+          puts "USAGE:
+            # Marker submodule so this file satisfies PWN module conventions
+            #{self}.authors
+          "
+          constants.sort
         end
       end
     end

data/lib/pwn/ai/agent/extrospection/osint/social.rb

@@ -379,25 +379,16 @@ module PWN
           }
         end
         # Marker submodule so this file satisfies PWN module conventions
-        # (def self.help / def self.authors per-file) WITHOUT clobbering
-        # PWN::AI::Agent::Extrospection.help defined in the parent file.
-        module OSINTSocial
-          # Author(s):: 0day Inc. <support@0dayinc.com>
-
-          public_class_method def self.authors
-            "AUTHOR(S):\n0day Inc. <support@0dayinc.com>\n"
-          end
-
-          # Display Usage for this Module
+        public_class_method def self.authors
+          "AUTHOR(S):\n  0day Inc. <support@0dayinc.com>\n"
+        end
 
-          public_class_method def self.help
-            <<~USAGE
-              Social / identity OSINT feeds for PWN::AI::Agent::Extrospection.osint.
-              Feeds: #{SOCIAL_FEEDS.join(', ')}
-              Sites file: #{SOCIAL_SITES_FILE}
-              See PWN::AI::Agent::Extrospection.help / documentation/Extrospection.md.
-            USAGE
-          end
+        public_class_method def self.help
+          puts "USAGE:
+            # Marker submodule so this file satisfies PWN module conventions
+            #{self}.authors
+          "
+          constants.sort
         end
       end
     end