pwn 0.5.708 → 0.5.710

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5d0deee1782b9f4be05a64ad407eb94b10e351f79481935e2bbd2fd79ac3855f
-  data.tar.gz: b559b0d6ebb5d6b02a51dcbe158f17f70f693a3ed918b2b3498771e5a261ba39
+  metadata.gz: bb2089e549bccd1c21a643fd22719f13cb3a7519c1580f9cbd3e425c66f2be91
+  data.tar.gz: d27e48a928750b279f8315e8a578071bed21403728ae7f8c5474015f75ff557e
 SHA512:
-  metadata.gz: 6829d1d1b0306785f50881d971fe95c5b5f284e18a60650850c2d98e6fbf48b8688474218a3bd099a59c5c842db20290356901bcccebee271713e1bd31df675b
-  data.tar.gz: 9904b5315b4946052e38e9f00b6bc6ff2e4dde07b9827153e0c982738281c093f7e6ad63609ca75091fffff08e50bacf71b3da09869445384d0be42f59190460
+  metadata.gz: 37c74e1e2ab80b6a872f0d533ec402b520bffd70dc1198114574b3bbe90383c9dbebe6ac9b844e79023eed1cdeefc6cb8df4cca964b186cff1e25bc718384b12
+  data.tar.gz: 703c871173f4a754b9a515b45c4fd6aa4d3e2b1590f397168a53869d7eed5a77243a69e635f3894ce61be401b4c260395b0be7b435d6dc0613067b7b9047345c

data/Gemfile

@@ -22,7 +22,7 @@ gem 'brakeman', '8.0.6'
 gem 'bson', '5.2.0'
 gem 'bundler', '>=4.0.19'
 gem 'bundler-audit', '>=0.9.3'
-gem 'bunny', '3.2.0'
+gem 'bunny', '3.3.0'
 gem 'colorize', '1.1.0'
 gem 'credit_card_validations', '9.0.0'
 gem 'curses', '1.7.0'
@@ -77,7 +77,7 @@ gem 'rbvmomi2', '3.10.0'
 gem 'rdoc', '7.0.4'
 gem 'rest-client', '2.1.0'
 gem 'rex', '2.0.13'
-gem 'rmagick', '7.1.1'
+gem 'rmagick', '7.1.3'
 gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'

data/documentation/Installation.md

@@ -127,6 +127,7 @@ pwn setup --list-profiles
 | `voice` | `PWN::Plugins::Voice` · `extro_voice` · espeak-ng / sox |
 | `exploit` | `Metasploit` · `sqlmap` |
 | `hardware` | `Serial` · `BusPirate` · `Android` · `BareSIP` · `extro_serial` · `extro_telecomm` |
+| `re` | `Radare2` · `GDB` · `ExploitDev` · `Frida` · Android RE (`apktool`/`jadx`) · `pwndbg` · `ropper` · `rizin` |
 | `full` | everything above |
 
 ### All flags

data/etc/default_skills/exploitdev/SKILL.md

@@ -0,0 +1,38 @@
+---
+name: exploitdev
+description: "Exploit-dev SOP: packing, cyclic, ROP, one_gadget, libc offsets."
+---
+
+# Exploit development
+
+Use `PWN::Plugins::ExploitDev` from `pwn_eval` — do not shell out to pwntools unless a plugin method is missing.
+
+## Packing
+
+```ruby
+PWN::Plugins::ExploitDev.p32(value: 0x41414141)
+PWN::Plugins::ExploitDev.p64(value: addr, endian: :little)
+PWN::Plugins::ExploitDev.flat(parts: [0xdeadbeef, "A" * 32, 0x401000])
+```
+
+## Cyclic
+
+```ruby
+pattern = PWN::Plugins::ExploitDev.cyclic(length: 200)
+offset = PWN::Plugins::ExploitDev.cyclic_find(value: "Aa0A", length: 200)
+```
+
+## Shellcode / ROP
+
+```ruby
+PWN::Plugins::ExploitDev.shellcode(arch: 'x86_64', kind: 'execve_bin_sh')
+PWN::Plugins::ExploitDev.gadgets(path: '/path/to/binary')
+PWN::Plugins::ExploitDev.one_gadget(path: '/lib/x86_64-linux-gnu/libc.so.6')
+PWN::Plugins::ExploitDev.libc_offsets(path: '/lib/x86_64-linux-gnu/libc.so.6')
+```
+
+## Interactive
+
+`PWN::Plugins::ProcessTube.spawn` or `.connect` then `write_line` / `recvuntil`.
+`PWN::Plugins::GDB.run_to_crash` / `.breakpoints` / `.core`.
+`PWN::Plugins::Radare2.open` then `cmd` (text) or `cmdj` (JSON).

data/etc/default_skills/pwn/ai/agent/extrospection/osint/bridges/SKILL.md

@@ -1,22 +1,22 @@
 ---
-name: pwn-ai-agent-extrospection-osintbridges
-description: Drive PWN::AI::Agent::Extrospection::OSINTBridges from pwn_eval.
+name: pwn-ai-agent-extrospection
+description: Drive PWN::AI::Agent::Extrospection from pwn_eval.
 license: MIT
 allowed-tools: [pwn, pwn_eval]
 metadata:
   bundled: true
   generated: true
-  module: PWN::AI::Agent::Extrospection::OSINTBridges
+  module: PWN::AI::Agent::Extrospection
   source: pwn/ai/agent/extrospection/osint/bridges.rb
 ---
 
-# PWN::AI::Agent::Extrospection::OSINTBridges
+# PWN::AI::Agent::Extrospection
 
 Local-tool OSINT bridges for PWN::AI::Agent::Extrospection.osint. Wraps host binaries (theHarvester, spiderfoot, amass, recon-ng) already common on Kali / offensive-tooling images, parses their JSON/CSV output, and returns compact structured hits so they behave like any other feed. Every bridge: * checks binary presence first (returns {skipped:} when absent) * runs passive-only / bounded (timeouts, `-passive`, module lists) * NEVER launches a GUI or web UI
 
 ## When to use
 
-Call `PWN::AI::Agent::Extrospection::OSINTBridges` from `pwn_eval` when the task needs this module.
+Call `PWN::AI::Agent::Extrospection` from `pwn_eval` when the task needs this module.
 Do not reimplement it in shell.
 
 ## Methodologies
@@ -27,14 +27,36 @@ Class methods take `(opts = {})` and read `opts`.
 ## How to call
 
 ```ruby
-PWN::AI::Agent::Extrospection::OSINTBridges.help
-PWN::AI::Agent::Extrospection::OSINTBridges.help(opts)
+PWN::AI::Agent::Extrospection.help
+PWN::AI::Agent::Extrospection.auto_extrospect(opts)
 ```
 
 ## Public methods
 
 - `authors`
 - `help`
+- `auto_extrospect`
+- `correlate`
+- `drift`
+- `intel`
+- `load`
+- `observations`
+- `observe`
+- `osint`
+- `packet_sense`
+- `reset`
+- `revalidate_memory`
+- `rf_tune`
+- `save`
+- `serial_sense`
+- `snapshot`
+- `stats`
+- `telecomm`
+- `to_context`
+- `verify`
+- `vision`
+- `voice_sense`
+- `watch`
 
 ## Source
 
@@ -42,5 +64,5 @@ PWN::AI::Agent::Extrospection::OSINTBridges.help(opts)
 
 ## Verification
 
-`PWN::AI::Agent::Extrospection::OSINTBridges.respond_to?(:authors)` after the
+`PWN::AI::Agent::Extrospection.respond_to?(:authors)` after the
 module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/extrospection/osint/social/SKILL.md

@@ -1,22 +1,22 @@
 ---
-name: pwn-ai-agent-extrospection-osintsocial
-description: Drive PWN::AI::Agent::Extrospection::OSINTSocial from pwn_eval.
+name: pwn-ai-agent-extrospection
+description: Drive PWN::AI::Agent::Extrospection from pwn_eval.
 license: MIT
 allowed-tools: [pwn, pwn_eval]
 metadata:
   bundled: true
   generated: true
-  module: PWN::AI::Agent::Extrospection::OSINTSocial
+  module: PWN::AI::Agent::Extrospection
   source: pwn/ai/agent/extrospection/osint/social.rb
 ---
 
-# PWN::AI::Agent::Extrospection::OSINTSocial
+# PWN::AI::Agent::Extrospection
 
 Social-network / developer-identity OSINT feeds for PWN::AI::Agent::Extrospection.osint. All methods here reopen the Extrospection singleton so osint_dispatch can route to them exactly like the in-file feeds. Everything is best-effort: unreachable endpoints degrade to {error:} rather than raising. Feeds provided: :keybase :gravatar :mastodon :bluesky :hackernews :stackexchange :npm :pypi :rubygems :crates :dockerhub :codeberg :sourcehut :chesscom :lichess :steam :telegram :social_sweep New kind :social routes to the profile-fetch feeds; :username still returns the legacy 3-platform hash for back-compat but now also includes a truncated :social_sweep hit list.
 
 ## When to use
 
-Call `PWN::AI::Agent::Extrospection::OSINTSocial` from `pwn_eval` when the task needs this module.
+Call `PWN::AI::Agent::Extrospection` from `pwn_eval` when the task needs this module.
 Do not reimplement it in shell.
 
 ## Methodologies
@@ -27,14 +27,36 @@ Class methods take `(opts = {})` and read `opts`.
 ## How to call
 
 ```ruby
-PWN::AI::Agent::Extrospection::OSINTSocial.help
-PWN::AI::Agent::Extrospection::OSINTSocial.help(opts)
+PWN::AI::Agent::Extrospection.help
+PWN::AI::Agent::Extrospection.auto_extrospect(opts)
 ```
 
 ## Public methods
 
 - `authors`
 - `help`
+- `auto_extrospect`
+- `correlate`
+- `drift`
+- `intel`
+- `load`
+- `observations`
+- `observe`
+- `osint`
+- `packet_sense`
+- `reset`
+- `revalidate_memory`
+- `rf_tune`
+- `save`
+- `serial_sense`
+- `snapshot`
+- `stats`
+- `telecomm`
+- `to_context`
+- `verify`
+- `vision`
+- `voice_sense`
+- `watch`
 
 ## References
 
@@ -46,5 +68,5 @@ PWN::AI::Agent::Extrospection::OSINTSocial.help(opts)
 
 ## Verification
 
-`PWN::AI::Agent::Extrospection::OSINTSocial.respond_to?(:authors)` after the
+`PWN::AI::Agent::Extrospection.respond_to?(:authors)` after the
 module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/extrospection/osint/social/references/urls.md

@@ -1,4 +1,4 @@
-# PWN::AI::Agent::Extrospection::OSINTSocial source links
+# PWN::AI::Agent::Extrospection source links
 
 - https://keybase.io/_/api/1.0/user/lookup.json?usernames=[redacted].json
 - https://[redacted]/.well-known/webfinger?resource=acct:[redacted]/api/v1/accounts/lookup?acct=[redacted]/

data/etc/default_skills/pwn/ai/agent/extrospection/references/urls.md

@@ -29,4 +29,3 @@
 - https://data.police.uk/api/crime-last-updated
 - https://callook.info/[redacted]
 - https://api.microlink.io?url=[redacted]:[redacted]#{cmd.start_with?(
-- https://target/api/version

data/etc/default_skills/pwn/memory_index/SKILL.md

@@ -43,10 +43,6 @@ PWN::MemoryIndex.available(opts)
 - `help`
 - `available?`
 
-## References
-
-- `references/urls.md` — URLs from source
-
 ## Source
 
 `pwn/memory_index.rb`

data/etc/default_skills/pwn/plugins/aflplusplus/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: pwn-plugins-aflplusplus
+description: Drive PWN::Plugins::AFLplusplus from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::AFLplusplus
+  source: pwn/plugins/aflplusplus.rb
+---
+
+# PWN::Plugins::AFLplusplus
+
+AFL++ campaign wrapper.
+
+## When to use
+
+Call `PWN::Plugins::AFLplusplus` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/aflplusplus.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::AFLplusplus.help
+PWN::Plugins::AFLplusplus.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `fuzz`
+- `crash_triage`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/aflplusplus.rb`
+
+## Verification
+
+`PWN::Plugins::AFLplusplus.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/android/SKILL.md

@@ -49,6 +49,7 @@ PWN::Plugins::Android.adb_net_connect(opts)
 - `close_app`
 - `invoke_event_listener`
 - `adb_net_disconnect`
+- `apk_pipeline`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/artifact_registry/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: pwn-plugins-artifactregistry
+description: Drive PWN::Plugins::ArtifactRegistry from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::ArtifactRegistry
+  source: pwn/plugins/artifact_registry.rb
+---
+
+# PWN::Plugins::ArtifactRegistry
+
+~/.pwn/artifacts/<session>/ loot index for session_recall.
+
+## When to use
+
+Call `PWN::Plugins::ArtifactRegistry` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/artifact_registry.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::ArtifactRegistry.help
+PWN::Plugins::ArtifactRegistry.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `register`
+- `list`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/artifact_registry.rb`
+
+## Verification
+
+`PWN::Plugins::ArtifactRegistry.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/binary_parser/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: pwn-plugins-binaryparser
+description: Drive PWN::Plugins::BinaryParser from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::BinaryParser
+  source: pwn/plugins/binary_parser.rb
+---
+
+# PWN::Plugins::BinaryParser
+
+ELF/PE/Mach-O headers, sections, symbols, imports/exports, relocations via Metasm loaders.
+
+## When to use
+
+Call `PWN::Plugins::BinaryParser` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/binary_parser.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::BinaryParser.help
+PWN::Plugins::BinaryParser.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `load_exe`
+- `info`
+- `sections`
+- `symbols`
+- `imports`
+- `exports`
+- `relocations`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/binary_parser.rb`
+
+## Verification
+
+`PWN::Plugins::BinaryParser.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/credential_attack/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: pwn-plugins-credentialattack
+description: Drive PWN::Plugins::CredentialAttack from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::CredentialAttack
+  source: pwn/plugins/credential_attack.rb
+---
+
+# PWN::Plugins::CredentialAttack
+
+hydra/john/hashcat wrappers and ~/.pwn/wordlists convention.
+
+## When to use
+
+Call `PWN::Plugins::CredentialAttack` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/credential_attack.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::CredentialAttack.help
+PWN::Plugins::CredentialAttack.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `wordlist_dir`
+- `hydra`
+- `john`
+- `hashcat`
+- `medusa`
+- `identify_hash`
+- `fetch_seclists`
+- `authors`
+- `help`
+
+## References
+
+- `references/urls.md` — URLs from source
+
+## Source
+
+`pwn/plugins/credential_attack.rb`
+
+## Verification
+
+`PWN::Plugins::CredentialAttack.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/credential_attack/references/urls.md

@@ -0,0 +1,3 @@
+# PWN::Plugins::CredentialAttack source links
+
+- https://github.com/danielmiessler/SecLists.git

data/etc/default_skills/pwn/plugins/exploit_db/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: pwn-plugins-exploitdb
+description: Drive PWN::Plugins::ExploitDB from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::ExploitDB
+  source: pwn/plugins/exploit_db.rb
+---
+
+# PWN::Plugins::ExploitDB
+
+searchsploit / ExploitDB plus a CPE string builder for nmap versions.
+
+## When to use
+
+Call `PWN::Plugins::ExploitDB` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/exploit_db.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::ExploitDB.help
+PWN::Plugins::ExploitDB.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `search`
+- `cve_for_cpe`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/exploit_db.rb`
+
+## Verification
+
+`PWN::Plugins::ExploitDB.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/exploit_dev/SKILL.md

@@ -0,0 +1,63 @@
+---
+name: pwn-plugins-exploitdev
+description: Drive PWN::Plugins::ExploitDev from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::ExploitDev
+  source: pwn/plugins/exploit_dev.rb
+---
+
+# PWN::Plugins::ExploitDev
+
+p8/p16/p32/p64, cyclic, flat, fmt writes, gadget search.
+
+## When to use
+
+Call `PWN::Plugins::ExploitDev` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/exploit_dev.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::ExploitDev.help
+PWN::Plugins::ExploitDev.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `p8`
+- `p16`
+- `p32`
+- `p64`
+- `u8`
+- `u16`
+- `u32`
+- `u64`
+- `cyclic`
+- `cyclic_find`
+- `flat`
+- `shellcode`
+- `one_gadget`
+- `libc_offsets`
+- `fmt_writes`
+- `gadgets`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/exploit_dev.rb`
+
+## Verification
+
+`PWN::Plugins::ExploitDev.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/frida/SKILL.md

@@ -0,0 +1,51 @@
+---
+name: pwn-plugins-frida
+description: Drive PWN::Plugins::Frida from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Frida
+  source: pwn/plugins/frida.rb
+---
+
+# PWN::Plugins::Frida
+
+Frida attach/spawn + script injection.
+
+## When to use
+
+Call `PWN::Plugins::Frida` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/frida.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Frida.help
+PWN::Plugins::Frida.required_bins(opts)
+```
+
+## Public methods
+
+- `required_bins`
+- `ps`
+- `attach`
+- `spawn`
+- `ssl_pinning_script`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/frida.rb`
+
+## Verification
+
+`PWN::Plugins::Frida.respond_to?(:required_bins)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/fuzz/SKILL.md

@@ -34,6 +34,8 @@ PWN::Plugins::Fuzz.socket(opts)
 ## Public methods
 
 - `socket`
+- `http`
+- `file_format`
 - `authors`
 - `help`